Hallo,

vor 2 Wochen hatte ich das erste mal ein "eingefrorenes Fenster" in dem das "BKA" mich aufforderte, aufgrund "illegalen Softwarebesitzes", 150 € per Paysafe zu zahlen ... Das Fenster konnte ich allerdings nach kurzem wieder schließen. Beim gestrigen Surfen rief sich das Fenster erneut auf und forderte mich diesmal auf 150 Schweizer Franken mit - "irgendwas mit Uk..." - zu zahlen. Dieses Fenster lies sich nicht mehr schließen, jedoch verschwand es nach einem Neustart. Mit meinem System kann ich nach wie vor ohne Einschränkungen arbeiten. Allerdings interessiert mich jetzt langsam das "warum" und natürlich was ich mir "eingefangen" habe. Und ich hoffe ihr könnte mir helfen! Hier die geforderten Files nach eurer Anweisung:

Defogger:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:20 on 03/12/2013 (******)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-12-2013 02
Ran by Christian (administrator) on JETSIDE on 03-12-2013 20:26:02
Running from C:\Users\******\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) E:\Programme\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) E:\Programme\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) E:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Malwarebytes Corporation) E:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Malwarebytes Corporation) E:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) E:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Marvell Semiconductor, Inc.) C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) E:\Programme\Steam\Steam.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(Smartbar) C:\Users\Christian\AppData\Local\Smartbar\Application\QuickShare.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) E:\Programme\iTunes\iTunesHelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Electronic Arts) E:\Spiele\BF3\Origin.exe
(Electronic Arts) E:\Spiele\BF3\OriginClientService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Avira Operations GmbH & Co. KG) E:\Programme\Avira\AntiVir Desktop\avcenter.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12921488 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [MouseDriver] - C:\Windows\System32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKCU\...\Run: [Steam] - E:\Programme\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4288048 2013-04-11] ()
HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Christian\AppData\Local\Smartbar\Application\QuickShare.exe [20248 2013-09-14] (Smartbar)
MountPoints2: {f5cb500b-6a2b-11e2-be68-806e6f6e6963} - "G:\FalloutLauncher.exe" 
HKLM-x32\...\Run: [avgnt] - E:\Programme\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - E:\Programme\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-13] (Acer Incorporated)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL [ ] ()
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=4282711d-1f39-4da7-b736-5995a312603b&searchtype=ds&q={searchTerms}&installDate=04/11/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=4282711d-1f39-4da7-b736-5995a312603b&searchtype=ds&q={searchTerms}&installDate=04/11/2013
SearchScopes: HKLM - DefaultScope {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - DefaultScope {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=4282711d-1f39-4da7-b736-5995a312603b&searchtype=ds&q={searchTerms}&installDate=04/11/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=4282711d-1f39-4da7-b736-5995a312603b&searchtype=ds&q={searchTerms}&installDate=04/11/2013
SearchScopes: HKCU - {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = 
SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC8} URL = hxxp://search.icq.com/search/results.php?q=%s&ch_id=hm&search_mode=web
BHO: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\g8x3j0e9.default
FF user.js: detected! => C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\g8x3j0e9.default\user.js
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0-pre1 - E:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - E:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - E:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\g8x3j0e9.default\searchplugins\icq.xml
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF HKCU\...\Firefox\Extensions: [{586A6831-1198-48F5-9D2D-79B4664F0CE6}] - C:\Program Files (x86)\LyricsWatch\128.xpi
FF Extension: No Name - C:\Program Files (x86)\LyricsWatch\128.xpi
FF StartMenuInternet: FIREFOX.EXE - E:\Programme\Firefox\firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; E:\Programme\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; E:\Programme\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-23] (Acer Incorporated)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 MBAMScheduler; E:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; E:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1871032 2013-03-14] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-04] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [106904 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c63x64.sys [452432 2013-03-06] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-03 20:26 - 2013-12-03 20:26 - 00014929 _____ C:\Users\Christian\Desktop\FRST.txt
2013-12-03 20:25 - 2013-12-03 20:25 - 00000654 _____ C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRST64.lnk
2013-12-03 20:25 - 2013-12-03 20:25 - 00000000 ____D C:\FRST
2013-12-03 20:23 - 2013-12-03 20:24 - 01959614 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe
2013-12-03 20:20 - 2013-12-03 20:20 - 00000480 _____ C:\Users\Christian\Desktop\defogger_disable.log
2013-12-03 20:20 - 2013-12-03 20:20 - 00000000 _____ C:\Users\Christian\defogger_reenable
2013-12-03 20:19 - 2013-12-03 20:19 - 00050477 _____ C:\Users\Christian\Desktop\Defogger.exe
2013-12-03 20:19 - 2013-12-03 20:19 - 00000000 ____D C:\Program Files (x86)\iMesh Applications
2013-12-03 18:41 - 2013-12-03 18:41 - 00377856 _____ C:\Users\Christian\Desktop\gmer_2.1.19163.exe
2013-12-02 22:39 - 2013-12-02 22:39 - 00000000 ____D C:\Windows\pss
2013-12-02 22:17 - 2013-12-02 22:17 - 00000758 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-02 22:17 - 2013-12-02 22:17 - 00000000 ____D C:\Users\Christian\AppData\Roaming\Malwarebytes
2013-12-02 22:17 - 2013-12-02 22:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-02 22:17 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-02 16:45 - 2013-12-02 16:45 - 00000000 ____D C:\Windows\LastGood
2013-12-02 16:45 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-02 16:45 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-11-29 17:59 - 2013-11-29 17:59 - 00000000 ____D C:\Windows\LastGood.Tmp
2013-11-29 17:58 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-29 17:58 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-24 20:33 - 2013-11-24 20:33 - 00421792 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-23 15:36 - 2013-11-23 15:37 - 00000000 ____D C:\Windows\system32\MRT
2013-11-23 15:36 - 2013-11-23 15:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-22 15:40 - 2013-11-22 15:40 - 00001008 _____ C:\Users\Christian\Desktop\Fallout3ng - Verknüpfung.lnk
2013-11-19 19:47 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-19 19:47 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-19 19:47 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-19 19:47 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-19 19:47 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-19 19:47 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-19 19:46 - 2013-10-10 12:53 - 00096600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2013-11-19 19:46 - 2013-10-10 10:21 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-19 19:46 - 2013-10-10 10:20 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-11-19 19:46 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-19 19:46 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-19 19:46 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-19 19:46 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-19 19:46 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-19 19:46 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-19 19:46 - 2013-09-14 02:15 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-11-19 19:46 - 2013-09-13 23:36 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-11-19 19:46 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2013-11-19 19:46 - 2013-09-13 23:36 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-11-19 19:46 - 2013-09-13 23:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-11-19 19:46 - 2013-09-13 23:36 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-11-19 19:46 - 2013-09-13 23:34 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-11-19 19:46 - 2013-09-13 23:33 - 03279360 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-11-19 19:46 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-19 19:46 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2013-11-19 19:46 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2013-11-19 19:46 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2013-11-19 19:46 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-11-19 19:46 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-11-19 19:46 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-11-19 19:46 - 2013-08-16 06:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-11-19 19:46 - 2013-08-16 06:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-11-19 19:46 - 2013-08-15 23:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-11-19 19:46 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2013-11-19 19:46 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-11-19 19:46 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-11-19 19:46 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2013-11-19 19:46 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2013-11-19 19:46 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2013-11-19 19:46 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2013-11-19 19:40 - 2013-12-02 16:46 - 00000000 ____D C:\Users\Christian\AppData\Local\NVIDIA Corporation
2013-11-19 19:40 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-19 19:40 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-19 19:40 - 2013-08-02 07:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-11-19 19:40 - 2013-08-02 06:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-11-19 19:31 - 2013-11-19 21:51 - 105225210 _____ C:\Windows\SysWOW64\᯾瞡Ė߿
2013-11-15 17:22 - 2013-11-15 17:22 - 00000674 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-15 17:11 - 2013-11-15 17:11 - 00001542 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\Program Files\iTunes
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\Program Files\iPod
2013-11-15 17:07 - 2013-11-15 17:07 - 00001809 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2013-11-15 17:07 - 2013-11-15 17:07 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-04 21:31 - 2013-08-03 07:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-11-04 21:31 - 2013-08-03 07:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-11-04 21:31 - 2013-08-03 07:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-11-04 21:31 - 2013-08-03 06:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2013-11-04 21:31 - 2013-08-03 06:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2013-11-04 21:31 - 2013-08-03 06:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2013-11-04 21:30 - 2013-08-10 06:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2013-11-04 21:30 - 2013-08-10 06:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2013-11-04 21:30 - 2013-08-10 04:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-11-04 21:30 - 2013-08-02 07:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-11-04 21:30 - 2013-08-02 07:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-11-04 21:30 - 2013-08-02 06:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-11-04 21:30 - 2013-08-02 06:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-11-04 21:30 - 2013-08-01 11:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-11-04 21:30 - 2013-07-31 00:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml
2013-11-04 21:30 - 2013-07-25 00:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-11-04 21:30 - 2013-07-25 00:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2013-11-04 21:30 - 2013-04-10 00:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2013-11-04 21:30 - 2013-04-09 23:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-11-04 21:22 - 2013-07-06 01:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-11-04 21:22 - 2013-07-05 23:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-11-04 21:22 - 2013-07-04 03:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-11-04 21:22 - 2013-07-01 23:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-11-04 21:22 - 2013-07-01 23:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-11-04 21:22 - 2013-06-29 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-11-04 21:22 - 2013-06-29 04:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-11-04 21:22 - 2013-06-22 06:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-11-04 21:22 - 2013-06-22 06:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-11-04 21:21 - 2013-08-23 06:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-11-04 21:21 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-04 21:21 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-04 21:21 - 2013-07-02 02:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-11-04 21:21 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-11-04 21:21 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-11-04 21:21 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-04 21:21 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-04 21:21 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-04 21:21 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-11-04 21:21 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-04 21:21 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-04 21:21 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-11-04 21:21 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-11-04 21:21 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-11-04 21:21 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-11-04 20:45 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll
2013-11-04 20:45 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll
2013-11-04 20:45 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-11-04 20:44 - 2013-08-07 06:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-11-04 20:43 - 2013-11-29 17:56 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-04 20:43 - 2013-11-29 17:56 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-04 15:05 - 2013-11-04 15:18 - 00000673 _____ C:\Users\Public\Desktop\Battlefield 4.lnk
2013-11-04 15:05 - 2013-11-04 15:18 - 00000657 _____ C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2013-11-04 15:04 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-11-04 15:04 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-11-04 15:04 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-11-04 15:04 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-11-04 15:04 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-11-04 15:04 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-11-04 15:04 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-11-04 15:04 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

==================== One Month Modified Files and Folders =======

2013-12-03 20:26 - 2013-12-03 20:26 - 00014929 _____ C:\Users\Christian\Desktop\FRST.txt
2013-12-03 20:26 - 2013-04-11 16:37 - 00000000 ____D C:\Users\Christian\AppData\Local\PMB Files
2013-12-03 20:25 - 2013-12-03 20:25 - 00000654 _____ C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRST64.lnk
2013-12-03 20:25 - 2013-12-03 20:25 - 00000000 ____D C:\FRST
2013-12-03 20:24 - 2013-12-03 20:23 - 01959614 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe
2013-12-03 20:20 - 2013-12-03 20:20 - 00000480 _____ C:\Users\Christian\Desktop\defogger_disable.log
2013-12-03 20:20 - 2013-12-03 20:20 - 00000000 _____ C:\Users\Christian\defogger_reenable
2013-12-03 20:20 - 2013-04-04 21:24 - 00000000 ____D C:\Users\Christian
2013-12-03 20:19 - 2013-12-03 20:19 - 00050477 _____ C:\Users\Christian\Desktop\Defogger.exe
2013-12-03 20:19 - 2013-12-03 20:19 - 00000000 ____D C:\Program Files (x86)\iMesh Applications
2013-12-03 20:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-12-03 18:41 - 2013-12-03 18:41 - 00377856 _____ C:\Users\Christian\Desktop\gmer_2.1.19163.exe
2013-12-03 18:36 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-03 18:36 - 2012-07-26 03:43 - 00751892 _____ C:\Windows\system32\perfh007.dat
2013-12-03 18:36 - 2012-07-26 03:43 - 00155620 _____ C:\Windows\system32\perfc007.dat
2013-12-03 18:29 - 2013-04-06 12:13 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-02 22:39 - 2013-12-02 22:39 - 00000000 ____D C:\Windows\pss
2013-12-02 22:31 - 2013-04-12 19:54 - 00000000 ____D C:\Users\Christian\AppData\Local\CrashDumps
2013-12-02 22:17 - 2013-12-02 22:17 - 00000758 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-02 22:17 - 2013-12-02 22:17 - 00000000 ____D C:\Users\Christian\AppData\Roaming\Malwarebytes
2013-12-02 22:17 - 2013-12-02 22:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-02 19:01 - 2013-04-06 16:12 - 00000000 ____D C:\Users\Christian\AppData\Roaming\Skype
2013-12-02 17:55 - 2013-04-05 11:39 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-02 17:00 - 2013-04-05 11:39 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-02 16:46 - 2013-11-19 19:40 - 00000000 ____D C:\Users\Christian\AppData\Local\NVIDIA Corporation
2013-12-02 16:46 - 2013-09-30 20:47 - 00000000 ____D C:\Users\Christian\AppData\Local\NVIDIA
2013-12-02 16:46 - 2013-04-06 12:13 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-02 16:45 - 2013-12-02 16:45 - 00000000 ____D C:\Windows\LastGood
2013-12-02 16:45 - 2013-04-06 12:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-02 16:45 - 2013-01-29 17:09 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-29 17:59 - 2013-11-29 17:59 - 00000000 ____D C:\Windows\LastGood.Tmp
2013-11-29 17:56 - 2013-11-04 20:43 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-11-04 20:43 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-29 17:19 - 2013-04-06 16:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-29 17:19 - 2013-04-06 16:12 - 00000000 ____D C:\ProgramData\Skype
2013-11-29 17:16 - 2013-04-06 17:00 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-11-28 21:35 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-11-27 16:25 - 2013-07-12 17:59 - 00000000 ____D C:\Users\Christian\AppData\Local\Adobe
2013-11-27 16:24 - 2012-09-07 12:47 - 00000000 ____D C:\ProgramData\McAfee
2013-11-25 18:03 - 2013-05-08 16:00 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-25 18:03 - 2013-04-04 22:02 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-25 18:03 - 2013-04-04 22:02 - 00106904 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-11-25 18:03 - 2013-04-04 22:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-24 20:33 - 2013-11-24 20:33 - 00421792 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-23 15:46 - 2013-04-04 21:25 - 00000000 ___RD C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-23 15:46 - 2013-04-04 21:25 - 00000000 ___RD C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ToastData
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\WinStore
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-11-23 15:45 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\oobe
2013-11-23 15:42 - 2013-04-12 18:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-23 15:37 - 2013-11-23 15:36 - 00000000 ____D C:\Windows\system32\MRT
2013-11-23 15:36 - 2013-11-23 15:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-23 15:34 - 2012-07-26 06:26 - 00000199 _____ C:\Windows\win.ini
2013-11-23 15:33 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-11-22 15:40 - 2013-11-22 15:40 - 00001008 _____ C:\Users\Christian\Desktop\Fallout3ng - Verknüpfung.lnk
2013-11-21 20:00 - 2012-09-07 12:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-19 21:51 - 2013-11-19 19:31 - 105225210 _____ C:\Windows\SysWOW64\᯾瞡Ė߿
2013-11-15 18:26 - 2013-08-16 07:22 - 00000000 ____D C:\Program Files (x86)\LyricsWatch
2013-11-15 17:34 - 2013-07-05 17:38 - 00000898 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-11-15 17:28 - 2013-08-18 14:01 - 00000614 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-15 17:22 - 2013-11-15 17:22 - 00000674 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-15 17:11 - 2013-11-15 17:11 - 00001542 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\Program Files\iTunes
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\Program Files\iPod
2013-11-15 17:07 - 2013-11-15 17:07 - 00001809 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2013-11-15 17:07 - 2013-11-15 17:07 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-11-14 12:56 - 2013-11-29 17:58 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-29 17:58 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-14 12:56 - 2013-09-30 20:43 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-11 16:02 - 2013-04-06 12:13 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2013-04-06 12:13 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2013-04-06 12:13 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2013-11-11 16:01 - 2013-04-06 12:13 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2013-04-06 12:13 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2013-04-06 12:13 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2013-04-06 12:13 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 20:36 - 2013-04-06 17:01 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-11-07 16:00 - 2013-04-04 22:10 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-06 11:59 - 2013-04-12 18:28 - 00000768 _____ C:\Users\Christian\Desktop\Neues Textdokument.txt
2013-11-05 23:58 - 2012-07-26 09:14 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-05 23:58 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-04 15:18 - 2013-11-04 15:05 - 00000673 _____ C:\Users\Public\Desktop\Battlefield 4.lnk
2013-11-04 15:18 - 2013-11-04 15:05 - 00000657 _____ C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2013-11-04 15:04 - 2013-04-05 11:39 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-11-04 12:47 - 2013-07-05 17:38 - 00000000 ____D C:\Users\Christian\AppData\Local\Smartbar

Some content of TEMP:
====================
C:\Users\Christian\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-09 11:03

==================== End Of Log ============================
         

Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-12-2013 02
Ran by Christian at 2013-12-03 20:26:21
Running from C:\Users\Christian\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.1925)
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2008)
Acer Power Management (Version: 7.00.3006)
Acer Recovery Management (Version: 6.00.3011)
AcerCloud (x32 Version: 2.01.3115)
AcerCloud Docs (x32 Version: 1.00.3201)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Free Antivirus (x32 Version: 14.0.1.749)
Battlefield 3™ (x32 Version: 1.0.0.0)
Battlefield 4™ (x32 Version: 1.0.0.1)
Battlelog Web Plugins (x32 Version: 2.3.2)
BioShock Infinite (x32)
Bonjour (Version: 3.0.0.10)
BufferChm (x32 Version: 140.0.298.000)
CCleaner (Version: 4.07)
clear.fi Media (x32 Version: 2.01.3108)
clear.fi Photo (x32 Version: 2.01.3108)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3318_45364)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
Destinations (x32 Version: 140.0.0.0)
DocProc (x32 Version: 140.0.185.000)
Empire: Total War (x32)
ESN Sonar (x32 Version: 0.70.4)
Fallout 3 (x32 Version: 1.00.0000)
GeForce Experience NvStream Client Components (Version: 1.6.28)
Hotkey Utility (x32 Version: 3.00.3003)
HP Imaging Device Functions 14.5 (Version: 14.5)
HP Scanjet G4010 (Version: 14.5)
HP Update (x32 Version: 5.005.000.001)
hpg4010 (x32 Version: 140.000.000.000)
Identity Card (x32 Version: 2.00.3004)
Intel(R) Control Center (x32 Version: 1.2.1.1008)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1281)
Intel(R) Network Connections 17.2.153.0 (Version: 17.2.153.0)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.4.1001)
Intel® Trusted Connect Service Client (Version: 1.24.738.1)
iTunes (Version: 11.1.3.8)
Live Updater (x32 Version: 2.00.3004)
LyricsWatch (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Metro: Last Light (x32)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 1.2.0241)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Mozilla Firefox 23.0 (x86 de) (x32 Version: 23.0)
Mozilla Firefox 25.0.1 (x86 de) (HKCU Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 23.0)
MyWinLocker (Version: 4.0.14.35)
MyWinLocker 4 (x32 Version: 4.0.14.35)
MyWinLocker Suite (x32 Version: 4.0.14.24)
Nero 12 Essentials OEM.a01 (x32 Version: 12.5.00000)
Nero ControlCenter (x32 Version: 11.0.14500.0.45)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.0003)
Nero Core Components (x32 Version: 11.0.16900.1.27)
Nero Express (x32 Version: 12.0.16001)
Nero Express Help (CHM) (x32 Version: 12.0.1000)
Nero Launcher (x32 Version: 12.0.3000)
Nero Update (x32 Version: 11.0.11500.28.0)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.8 (Version: 1.8)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.142.992)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA Network Service (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 10.10.5 (Version: 10.10.5)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 10.10.5 (Version: 10.10.5)
NVIDIA Update Core (Version: 10.10.5)
NVIDIA Virtual Audio 1.2.12 (Version: 1.2.12)
OCR Software by I.R.I.S. 14.5 (Version: 14.5)
Office Addin (x32 Version: 2.01.3200)
Origin (x32 Version: 9.1.15.109)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
Pando Media Booster (x32 Version: 2.6.0.9)
PlanetSide 2 (HKCU Version: 1.0.3.183)
Prerequisite installer (x32 Version: 12.0.0002)
PunkBuster Services (x32 Version: 0.993)
QuickShare (x32 Version: 1.146.60.12450)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6680)
Realtek USB 2.0 Card Reader (x32 Version: 6.2.8400.30137)
Scan (x32 Version: 14.0.1.0)
Shared C Run-time for x64 (Version: 10.0.0)
SHIELD Streaming (Version: 1.6.75)
Shredder (Version: 2.0.8.9)
Shredder (x32 Version: 2.0.8.9)
Sid Meier's Civilization V (x32)
Skype™ 6.11 (x32 Version: 6.11.102)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
Total War: ROME II (x32)
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition
Update for Microsoft InfoPath 2013 (KB2752078) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2825630) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760257) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817309) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817311) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817640) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837643) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837649) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2837642) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2817625) 64-Bit Edition
Update for Microsoft Project 2013 (KB2767859) 64-Bit Edition
Update for Microsoft Publisher 2013 (KB2752097) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition
Update for Microsoft Visio 2013 (KB2752018) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition
Update for Microsoft Word 2013 (KB2817631) 64-Bit Edition
Update for Microsoft Word 2013 (KB2837630) 64-Bit Edition
Visual Studio 2005 Tools for Office Second Edition Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729)
Visual Studio Tools for the Office system 3.0 Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1)
VLC media player 2.1.1 (Version: 2.1.1)
WebReg (x32 Version: 140.0.297.017)
WORLD IN CONFLICT: SOVIET ASSAULT (x32 Version: 1.0.1.0)
World of Tanks (x32)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {053F1CC7-2ACC-4E22-83AD-B174CCF0CA56} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-30] ()
Task: {191529CA-299D-4087-89D5-13A58DB8E8BF} - System32\Tasks\{FB4266B1-56E1-4EDF-89AC-800CA053A0DB} => Firefox.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsProgressBar
Task: {21957C9F-E53D-4E13-A601-16081B9E0C2C} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-18] (CyberLink)
Task: {2335E49C-4E78-4A75-B129-CF3FE138860F} - System32\Tasks\Show-Lyrics Update => C:\Program Files (x86)\ShowLrcs\ShwLrcs.exe
Task: {2CB4DF4B-0311-4A77-A689-D6871B160427} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Jetside-Christian Jetside => C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE [2012-10-01] (Microsoft Corporation)
Task: {35C78E87-9ECA-4623-8179-947DE2BBA38C} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\microsoft shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {3F1CBC8A-8ED0-442E-9D84-2A8315C0E120} - System32\Tasks\LyricsWatch Update => C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe
Task: {4DDAAE91-4DDD-4877-A935-3EC3D579AC48} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {561D6E96-FB27-4BCA-9F43-40E7DB34518E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {7ED12B70-4046-4E6F-8A74-8BF7E16339D1} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {85F64885-0EC7-4454-A029-5B7182F69742} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PmmUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {89B97BAB-F9C9-4C87-91EC-8E340E14915D} - System32\Tasks\Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [2012-08-06] (Acer Incorporated)
Task: {8A26DFDA-D4F9-4301-B85E-B856437CE3C5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {8B597FB6-3D96-48B4-B7A9-B530BCAA4F29} - System32\Tasks\{D3DBD56F-515C-42BA-A061-5AA1A88D38DC} => Firefox.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsBing
Task: {9D87A9FE-7142-4017-A414-D821C9D1ECE6} - System32\Tasks\FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl => C:\Users\Christian\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\MinibarChrome.exe
Task: {BAD75598-FA62-4889-A936-7AC18D6E8661} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {D80C1594-5DFC-4382-B166-6C3BDB6B1B40} - System32\Tasks\Microsoft\Office\Office First Run Task => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-03-14] (Microsoft Corporation)
Task: {DF689730-B252-42AD-A7B2-3E4521C6E706} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe
Task: {EF30CA27-618A-44E7-BB17-28425D41BA47} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-22] (Acer Incorporated)
Task: {F5BEE7CC-8F5F-455B-A301-2C832C6E6D0E} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: C:\Windows\Tasks\LyricsWatch Update.job => C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe
Task: C:\Windows\Tasks\Show-Lyrics Update.job => C:\Program Files (x86)\ShowLrcs\ShwLrcs.exe

==================== Loaded Modules (whitelisted) =============

2012-06-22 02:12 - 2012-06-22 02:12 - 01407568 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2013-04-04 22:02 - 2013-01-25 08:25 - 00397704 _____ () E:\Programme\Avira\AntiVir Desktop\sqlite3.dll
2013-01-28 12:08 - 2013-01-28 12:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 12:08 - 2013-01-28 12:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-11-04 14:00 - 2013-10-24 18:45 - 00691200 _____ () E:\Programme\Steam\SDL2.dll
2013-11-04 14:00 - 2013-10-30 20:25 - 01123240 _____ () E:\Programme\Steam\bin\chromehtml.DLL
2013-11-04 14:00 - 2013-10-23 21:07 - 20625832 _____ () E:\Programme\Steam\bin\libcef.dll
2013-07-09 18:12 - 2013-06-15 00:49 - 01100800 _____ () E:\Programme\Steam\bin\avcodec-53.dll
2013-07-09 18:12 - 2013-06-15 00:49 - 00124416 _____ () E:\Programme\Steam\bin\avutil-51.dll
2013-07-09 18:12 - 2013-06-15 00:49 - 00192000 _____ () E:\Programme\Steam\bin\avformat-53.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00033560 _____ () C:\Users\******\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00055064 _____ () C:\Users\******\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00149784 _____ () C:\Users\******\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00111896 _____ () C:\Users\******\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 01808152 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00055576 _____ () C:\Users\******\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00012568 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00048408 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.PublisherSettingsManager.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00725272 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00081176 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00013592 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00016664 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00029464 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00019736 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00057112 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00013592 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00014104 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00051480 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00047384 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2013-09-14 21:50 - 2013-09-14 21:50 - 00025368 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00024856 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2013-09-14 21:51 - 2013-09-14 21:51 - 00245528 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll
2013-01-29 17:11 - 2012-07-18 04:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-22 19:46 - 2013-11-22 19:46 - 00064000 _____ () E:\Spiele\BF3\tufao.dll
2013-05-09 06:05 - 2013-05-09 06:05 - 00092440 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll
2013-05-09 06:05 - 2013-05-09 06:05 - 00136472 _____ () C:\Users\Christian\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/03/2013 08:26:25 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:26:25Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:25:55 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:25:55Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:25:25 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:25:25Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:24:55 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:24:55Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:24:25 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:24:25Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:23:55 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:23:55Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:23:25 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:23:25Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:22:55 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:22:55Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:22:25 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:22:25Z. Fehlercode: 0x80040154.

Error: (12/03/2013 08:21:55 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-09T19:21:55Z. Fehlercode: 0x80040154.


System errors:
=============
Error: (12/02/2013 10:40:26 PM) (Source: DCOM) (User: Jetside)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (12/02/2013 10:40:16 PM) (Source: DCOM) (User: Jetside)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (12/02/2013 10:40:03 PM) (Source: DCOM) (User: Jetside)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (12/02/2013 10:39:58 PM) (Source: DCOM) (User: Jetside)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (12/02/2013 10:39:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" ist vom Dienst "DHCP-Client" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/02/2013 10:39:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" ist vom Dienst "DHCP-Client" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/02/2013 10:39:49 PM) (Source: DCOM) (User: Jetside)
Description: 1084WSearchNicht verfügbar{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (12/02/2013 10:39:49 PM) (Source: DCOM) (User: Jetside)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (12/02/2013 10:39:44 PM) (Source: DCOM) (User: Jetside)
Description: 1068netprofmNicht verfügbar{A47979D2-C419-11D9-A5B4-001185AD2B89}

Error: (12/02/2013 10:39:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (12/03/2013 08:26:25 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:26:25Z

Error: (12/03/2013 08:25:55 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:25:55Z

Error: (12/03/2013 08:25:25 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:25:25Z

Error: (12/03/2013 08:24:55 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:24:55Z

Error: (12/03/2013 08:24:25 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:24:25Z

Error: (12/03/2013 08:23:55 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:23:55Z

Error: (12/03/2013 08:23:25 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:23:25Z

Error: (12/03/2013 08:22:55 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:22:55Z

Error: (12/03/2013 08:22:25 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:22:25Z

Error: (12/03/2013 08:21:55 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-09T19:21:55Z


==================== Memory info =========================== 

Percentage of memory in use: 24%
Total physical RAM: 8131.53 MB
Available physical RAM: 6104.06 MB
Total Pagefile: 9347.53 MB
Available Pagefile: 6782.06 MB
Total Virtual: 8192 MB
Available Virtual: 8191.74 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:59.01 GB) (Free:7.96 GB) NTFS
Drive e: (DATA) (Fixed) (Total:2769.52 GB) (Free:2531.62 GB) NTFS
Drive g: (Fallout 3) (CDROM) (Total:5.6 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 60 GB) (Disk ID: 5ACD153B)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 2795 GB) (Disk ID: 5ACD16C6)

Partition: GPT Partition Type
==================== End Of Log ============================
         

GMER:

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-12-03 20:43:36
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\0000003b LITEONIT_LCT-64M3S rev.VTC4 59,63GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\******\AppData\Local\Temp\awdoypoc.sys


---- User code sections - GMER 2.1 ----

.text   C:\Windows\system32\dwm.exe[480] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                                       000007fe5545177a 4 bytes [45, 55, FE, 07]
.text   C:\Windows\system32\dwm.exe[480] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                                       000007fe55451782 4 bytes [45, 55, FE, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1084] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690                   000007fe51ff1532 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1084] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698                   000007fe51ff153a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1084] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                 000007fe51ff165a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Windows\system32\nvvsvc.exe[1092] C:\Windows\system32\MSIMG32.dll!GradientFill + 690                                             000007fe51ff1532 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Windows\system32\nvvsvc.exe[1092] C:\Windows\system32\MSIMG32.dll!GradientFill + 698                                             000007fe51ff153a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Windows\system32\nvvsvc.exe[1092] C:\Windows\system32\MSIMG32.dll!TransparentBlt + 246                                           000007fe51ff165a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Windows\system32\nvvsvc.exe[1092] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                                   000007fe5545177a 4 bytes [45, 55, FE, 07]
.text   C:\Windows\system32\nvvsvc.exe[1092] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                                   000007fe55451782 4 bytes [45, 55, FE, 07]
.text   C:\Windows\Explorer.EXE[1504] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                                          000007fe5545177a 4 bytes [45, 55, FE, 07]
.text   C:\Windows\Explorer.EXE[1504] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                                          000007fe55451782 4 bytes [45, 55, FE, 07]
.text   C:\Windows\Explorer.EXE[1504] C:\Windows\SYSTEM32\WSOCK32.dll!recvfrom + 742                                                        000007fe4d311b32 4 bytes [31, 4D, FE, 07]
.text   C:\Windows\Explorer.EXE[1504] C:\Windows\SYSTEM32\WSOCK32.dll!recvfrom + 750                                                        000007fe4d311b3a 4 bytes [31, 4D, FE, 07]
.text   C:\Windows\Explorer.EXE[1504] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690                                                    000007fe51ff1532 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Windows\Explorer.EXE[1504] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698                                                    000007fe51ff153a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Windows\Explorer.EXE[1504] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                                  000007fe51ff165a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Windows\System32\spoolsv.exe[1732] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                                  000007fe5545177a 4 bytes [45, 55, FE, 07]
.text   C:\Windows\System32\spoolsv.exe[1732] C:\Windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                                  000007fe55451782 4 bytes [45, 55, FE, 07]
.text   C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[2736] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690                            000007fe51ff1532 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[2736] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698                            000007fe51ff153a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[2736] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                          000007fe51ff165a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe[2952] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690    000007fe51ff1532 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe[2952] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698    000007fe51ff153a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe[2952] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246  000007fe51ff165a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[9200] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690                     000007fe51ff1532 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[9200] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698                     000007fe51ff153a 4 bytes {CALL QWORD [RCX-0x2]}
.text   C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[9200] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                   000007fe51ff165a 4 bytes {CALL QWORD [RCX-0x2]}

---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\csrss.exe [596:620]                                                                                             fffff9600092b5e8

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                                               unknown MBR code

---- EOF - GMER 2.1 ----
         

Avira: (aktueller Virenscann von heute brachte keine Funde)

Exportierte Ereignisse:

15.11.2013 18:26 [System-Scanner] Malware gefunden
      Die Datei 'C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe'
      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5701f444.qua' 
      verschoben!
         

Die Malewarbytes Anti-Maleware (Logfile) passte hier leider nicht mehr hin ... Kann diese aber - nach Aufforderung - gerne anhängen. Danke im Voraus!

Hallo und


Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Hallo Cosinus! Vielen Dank für die schnelle Reaktion!

Beim Starten des Rootkit kam folgende Meldung:

"Probable root-kit activity detected!

Registry value "Applnit_Dlls" has been found, wich may be caused by rootkit activity. Press "No" if you not sure, Press "Yes" ...

Do you want to remove this value and restart tool?"

Interessanterweise hatte ich bei "No" überhaupt keine Auswahl, da das Feld "Grau" hinterlegt war, habe abgebrochen und das Tool neu gestartet, selbe Fehlermeldung wie oben und "No" erneut "Grau" unterlegt. Habe daher "Yes" gedrückt. Hier das Logfile:

Malwarebytes Anti-Rootkit BETA 1.07.0.1007
www.malwarebytes.org

Database version: v2013.12.04.06

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16736
****** :: JETSIDE [administrator]

04.12.2013 16:21:06
mbar-log-2013-12-04 (16-21-06).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 230452
Time elapsed: 3 minute(s), 20 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Malewarbytes Anti-Maleware zeigt mir allerdings immer noch knapp 950 "Probleme" an.

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

AdwCleaner:

# AdwCleaner v3.014 - Bericht erstellt am 04/12/2013 um 17:20:14
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : ****** - JETSIDE
# Gestartet von : C:\Users\******\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\Program Files (x86)\iMesh Applications
Ordner Gelöscht : C:\Users\Christian\AppData\Local\Smartbar
Ordner Gelöscht : C:\Users\CHRIST~1\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Users\Christian\AppData\LocalLow\Smartbar
Datei Gelöscht : C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\g8x3j0e9.default\user.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC8}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\smartbarbackup
Schlüssel Gelöscht : HKCU\Software\smartbarlog
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16537

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v23.0 (de)

[ Datei : C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\g8x3j0e9.default\prefs.js ]

Zeile gelöscht : user_pref("iminent.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.ShowThankyouPixel", "0");
Zeile gelöscht : user_pref("iminent.displayFavLinks", "1");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent102", "1384037491473");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent140", "1384459272026");
Zeile gelöscht : user_pref("iminent.version", "7.43.4.1");
Zeile gelöscht : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.33.3.1\",\"InstallEventCTime\":1376830674240,\"InstallEvent\":\"True\",\"UpdateEventCTime\":1384532577572}");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.SOFTONICREFRESHRATE", "140000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.ShowThankyouPixel", "0");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent102", "1376588706950");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1375579792394");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.FavLinkSplitTestingClass", "v1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.SOFTONICREFRESHRATE", "140000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.displayFavLinks", "1");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1375981404614");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1375981404618");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1375981408434");
Zeile gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1375981404620");

*************************

AdwCleaner[R0].txt - [18812 octets] - [04/12/2013 17:19:13]
AdwCleaner[S0].txt - [17192 octets] - [04/12/2013 17:20:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17253 octets] ##########
         

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 8 x64
Ran by ****** on 04.12.2013 at 17:24:44,30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\lyricswatch



~~~ Files

Successfully deleted: [File] C:\Windows\Tasks\LyricsWatch Update.job
Successfully deleted: [File] C:\Windows\Tasks\Show-Lyrics Update.job



~~~ Folders

Failed to delete: [Folder] "C:\Program Files (x86)\lyricswatch"
Failed to delete: [Folder] "C:\Program Files (x86)\showlrcs"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.12.2013 at 17:27:23,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-12-2013 02
Ran by ****** (administrator) on JETSIDE on 04-12-2013 17:36:40
Running from C:\Users\******\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) E:\Programme\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) E:\Programme\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) E:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Marvell Semiconductor, Inc.) C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(Avira Operations GmbH & Co. KG) E:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) E:\Programme\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12921488 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [MouseDriver] - C:\Windows\System32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKCU\...\Run: [Steam] - E:\Programme\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4288048 2013-04-11] ()
MountPoints2: {f5cb500b-6a2b-11e2-be68-806e6f6e6963} - "G:\FalloutLauncher.exe" 
HKLM-x32\...\Run: [avgnt] - E:\Programme\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - E:\Programme\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-13] (Acer Incorporated)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
SearchScopes: HKLM - DefaultScope {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = 
SearchScopes: HKCU - {8A6B68CF-FC92-4567-9825-B6F037741DCF} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\g8x3j0e9.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0-pre1 - E:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - E:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - E:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\g8x3j0e9.default\searchplugins\icq.xml
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF HKCU\...\Firefox\Extensions: [{586A6831-1198-48F5-9D2D-79B4664F0CE6}] - C:\Program Files (x86)\LyricsWatch\128.xpi
FF Extension: No Name - C:\Program Files (x86)\LyricsWatch\128.xpi
FF StartMenuInternet: FIREFOX.EXE - E:\Programme\Firefox\firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; E:\Programme\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; E:\Programme\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-23] (Acer Incorporated)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
S2 MBAMScheduler; E:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; E:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1871032 2013-03-14] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-04] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [106904 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c63x64.sys [452432 2013-03-06] (Intel Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-04 17:27 - 2013-12-04 17:36 - 00012312 _____ C:\Users\Christian\Desktop\FRST.txt
2013-12-04 17:27 - 2013-12-04 17:27 - 00000986 _____ C:\Users\Christian\Desktop\JRT.txt
2013-12-04 17:24 - 2013-12-04 17:24 - 00000000 ____D C:\Windows\ERUNT
2013-12-04 17:19 - 2013-12-04 17:20 - 00000000 ____D C:\AdwCleaner
2013-12-04 17:16 - 2013-12-04 17:16 - 01034531 _____ (Thisisu) C:\Users\Christian\Desktop\JRT.exe
2013-12-04 17:15 - 2013-12-04 17:15 - 01110034 _____ C:\Users\Christian\Desktop\adwcleaner.exe
2013-12-04 16:21 - 2013-12-04 16:21 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-04 16:09 - 2013-12-04 16:28 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-04 16:08 - 2013-12-04 16:20 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-03 21:12 - 2013-12-03 21:12 - 01110476 _____ C:\Users\Christian\Downloads\7z920.exe
2013-12-03 20:39 - 2013-12-04 17:20 - 00098380 _____ C:\Windows\WindowsUpdate.log
2013-12-03 20:25 - 2013-12-03 20:25 - 00000654 _____ C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRST64.lnk
2013-12-03 20:25 - 2013-12-03 20:25 - 00000000 ____D C:\FRST
2013-12-03 20:23 - 2013-12-03 20:24 - 01959614 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe
2013-12-03 20:20 - 2013-12-03 20:20 - 00000000 _____ C:\Users\Christian\defogger_reenable
2013-12-03 20:19 - 2013-12-03 20:19 - 00050477 _____ C:\Users\Christian\Desktop\Defogger.exe
2013-12-03 18:41 - 2013-12-03 18:41 - 00377856 _____ C:\Users\Christian\Desktop\gmer_2.1.19163.exe
2013-12-02 22:39 - 2013-12-02 22:39 - 00000000 ____D C:\Windows\pss
2013-12-02 22:17 - 2013-12-02 22:17 - 00000758 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-02 22:17 - 2013-12-02 22:17 - 00000000 ____D C:\Users\Christian\AppData\Roaming\Malwarebytes
2013-12-02 22:17 - 2013-12-02 22:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-02 22:17 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-02 16:45 - 2013-12-02 16:45 - 00000000 ____D C:\Windows\LastGood
2013-12-02 16:45 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-02 16:45 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-11-29 17:59 - 2013-11-29 17:59 - 00000000 ____D C:\Windows\LastGood.Tmp
2013-11-29 17:58 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-29 17:58 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-29 17:58 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-24 20:33 - 2013-11-24 20:33 - 00421792 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-23 15:36 - 2013-11-23 15:37 - 00000000 ____D C:\Windows\system32\MRT
2013-11-23 15:36 - 2013-11-23 15:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-22 15:40 - 2013-11-22 15:40 - 00001008 _____ C:\Users\Christian\Desktop\Fallout3ng - Verknüpfung.lnk
2013-11-19 19:47 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-19 19:47 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-19 19:47 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-19 19:47 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-19 19:47 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-19 19:47 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-19 19:47 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-19 19:47 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-19 19:46 - 2013-10-10 12:53 - 00096600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2013-11-19 19:46 - 2013-10-10 10:21 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-19 19:46 - 2013-10-10 10:20 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-11-19 19:46 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-19 19:46 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-19 19:46 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-19 19:46 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-19 19:46 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-19 19:46 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-19 19:46 - 2013-09-14 02:15 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-11-19 19:46 - 2013-09-13 23:36 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-11-19 19:46 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2013-11-19 19:46 - 2013-09-13 23:36 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-11-19 19:46 - 2013-09-13 23:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-11-19 19:46 - 2013-09-13 23:36 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-11-19 19:46 - 2013-09-13 23:34 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-11-19 19:46 - 2013-09-13 23:33 - 03279360 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-11-19 19:46 - 2013-09-13 23:33 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-11-19 19:46 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-19 19:46 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2013-11-19 19:46 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2013-11-19 19:46 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2013-11-19 19:46 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-11-19 19:46 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-11-19 19:46 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-11-19 19:46 - 2013-08-16 06:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-11-19 19:46 - 2013-08-16 06:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-11-19 19:46 - 2013-08-15 23:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-11-19 19:46 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2013-11-19 19:46 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-11-19 19:46 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-11-19 19:46 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2013-11-19 19:46 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2013-11-19 19:46 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2013-11-19 19:46 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2013-11-19 19:40 - 2013-12-02 16:46 - 00000000 ____D C:\Users\Christian\AppData\Local\NVIDIA Corporation
2013-11-19 19:40 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-19 19:40 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-19 19:40 - 2013-08-02 07:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-11-19 19:40 - 2013-08-02 06:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-11-19 19:31 - 2013-11-19 21:51 - 105225210 _____ C:\Windows\SysWOW64\᯾瞡Ė߿
2013-11-15 17:22 - 2013-11-15 17:22 - 00000674 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-15 17:11 - 2013-11-15 17:11 - 00001542 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\Program Files\iTunes
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\Program Files\iPod
2013-11-15 17:07 - 2013-11-15 17:07 - 00001809 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2013-11-15 17:07 - 2013-11-15 17:07 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-04 21:31 - 2013-08-03 07:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-11-04 21:31 - 2013-08-03 07:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-11-04 21:31 - 2013-08-03 07:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-11-04 21:31 - 2013-08-03 06:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2013-11-04 21:31 - 2013-08-03 06:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2013-11-04 21:31 - 2013-08-03 06:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2013-11-04 21:30 - 2013-08-10 06:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2013-11-04 21:30 - 2013-08-10 06:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2013-11-04 21:30 - 2013-08-10 04:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-11-04 21:30 - 2013-08-02 07:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-11-04 21:30 - 2013-08-02 07:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-11-04 21:30 - 2013-08-02 06:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-11-04 21:30 - 2013-08-02 06:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-11-04 21:30 - 2013-08-01 11:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-11-04 21:30 - 2013-07-31 00:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml
2013-11-04 21:30 - 2013-07-25 00:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-11-04 21:30 - 2013-07-25 00:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2013-11-04 21:30 - 2013-04-10 00:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2013-11-04 21:30 - 2013-04-09 23:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-11-04 21:22 - 2013-07-06 01:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-11-04 21:22 - 2013-07-05 23:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-11-04 21:22 - 2013-07-04 03:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-11-04 21:22 - 2013-07-01 23:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-11-04 21:22 - 2013-07-01 23:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-11-04 21:22 - 2013-06-29 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-11-04 21:22 - 2013-06-29 04:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-11-04 21:22 - 2013-06-22 06:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-11-04 21:22 - 2013-06-22 06:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-11-04 21:21 - 2013-08-23 06:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-11-04 21:21 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-04 21:21 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-04 21:21 - 2013-07-02 02:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-11-04 21:21 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-11-04 21:21 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-11-04 21:21 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-04 21:21 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-04 21:21 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-04 21:21 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-11-04 21:21 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-04 21:21 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-04 21:21 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-11-04 21:21 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-11-04 21:21 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-11-04 21:21 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-11-04 20:45 - 2013-10-23 11:30 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll
2013-11-04 20:45 - 2013-10-23 11:30 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll
2013-11-04 20:45 - 2013-01-29 09:35 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-11-04 20:44 - 2013-08-07 06:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-11-04 20:43 - 2013-11-29 17:56 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-04 20:43 - 2013-11-29 17:56 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-04 15:05 - 2013-11-04 15:18 - 00000673 _____ C:\Users\Public\Desktop\Battlefield 4.lnk
2013-11-04 15:05 - 2013-11-04 15:18 - 00000657 _____ C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2013-11-04 15:04 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-11-04 15:04 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-11-04 15:04 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-11-04 15:04 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-11-04 15:04 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-11-04 15:04 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-11-04 15:04 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-11-04 15:04 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-11-04 15:04 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-11-04 15:04 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-11-04 15:04 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-11-04 15:04 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-11-04 15:04 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-11-04 15:04 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-11-04 15:04 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-11-04 15:04 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-11-04 15:04 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-11-04 15:04 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

==================== One Month Modified Files and Folders =======

2013-12-04 17:36 - 2013-12-04 17:27 - 00012312 _____ C:\Users\Christian\Desktop\FRST.txt
2013-12-04 17:36 - 2013-04-11 16:37 - 00000000 ____D C:\Users\Christian\AppData\Local\PMB Files
2013-12-04 17:28 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-04 17:28 - 2012-07-26 03:43 - 00751892 _____ C:\Windows\system32\perfh007.dat
2013-12-04 17:28 - 2012-07-26 03:43 - 00155620 _____ C:\Windows\system32\perfc007.dat
2013-12-04 17:27 - 2013-12-04 17:27 - 00000986 _____ C:\Users\Christian\Desktop\JRT.txt
2013-12-04 17:24 - 2013-12-04 17:24 - 00000000 ____D C:\Windows\ERUNT
2013-12-04 17:21 - 2013-04-06 12:13 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-04 17:20 - 2013-12-04 17:19 - 00000000 ____D C:\AdwCleaner
2013-12-04 17:20 - 2013-12-03 20:39 - 00098380 _____ C:\Windows\WindowsUpdate.log
2013-12-04 17:16 - 2013-12-04 17:16 - 01034531 _____ (Thisisu) C:\Users\Christian\Desktop\JRT.exe
2013-12-04 17:16 - 2013-04-06 16:12 - 00000000 ____D C:\Users\Christian\AppData\Roaming\Skype
2013-12-04 17:15 - 2013-12-04 17:15 - 01110034 _____ C:\Users\Christian\Desktop\adwcleaner.exe
2013-12-04 17:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-12-04 16:28 - 2013-12-04 16:09 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-04 16:21 - 2013-12-04 16:21 - 00116440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-04 16:20 - 2013-12-04 16:08 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-03 21:35 - 2013-08-18 16:32 - 00000000 ____D C:\Users\Christian\AppData\Roaming\vlc
2013-12-03 21:12 - 2013-12-03 21:12 - 01110476 _____ C:\Users\Christian\Downloads\7z920.exe
2013-12-03 20:25 - 2013-12-03 20:25 - 00000654 _____ C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRST64.lnk
2013-12-03 20:25 - 2013-12-03 20:25 - 00000000 ____D C:\FRST
2013-12-03 20:24 - 2013-12-03 20:23 - 01959614 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe
2013-12-03 20:20 - 2013-12-03 20:20 - 00000000 _____ C:\Users\Christian\defogger_reenable
2013-12-03 20:20 - 2013-04-04 21:24 - 00000000 ____D C:\Users\Christian
2013-12-03 20:19 - 2013-12-03 20:19 - 00050477 _____ C:\Users\Christian\Desktop\Defogger.exe
2013-12-03 18:41 - 2013-12-03 18:41 - 00377856 _____ C:\Users\Christian\Desktop\gmer_2.1.19163.exe
2013-12-02 22:39 - 2013-12-02 22:39 - 00000000 ____D C:\Windows\pss
2013-12-02 22:31 - 2013-04-12 19:54 - 00000000 ____D C:\Users\Christian\AppData\Local\CrashDumps
2013-12-02 22:17 - 2013-12-02 22:17 - 00000758 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-02 22:17 - 2013-12-02 22:17 - 00000000 ____D C:\Users\Christian\AppData\Roaming\Malwarebytes
2013-12-02 22:17 - 2013-12-02 22:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-02 17:55 - 2013-04-05 11:39 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-02 17:00 - 2013-04-05 11:39 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-12-02 16:46 - 2013-11-19 19:40 - 00000000 ____D C:\Users\Christian\AppData\Local\NVIDIA Corporation
2013-12-02 16:46 - 2013-09-30 20:47 - 00000000 ____D C:\Users\Christian\AppData\Local\NVIDIA
2013-12-02 16:46 - 2013-04-06 12:13 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-02 16:45 - 2013-12-02 16:45 - 00000000 ____D C:\Windows\LastGood
2013-12-02 16:45 - 2013-04-06 12:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-02 16:45 - 2013-01-29 17:09 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-29 17:59 - 2013-11-29 17:59 - 00000000 ____D C:\Windows\LastGood.Tmp
2013-11-29 17:56 - 2013-11-04 20:43 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-11-04 20:43 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-29 17:19 - 2013-04-06 16:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-29 17:19 - 2013-04-06 16:12 - 00000000 ____D C:\ProgramData\Skype
2013-11-29 17:16 - 2013-04-06 17:00 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-11-28 21:35 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-11-27 16:25 - 2013-07-12 17:59 - 00000000 ____D C:\Users\Christian\AppData\Local\Adobe
2013-11-27 16:24 - 2012-09-07 12:47 - 00000000 ____D C:\ProgramData\McAfee
2013-11-25 18:03 - 2013-05-08 16:00 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-25 18:03 - 2013-04-04 22:02 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-25 18:03 - 2013-04-04 22:02 - 00106904 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-11-25 18:03 - 2013-04-04 22:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-24 20:33 - 2013-11-24 20:33 - 00421792 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-23 15:46 - 2013-04-04 21:25 - 00000000 ___RD C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-23 15:46 - 2013-04-04 21:25 - 00000000 ___RD C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ToastData
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\WinStore
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-11-23 15:45 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-11-23 15:45 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\oobe
2013-11-23 15:42 - 2013-04-12 18:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-23 15:37 - 2013-11-23 15:36 - 00000000 ____D C:\Windows\system32\MRT
2013-11-23 15:36 - 2013-11-23 15:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-23 15:34 - 2012-07-26 06:26 - 00000199 _____ C:\Windows\win.ini
2013-11-23 15:33 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-11-22 15:40 - 2013-11-22 15:40 - 00001008 _____ C:\Users\Christian\Desktop\Fallout3ng - Verknüpfung.lnk
2013-11-21 20:00 - 2012-09-07 12:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-19 21:51 - 2013-11-19 19:31 - 105225210 _____ C:\Windows\SysWOW64\᯾瞡Ė߿
2013-11-15 18:26 - 2013-08-16 07:22 - 00000000 ____D C:\Program Files (x86)\LyricsWatch
2013-11-15 17:34 - 2013-07-05 17:38 - 00000898 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-11-15 17:28 - 2013-08-18 14:01 - 00000614 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-15 17:22 - 2013-11-15 17:22 - 00000674 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-15 17:11 - 2013-11-15 17:11 - 00001542 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\Program Files\iTunes
2013-11-15 17:11 - 2013-11-15 17:11 - 00000000 ____D C:\Program Files\iPod
2013-11-15 17:07 - 2013-11-15 17:07 - 00001809 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2013-11-15 17:07 - 2013-11-15 17:07 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-11-14 12:56 - 2013-11-29 17:58 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-29 17:58 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-14 12:56 - 2013-11-29 17:58 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-14 12:56 - 2013-09-30 20:43 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-14 12:56 - 2013-01-29 17:09 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-11 16:02 - 2013-04-06 12:13 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2013-04-06 12:13 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2013-04-06 12:13 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2013-11-11 16:01 - 2013-04-06 12:13 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2013-04-06 12:13 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2013-04-06 12:13 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2013-04-06 12:13 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-10 20:36 - 2013-04-06 17:01 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-11-07 16:00 - 2013-04-04 22:10 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-06 11:59 - 2013-04-12 18:28 - 00000768 _____ C:\Users\Christian\Desktop\Neues Textdokument.txt
2013-11-05 23:58 - 2012-07-26 09:14 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-05 23:58 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-04 15:18 - 2013-11-04 15:05 - 00000673 _____ C:\Users\Public\Desktop\Battlefield 4.lnk
2013-11-04 15:18 - 2013-11-04 15:05 - 00000657 _____ C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2013-11-04 15:04 - 2013-04-05 11:39 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe

Some content of TEMP:
====================
C:\Users\Christian\AppData\Local\Temp\avgnt.exe
C:\Users\Christian\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-09 11:03

==================== End Of Log ============================
         

--- --- ---


Die Addition hat das Tool mir nicht mehr auf den Desktop gepackt ... !

Ab dem 2. Scan muss man ja auch einen Haken bei additions.txt setzen

Wer lesen kann ist klar im ... Aber ihr schreibt doch selber "keine Hacken" setzen ...

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-12-2013
Ran by ****** at 2013-12-04 20:53:31
Running from C:\Users\Christian\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.1925)
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2008)
7-Zip 9.20 (x32)
Acer Power Management (Version: 7.00.3006)
Acer Recovery Management (Version: 6.00.3011)
AcerCloud (x32 Version: 2.01.3115)
AcerCloud Docs (x32 Version: 1.00.3201)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Free Antivirus (x32 Version: 14.0.1.749)
Battlefield 3™ (x32 Version: 1.0.0.0)
Battlefield 4™ (x32 Version: 1.0.0.1)
Battlelog Web Plugins (x32 Version: 2.3.2)
BioShock Infinite (x32)
Bonjour (Version: 3.0.0.10)
BufferChm (x32 Version: 140.0.298.000)
CCleaner (Version: 4.07)
clear.fi Media (x32 Version: 2.01.3108)
clear.fi Photo (x32 Version: 2.01.3108)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3318_45364)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
Destinations (x32 Version: 140.0.0.0)
DocProc (x32 Version: 140.0.185.000)
Empire: Total War (x32)
ESN Sonar (x32 Version: 0.70.4)
Fallout 3 (x32 Version: 1.00.0000)
GeForce Experience NvStream Client Components (Version: 1.6.28)
Hotkey Utility (x32 Version: 3.00.3003)
HP Imaging Device Functions 14.5 (Version: 14.5)
HP Scanjet G4010 (Version: 14.5)
HP Update (x32 Version: 5.005.000.001)
hpg4010 (x32 Version: 140.000.000.000)
Identity Card (x32 Version: 2.00.3004)
Intel(R) Control Center (x32 Version: 1.2.1.1008)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1281)
Intel(R) Network Connections 17.2.153.0 (Version: 17.2.153.0)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.4.1001)
Intel® Trusted Connect Service Client (Version: 1.24.738.1)
iTunes (Version: 11.1.3.8)
Live Updater (x32 Version: 2.00.3004)
LyricsWatch (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Metro: Last Light (x32)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 1.2.0241)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Mozilla Firefox 23.0 (x86 de) (x32 Version: 23.0)
Mozilla Firefox 25.0.1 (x86 de) (HKCU Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 23.0)
MyWinLocker (Version: 4.0.14.35)
MyWinLocker 4 (x32 Version: 4.0.14.35)
MyWinLocker Suite (x32 Version: 4.0.14.24)
Nero 12 Essentials OEM.a01 (x32 Version: 12.5.00000)
Nero ControlCenter (x32 Version: 11.0.14500.0.45)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.0003)
Nero Core Components (x32 Version: 11.0.16900.1.27)
Nero Express (x32 Version: 12.0.16001)
Nero Express Help (CHM) (x32 Version: 12.0.1000)
Nero Launcher (x32 Version: 12.0.3000)
Nero Update (x32 Version: 11.0.11500.28.0)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.8 (Version: 1.8)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.142.992)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA Network Service (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 10.10.5 (Version: 10.10.5)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 10.10.5 (Version: 10.10.5)
NVIDIA Update Core (Version: 10.10.5)
NVIDIA Virtual Audio 1.2.12 (Version: 1.2.12)
OCR Software by I.R.I.S. 14.5 (Version: 14.5)
Office Addin (x32 Version: 2.01.3200)
Origin (x32 Version: 9.1.15.109)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
Pando Media Booster (x32 Version: 2.6.0.9)
PlanetSide 2 (HKCU Version: 1.0.3.183)
Prerequisite installer (x32 Version: 12.0.0002)
PunkBuster Services (x32 Version: 0.993)
QuickShare (x32 Version: 1.146.60.12450)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6680)
Realtek USB 2.0 Card Reader (x32 Version: 6.2.8400.30137)
Scan (x32 Version: 14.0.1.0)
Shared C Run-time for x64 (Version: 10.0.0)
SHIELD Streaming (Version: 1.6.75)
Shredder (Version: 2.0.8.9)
Shredder (x32 Version: 2.0.8.9)
Sid Meier's Civilization V (x32)
Skype™ 6.11 (x32 Version: 6.11.102)
Star Trek Online (x32)
Steam (x32 Version: 1.0.0.0)
Total War: ROME II (x32)
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition
Update for Microsoft InfoPath 2013 (KB2752078) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2825630) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760257) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817309) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817311) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817640) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837643) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837649) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2837642) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2817625) 64-Bit Edition
Update for Microsoft Project 2013 (KB2767859) 64-Bit Edition
Update for Microsoft Publisher 2013 (KB2752097) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition
Update for Microsoft Visio 2013 (KB2752018) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition
Update for Microsoft Word 2013 (KB2817631) 64-Bit Edition
Update for Microsoft Word 2013 (KB2837630) 64-Bit Edition
Visual Studio 2005 Tools for Office Second Edition Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729)
Visual Studio Tools for the Office system 3.0 Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1)
VLC media player 2.1.1 (Version: 2.1.1)
WebReg (x32 Version: 140.0.297.017)
WORLD IN CONFLICT: SOVIET ASSAULT (x32 Version: 1.0.1.0)
World of Tanks (x32)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {053F1CC7-2ACC-4E22-83AD-B174CCF0CA56} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-30] ()
Task: {191529CA-299D-4087-89D5-13A58DB8E8BF} - System32\Tasks\{FB4266B1-56E1-4EDF-89AC-800CA053A0DB} => Firefox.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsProgressBar
Task: {21957C9F-E53D-4E13-A601-16081B9E0C2C} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-18] (CyberLink)
Task: {2335E49C-4E78-4A75-B129-CF3FE138860F} - System32\Tasks\Show-Lyrics Update => C:\Program Files (x86)\ShowLrcs\ShwLrcs.exe
Task: {2CB4DF4B-0311-4A77-A689-D6871B160427} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Jetside-Christian Jetside => C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE [2012-10-01] (Microsoft Corporation)
Task: {35C78E87-9ECA-4623-8179-947DE2BBA38C} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\microsoft shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {3F1CBC8A-8ED0-442E-9D84-2A8315C0E120} - System32\Tasks\LyricsWatch Update => C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe
Task: {4DDAAE91-4DDD-4877-A935-3EC3D579AC48} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {561D6E96-FB27-4BCA-9F43-40E7DB34518E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {7ED12B70-4046-4E6F-8A74-8BF7E16339D1} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {85F64885-0EC7-4454-A029-5B7182F69742} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PmmUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {89B97BAB-F9C9-4C87-91EC-8E340E14915D} - System32\Tasks\Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [2012-08-06] (Acer Incorporated)
Task: {8A26DFDA-D4F9-4301-B85E-B856437CE3C5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {8B597FB6-3D96-48B4-B7A9-B530BCAA4F29} - System32\Tasks\{D3DBD56F-515C-42BA-A061-5AA1A88D38DC} => Firefox.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsBing
Task: {9D87A9FE-7142-4017-A414-D821C9D1ECE6} - System32\Tasks\FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl => C:\Users\Christian\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\MinibarChrome.exe
Task: {BAD75598-FA62-4889-A936-7AC18D6E8661} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {D80C1594-5DFC-4382-B166-6C3BDB6B1B40} - System32\Tasks\Microsoft\Office\Office First Run Task => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-03-14] (Microsoft Corporation)
Task: {DF689730-B252-42AD-A7B2-3E4521C6E706} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe
Task: {EF30CA27-618A-44E7-BB17-28425D41BA47} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-22] (Acer Incorporated)
Task: {F5BEE7CC-8F5F-455B-A301-2C832C6E6D0E} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: C:\Windows\Tasks\LyricsWatch Update.job => C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe
Task: C:\Windows\Tasks\Show-Lyrics Update.job => C:\Program Files (x86)\ShowLrcs\ShwLrcs.exe

==================== Loaded Modules (whitelisted) =============

2013-04-04 22:02 - 2013-01-25 08:25 - 00397704 _____ () E:\Programme\Avira\AntiVir Desktop\sqlite3.dll
2013-01-28 12:08 - 2013-01-28 12:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 12:08 - 2013-01-28 12:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-01-29 17:11 - 2012-07-18 04:55 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/04/2013 08:53:20 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:53:20Z. Fehlercode: 0x80040154.

Error: (12/04/2013 08:52:50 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:52:50Z. Fehlercode: 0x80040154.

Error: (12/04/2013 08:52:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Name des fehlerhaften Moduls: bf4.exe, Version: 1.0.0.1, Zeitstempel: 0x52963762
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000135c5b
ID des fehlerhaften Prozesses: 0x1b0
Startzeit der fehlerhaften Anwendung: 0xbf4.exe0
Pfad der fehlerhaften Anwendung: bf4.exe1
Pfad des fehlerhaften Moduls: bf4.exe2
Berichtskennung: bf4.exe3
Vollständiger Name des fehlerhaften Pakets: bf4.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: bf4.exe5

Error: (12/04/2013 08:52:20 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:52:20Z. Fehlercode: 0x80040154.

Error: (12/04/2013 08:51:50 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:51:50Z. Fehlercode: 0x80040154.

Error: (12/04/2013 08:51:20 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:51:20Z. Fehlercode: 0x80040154.

Error: (12/04/2013 08:50:50 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:50:50Z. Fehlercode: 0x80040154.

Error: (12/04/2013 08:50:20 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:50:20Z. Fehlercode: 0x80040154.

Error: (12/04/2013 08:49:50 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:49:50Z. Fehlercode: 0x80040154.

Error: (12/04/2013 08:49:20 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Planen des Softwareschutzdiensts für den erneuten Start bei 2113-11-10T19:49:20Z. Fehlercode: 0x80040154.


System errors:
=============
Error: (12/04/2013 04:03:00 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:03:00 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:03:00 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:03:00 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:03:00 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:02:59 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:02:59 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:02:59 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:02:59 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/04/2013 04:02:59 PM) (Source: DCOM) (User: Jetside)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}JetsideChristianS-1-5-21-782292552-2644804880-1536100282-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


Microsoft Office Sessions:
=========================
Error: (12/04/2013 08:53:20 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:53:20Z

Error: (12/04/2013 08:52:50 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:52:50Z

Error: (12/04/2013 08:52:40 PM) (Source: Application Error)(User: )
Description: bf4.exe1.0.0.152963762bf4.exe1.0.0.152963762c00000050000000000135c5b1b001cef11f3db59b37E:\Spiele\Battlefield 4\bf4.exeE:\Spiele\Battlefield 4\bf4.exea172ae38-5d1d-11e3-bfaa-7054d21ff772

Error: (12/04/2013 08:52:20 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:52:20Z

Error: (12/04/2013 08:51:50 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:51:50Z

Error: (12/04/2013 08:51:20 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:51:20Z

Error: (12/04/2013 08:50:50 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:50:50Z

Error: (12/04/2013 08:50:20 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:50:20Z

Error: (12/04/2013 08:49:50 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:49:50Z

Error: (12/04/2013 08:49:20 PM) (Source: Software Protection Platform Service)(User: )
Description: 0x800401542113-11-10T19:49:20Z


==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 8131.53 MB
Available physical RAM: 6898.19 MB
Total Pagefile: 9347.53 MB
Available Pagefile: 7797.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:59.01 GB) (Free:7.59 GB) NTFS
Drive e: (DATA) (Fixed) (Total:2769.52 GB) (Free:2530.93 GB) NTFS
Drive g: (Fallout 3) (CDROM) (Total:5.6 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 60 GB) (Disk ID: 5ACD153B)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 2795 GB) (Disk ID: 5ACD16C6)

Partition: GPT Partition Type
==================== End Of Log ============================
         

Aber ihr schreibt doch selber "keine Hacken" setzen ...

Ich hab das auch schon bemängelt, der Hinweis sollte etwas deutlicher sein...die Anleitung wird überarbeitet. Mich nervt es langsam auch 100x am Tag die Hilfesuchenden darauf hinzuweisen

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Task: {2335E49C-4E78-4A75-B129-CF3FE138860F} - System32\Tasks\Show-Lyrics Update => C:\Program Files (x86)\ShowLrcs\ShwLrcs.exe
Task: {3F1CBC8A-8ED0-442E-9D84-2A8315C0E120} - System32\Tasks\LyricsWatch Update => C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe
Task: C:\Windows\Tasks\LyricsWatch Update.job => C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe
Task: C:\Windows\Tasks\Show-Lyrics Update.job => C:\Program Files (x86)\ShowLrcs\ShwLrcs.exe
FF HKCU\...\Firefox\Extensions: [{586A6831-1198-48F5-9D2D-79B4664F0CE6}] - C:\Program Files (x86)\LyricsWatch\128.xpi
FF Extension: No Name - C:\Program Files (x86)\LyricsWatch\128.xpi
C:\Program Files (x86)\LyricsWatch
C:\Program Files (x86)\ShowLrcs
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

War keine Kritik! Wie gesagt, steht eigentlich deutlich da. Ist ja nur ne Sache beim zweiten Scan!

FRST:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-12-2013
Ran by Christian at 2013-12-04 21:50:54 Run:1
Running from C:\Users\Christian\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {2335E49C-4E78-4A75-B129-CF3FE138860F} - System32\Tasks\Show-Lyrics Update => C:\Program Files (x86)\ShowLrcs\ShwLrcs.exe
Task: {3F1CBC8A-8ED0-442E-9D84-2A8315C0E120} - System32\Tasks\LyricsWatch Update => C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe
Task: C:\Windows\Tasks\LyricsWatch Update.job => C:\Program Files (x86)\LyricsWatch\LyricsWatchUPD.exe
Task: C:\Windows\Tasks\Show-Lyrics Update.job => C:\Program Files (x86)\ShowLrcs\ShwLrcs.exe
FF HKCU\...\Firefox\Extensions: [{586A6831-1198-48F5-9D2D-79B4664F0CE6}] - C:\Program Files (x86)\LyricsWatch\128.xpi
FF Extension: No Name - C:\Program Files (x86)\LyricsWatch\128.xpi
C:\Program Files (x86)\LyricsWatch
C:\Program Files (x86)\ShowLrcs
*****************

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2335E49C-4E78-4A75-B129-CF3FE138860F} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2335E49C-4E78-4A75-B129-CF3FE138860F} => Key deleted successfully.
C:\Windows\System32\Tasks\Show-Lyrics Update => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Show-Lyrics Update => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3F1CBC8A-8ED0-442E-9D84-2A8315C0E120} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F1CBC8A-8ED0-442E-9D84-2A8315C0E120} => Key deleted successfully.
C:\Windows\System32\Tasks\LyricsWatch Update => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsWatch Update => Key deleted successfully.
C:\Windows\Tasks\LyricsWatch Update.job => Moved successfully.
C:\Windows\Tasks\Show-Lyrics Update.job => Moved successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\{586A6831-1198-48F5-9D2D-79B4664F0CE6} => Value deleted successfully.
C:\Program Files (x86)\LyricsWatch\128.xpi => Moved successfully.
C:\Program Files (x86)\LyricsWatch => Moved successfully.
C:\Program Files (x86)\ShowLrcs => Moved successfully.

==== End of Fixlog ====
         

Ich hab das auch nicht als Kritik aufgefasst, ich bin nur ein Freund der eindeutigen Formulierungen und anhand der vielen Nachfragen wird es da wohl Überarbeitungsbedarf geben um die Aussga emal klarer zu gestalten was es mit der additions.txt auf sich hat

Scan mit SystemLook (x64)

Lade SystemLook von jpshortstuff herunter und speichere das Tool auf dem Desktop => SystemLook (64 bit)

• Doppelklicke auf die SystemLook_x64.exe, um das Tool zu starten.
• Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
  

  :filefind
  *lyrics*
  *shwlrcs*
  
  :folderfind
  *lyrics*
  *shwlrcs*
  
  :regfind
  lyrics
  shwlrcs
           

• Klicke nun auf den Button Look, um den Scan zu starten.
• Der Suchlauf kann einige Zeit dauern.
• Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
• Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.

Das wäre in der Tat sehr interessant zu wissen was es "überhaupt" mit diesen kleinen Programmen auf sich hat. Natürlich sollte nicht eure Arbeitspraxis offen gelegt werden aber für so einen "Laien" wie mich ... um ehrlich zu sein hab ich keine Ahnung was diese Programme euch zeigen. Klar, beim durchsehen der einen oder anderen "Logfile" kann man sich schon "grob" sein eigenes Bild machen ... aber der Rest ... Naja ...

SystemLook:

SystemLook 30.07.11 by jpshortstuff
Log created at 22:11 on 04/12/2013 by Christian
Administrator - Elevation successful

========== filefind ==========

Searching for "*lyrics*"
C:\FRST\Quarantine\LyricsWatch Update	--a---- 3060 bytes	[15:03 25/07/2013]	[06:22 16/08/2013] 39F9BAB311E79A029202E84D721B839D
C:\FRST\Quarantine\LyricsWatch Update.job	--a---- 412 bytes	[15:03 25/07/2013]	[14:18 10/09/2013] 403344625DF0CBD32ECA7DAC66AFDAE0
C:\FRST\Quarantine\Show-Lyrics Update	--a---- 3044 bytes	[16:38 05/07/2013]	[16:38 05/07/2013] 62943ACD68780700B42563BE974741D2
C:\FRST\Quarantine\Show-Lyrics Update.job	--a---- 396 bytes	[16:38 05/07/2013]	[14:17 10/09/2013] C34B21DACE6D190A09FD5DFDC032757D
C:\Windows\Prefetch\LYRICSWATCHUPD.EXE-713A0F3A.pf	--a---- 35838 bytes	[17:15 21/08/2013]	[21:25 08/09/2013] 7A14B6BF4ACF1049740BAB850F111C4E

Searching for "*shwlrcs*"
C:\Windows\Prefetch\SHWLRCS.EXE-63BB7712.pf	--a---- 42224 bytes	[16:39 05/07/2013]	[15:04 25/07/2013] 6EF3399D8489C3F085D313A9B72FA87F

========== folderfind ==========

Searching for "*lyrics*"
C:\FRST\Quarantine\LyricsWatch	d------	[06:22 16/08/2013]

Searching for "*shwlrcs*"
No folders found.

========== regfind ==========

Searching for "lyrics"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Microsoft.DirectMusicLyricsTrack]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Microsoft.DirectMusicLyricsTrack]
@="DirectMusicLyricsTrack"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Microsoft.DirectMusicLyricsTrack\CurVer]
@="Microsoft.DirectMusicLyricsTrack.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Microsoft.DirectMusicLyricsTrack.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Microsoft.DirectMusicLyricsTrack.1]
@="DirectMusicLyricsTrack"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsWatch\128.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsWatch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{995C1CF5-54FF-11D3-8BDA-00600893B1B6}]
@="DirectMusicLyricsTrack"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{995C1CF5-54FF-11D3-8BDA-00600893B1B6}\ProgID]
@="Microsoft.DirectMusicLyricsTrack.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{995C1CF5-54FF-11D3-8BDA-00600893B1B6}\VersionIndependentProgID]
@="Microsoft.DirectMusicLyricsTrack"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsWatch\128.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsWatch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1684BD8280271AA4EBCF2BF3F5F3F588]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\cs.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1B337650BD75A8447ACA255EC00921BB]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D12D3E35CC76E54194B1892CF7872E3]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\nl.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2AF1D4904A1595B44AB24E1233B6DE48]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\it.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34D573917B74C3C4A93DC9156D09FFE1]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\fi.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38557E31BCD092A47805A5A4AAFB7134]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\en_GB.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\593B4DCF3E67DF34F9CCC0464D5CD37D]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\sk.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E2FF340BB1A92B43A2FF31BC7C5452E]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\fr.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\72E2A14135B4C5D4499B84D456690129]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\hu.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76AFFAA8C1E4D5B44ACB1BFE883C6457]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\es.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78757AF88C1266A4B955A79077BD332C]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78AF7F024EB2DF443A0DD854AB03E8BD]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\de.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E3A4277FC5E48741B528BE1F26259B8]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\uk.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\85F5EB82BE91E584E8672A3B6B8D7941]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\sv.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88BE25F3D489F2E44BC02B254D27345C]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CD17B7D79A83744D8D7FEF63342E933]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\el.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90F21C90C8B465A458EB634F638E6FB8]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\ko.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9B88E86CC0D89BB488C7FA77DA5D0DF7]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\th.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9BEC3D9652229D44E8F898DD60656451]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\ja.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E72FBFC3A3A57E549158872E75B5EB4]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\ms.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5DCACB78037A3B46A15FD0D4439FAAC]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\tr.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ABF74D94F9F25745EBD8A0C9A9AD254C]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\id.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC84AD6CB744DF44DA19392B9FCA8AE9]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\ca.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B0FA4A45F34DD654294C126C32CCEDF3]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\he.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8AC4450797418A489B2526AD4DD720A]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\pt.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA2C88F35DC4C8A4F9068A27AB3A7E3B]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\en.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C0F00CBE7562F3E4688ABAD227116C10]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\ro.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C35F6754F418A1C40A31724D57558614]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\ru.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C888BEF0B0B619A49A4CAA71087AE536]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\ar.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEBC2437C536C02409FB5DA1C8BEC090]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\hr.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DAA49214FA0598C43A5149E18AF9C137]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\nb.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F296671CA5854D642A485B82AAD2DF9A]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\da.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F352D5935FFE287598CA3401D40FD9B9]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\vi.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFE308594FA40184E89695DDD7F31219]
"DAEC106DF4E2BBB458CC2CA9C46E3A0C"="E:\Programme\iTunes\iTunes.Resources\pl.lproj\CleanLyrics.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\akmegfnobiiokgogbedihgolimahonkj]
"Path"="C:\Program Files (x86)\LyricsWatch\128.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net]
"DisplayName"="LyricsWatch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net]
"UninstallString"="C:\Program Files (x86)\LyricsWatch\uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{995C1CF5-54FF-11D3-8BDA-00600893B1B6}]
@="DirectMusicLyricsTrack"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{995C1CF5-54FF-11D3-8BDA-00600893B1B6}\ProgID]
@="Microsoft.DirectMusicLyricsTrack.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{995C1CF5-54FF-11D3-8BDA-00600893B1B6}\VersionIndependentProgID]
@="Microsoft.DirectMusicLyricsTrack"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32]
@="C:\Program Files (x86)\LyricsWatch\128.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR]
@="C:\Program Files (x86)\LyricsWatch"

Searching for "shwlrcs"
No data found.

-= EOF =-
         

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Windows\Prefetch\LYRICSWATCHUPD.EXE-713A0F3A.pf
C:\Windows\Prefetch\SHWLRCS.EXE-63BB7712.pf	      
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\akmegfnobiiokgogbedihgolimahonkj" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net" /f
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

FRST:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-12-2013
Ran by Christian at 2013-12-05 18:27:02 Run:2
Running from C:\Users\Christian\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Windows\Prefetch\LYRICSWATCHUPD.EXE-713A0F3A.pf
C:\Windows\Prefetch\SHWLRCS.EXE-63BB7712.pf	      
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\akmegfnobiiokgogbedihgolimahonkj" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f
reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net" /f
*****************

C:\Windows\Prefetch\LYRICSWATCHUPD.EXE-713A0F3A.pf => Moved successfully.
"C:\Windows\Prefetch\SHWLRCS.EXE-63BB7712.pf	      " => File/Directory not found.

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\akmegfnobiiokgogbedihgolimahonkj" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f =========

FEHLER: Der angegebene Registrierungsschl�ssel bzw. Wert wurde nicht gefunden.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f =========

FEHLER: Der angegebene Registrierungsschl�ssel bzw. Wert wurde nicht gefunden.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\0\win32" /f =========

FEHLER: Der angegebene Registrierungsschl�ssel bzw. Wert wurde nicht gefunden.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{14AE47F7-A8F8-4167-BC42-14AA76411403}\1.0\HELPDIR" /f =========

FEHLER: Der angegebene Registrierungsschl�ssel bzw. Wert wurde nicht gefunden.


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LWatch@mgmit-lyrics.net" /f =========

FEHLER: Der angegebene Registrierungsschl�ssel bzw. Wert wurde nicht gefunden.


========= End of Reg: =========


==== End of Fixlog ====
         

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

MBAM:

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.06.04

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16736
Christian :: JETSIDE [Administrator]

Schutz: Deaktiviert

06.12.2013 14:48:17
MBAM-log-2013-12-06 (14-50-18).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 206718
Laufzeit: 1 Minute(n), 49 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Christian\AppData\Local\DownloadAssist\Offers\iminent.exe (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
C:\Users\Christian\AppData\Local\DownloadAssist\Offers\QuickShare1.exe (PUP.Optional.QuickShare.A) -> Keine Aktion durchgeführt.
C:\Windows\Installer\2d8547.msi (PUP.Optional.SmartBar.A) -> Keine Aktion durchgeführt.

(Ende)
         

ESET:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=e30e578f860dc9488f7c445ae40fd0cd
# engine=16163
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-06 02:42:28
# local_time=2013-12-06 03:42:28 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=1799 16775165 100 96 6820 251767838 0 0
# compatibility_mode=5893 16776574 100 94 1126635 45847059 0 0
# scanned=222776
# found=2
# cleaned=0
# scan_time=2914
sh=6B0F50BECF41489CB447A2870A5B7BFDCF9D14EF ft=0 fh=0000000000000000 vn="Win32/Adware.AddLyrics.L application" ac=I fn="C:\FRST\Quarantine\128.xpi"
sh=2B741E8D01522F748003588759C068559C665A21 ft=0 fh=0000000000000000 vn="Win32/Adware.AddLyrics.L application" ac=I fn="C:\FRST\Quarantine\LyricsWatch\128.crx"