|
Plagegeister aller Art und deren Bekämpfung: Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändertWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
26.12.2013, 14:28 | #1 |
| Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Hallo zusammen, seit ein paar Tagen habe ich das Problem, dass ich beim Öffnen meiner Browser (im Einsatz sind Chrome [Standard-Browser] und Firefox) automatisch als Startseite "hxxp://wisersearch.com/?channel=de_nt" habe. Ich hab schon in den Einstellungen geschaut, aber da ist "www.google.de" als Startseite hinterlegt. Bitte helft mir, diese Einstellung zu löschen. Ich habe schon Farbar's Recovery Scan Tool in der richtigen Version geladen und einen Scan durchgeführt. hier die logs: FRST.txt Addition.txt |
26.12.2013, 14:41 | #2 |
/// the machine /// TB-Ausbilder | Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
26.12.2013, 14:46 | #3 |
| Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Alles klar, dann hier nochmal die logs:
__________________FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013 Ran by Saturn (administrator) on RAVENHOME on 26-12-2013 13:43:58 Running from C:\Users\Saturn\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe (Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Sonix) C:\Windows\vsnp2uvc.exe () C:\Windows\System32\WTMKM.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe () C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe () C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe () C:\Windows\tsnp2uvc.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Roccat GmbH) C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe ( ) C:\Windows\System32\lxeccoms.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Windows\System32\atwtusb.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe () C:\Windows\System32\atwtusb.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-04] (Realtek Semiconductor) HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation) HKLM\...\Run: [] - [x] HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix) HKLM\...\Run: [MacrokeyManager] - C:\Windows\System32\WTMKM.exe [7325184 2011-04-12] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation) HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix) HKLM-x32\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [320512 2009-12-11] () HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.) HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [539688 2011-03-17] (Roccat GmbH) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-10-19] () HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPANEL.exe [2273608 2011-08-02] (Gainward Co.) HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.) HKCU\...\Run: [AudialsNotifier] - C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe [473352 2013-11-27] () AppInit_DLLs: [ ] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5765A900BFCBCB01 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} SearchScopes: HKCU - {44219366-4C90-49F2-B082-3F7B238E29B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms} BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] ShellExecuteHooks-x32: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 62.109.121.2 62.109.121.1 FireFox: ======== FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Heroes Updater - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\battlefieldheroespatcher@ea.com FF Extension: ProxTube - Unblock YouTube - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\ich@maltegoetz.de FF Extension: YouTube Unblocker - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\youtubeunblocker@unblocker.yt FF Extension: Flagfox - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} FF Extension: Garmin Communicator - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} FF Extension: Microsoft .NET Framework Assistant - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: DownloadHelper - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: Simple New Tab - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\snt@dotlabs.co.xpi FF Extension: TinEye Reverse Image Search - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\tineye@ideeinc.com.xpi FF Extension: Shockwave Flash Plugin Free - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi FF Extension: {43616d3f-8ae4-4351-9b52-74faeeb1a3dc} - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi FF Extension: Adblock Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Download Statusbar - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi FF Extension: Tab Mix Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.de/", "hxxp://searchqm.com/?channel=sfde203fbdgy21", "hxxp://search.fbdownloader.com/?channel=sfde203fbdgy21", "hxxp://native-search.com/?channel=de", "hxxp://www.google.com" CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll No File CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.486_0\plugin/npUrlAdvisor.dll No File CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.486_0\plugin/npVKPlugin.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (YouTube) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Kaspersky URL Advisor) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0 CHR Extension: (bloomind ct deepdark) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd\1_0 CHR Extension: (Chrome Toolbox (by Google)) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0 CHR Extension: (TinEye Reverse Image Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.3_0 CHR Extension: (Safe Money) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0 CHR Extension: (Content Blocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.2.614_0 CHR Extension: (RealDownloader) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0 CHR Extension: (Virtual Keyboard) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.614_0 CHR Extension: (Google Wallet) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (YouTube Unblocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0 CHR Extension: (Gmail) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR Extension: (Anti-Banner) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0 CHR Extension: (Simple New Tab) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga\1.0.0_0 CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx CHR StartMenuInternet: Google Chrome - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO) R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-11] (BioWare) R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [248664 2013-09-12] (Garmin Ltd or its subsidiaries) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.) S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.) R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-01-07] ( ) R2 lxec_device; C:\Windows\SysWow64\lxeccoms.exe [598696 2010-01-07] ( ) S2 MSSQL$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [9150464 2005-05-03] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation) S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4005936 2011-06-06] (INCA Internet Co., Ltd.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-05] () R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] () S3 SQLAgent$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software) S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation) R2 WTService; C:\Windows\system32\atwtusb.exe [916992 2011-04-27] () ==================== Drivers (Whitelisted) ==================== S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies ) S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) R3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2011-10-08] (VSO Software) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO) R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.) R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider) S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) S1 PCLEPCI; C:\Windows\SysWow64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH) R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-11-27] (Audials AG) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2009-12-18] () S3 TBPanel; No ImagePath R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S1 bnqstsgk; \??\C:\Windows\system32\drivers\bnqstsgk.sys [x] S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 cpuz130; \??\C:\Users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] S1 dfhtpxsf; \??\C:\Windows\system32\drivers\dfhtpxsf.sys [x] S3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x] S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x] S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x] S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x] S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x] S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x] S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x] S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x] S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x] S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x] S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO) S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x] S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x] S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x] S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x] S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x] S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x] S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x] S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x] S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x] S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x] S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x] S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x] S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x] S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x] S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x] S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x] S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x] S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x] S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x] S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x] S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x] S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x] S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x] S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x] S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x] S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x] S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x] S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x] S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x] S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x] S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x] S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x] S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x] S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-26 13:44 - 2013-12-26 13:44 - 00377856 _____ C:\Users\Saturn\Desktop\gmer_2.1.19163.exe 2013-12-26 13:43 - 2013-12-26 13:45 - 00042847 _____ C:\Users\Saturn\Desktop\FRST.txt 2013-12-26 13:43 - 2013-12-26 13:43 - 01928716 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe 2013-12-26 13:43 - 2013-12-26 13:43 - 00000000 ____D C:\FRST 2013-12-26 13:42 - 2013-12-26 13:42 - 00050477 _____ C:\Users\Saturn\Desktop\Defogger.exe 2013-12-26 13:42 - 2013-12-26 13:42 - 00000474 _____ C:\Users\Saturn\Desktop\defogger_disable.log 2013-12-26 13:42 - 2013-12-26 13:42 - 00000000 _____ C:\Users\Saturn\defogger_reenable 2013-12-26 13:36 - 2013-12-26 13:36 - 00000022 _____ C:\Windows\S.dirmngr 2013-12-26 13:33 - 2013-12-26 13:34 - 00000000 ____D C:\AdwCleaner 2013-12-26 13:33 - 2013-12-26 13:33 - 01233962 _____ C:\Users\Saturn\Desktop\adwcleaner_3.016.exe 2013-12-26 08:55 - 2013-12-26 13:38 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 08:55 - 2013-12-26 13:38 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-23 15:47 - 2013-12-23 15:48 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u 2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses 2013-12-23 15:33 - 2013-12-23 15:39 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler 2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2013-12-23 15:32 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D 2013-12-22 14:51 - 2013-12-22 15:02 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate 2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights 2013-12-21 18:35 - 2013-12-21 18:37 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2 2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url 2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url 2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log 2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url 2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url 2013-12-17 18:31 - 2013-12-23 15:01 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014 2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014 2013-12-15 20:04 - 2013-10-30 10:45 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-12-15 20:04 - 2013-10-30 10:45 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-12-15 20:03 - 2013-12-15 20:04 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-12-15 20:03 - 2013-10-30 10:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-12-15 20:03 - 2013-10-30 10:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-12-15 20:03 - 2013-10-30 10:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-12-15 20:02 - 2013-12-15 20:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-12-15 12:06 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-15 12:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-15 12:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-15 12:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-15 12:04 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-15 12:04 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-15 12:04 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-15 12:04 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-15 12:04 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-15 12:04 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-15 12:04 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-15 12:04 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-15 12:04 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-15 12:04 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-15 12:04 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-15 12:04 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-15 12:04 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-15 12:04 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-15 12:04 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-15 12:04 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-15 12:04 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-15 12:04 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-15 12:04 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-15 12:04 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-15 12:04 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-15 12:04 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-15 12:04 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-15 12:04 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-15 12:04 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-15 12:04 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-15 12:04 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-15 12:04 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-15 12:04 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-15 12:04 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-15 12:04 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-12 20:35 - 2013-12-26 13:37 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn 2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-12-12 17:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-12 17:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-12 17:48 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-12 17:48 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-12 17:48 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-12 17:48 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-12 17:48 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-12 17:48 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-12 17:48 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-12 17:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-12 17:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-12 17:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-12 17:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-12 17:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-12 17:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-12 17:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-12 17:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-12 17:48 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-12 17:48 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url 2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot 2013-12-07 20:26 - 2013-12-07 21:31 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part 2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp 2013-12-07 14:06 - 2013-12-07 20:26 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar 2013-12-07 14:03 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar 2013-12-07 13:59 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar 2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url 2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe 2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf 2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk 2013-12-05 19:13 - 2013-12-23 15:01 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk 2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet 2013-12-03 19:58 - 2013-12-03 22:04 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-12-03 19:52 - 2013-12-03 19:53 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2013-12-03 19:51 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-12-03 19:51 - 2013-12-03 19:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2013-12-03 19:50 - 2013-12-03 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion 2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe 2013-12-03 19:17 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 19:15 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-03 19:15 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-03 19:14 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA 2013-12-03 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url 2013-12-01 19:55 - 2013-12-11 21:58 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server 2013-12-01 19:53 - 2013-12-01 19:52 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar 2013-11-30 17:53 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar 2013-11-30 17:50 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar 2013-11-30 17:46 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar 2013-11-30 17:43 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar 2013-11-30 17:40 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar 2013-11-30 17:37 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar 2013-11-30 17:33 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar 2013-11-30 17:30 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar 2013-11-30 17:27 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar 2013-11-30 17:24 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar 2013-11-30 17:20 - 2013-11-30 17:23 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar 2013-11-30 17:17 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar 2013-11-30 17:14 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar 2013-11-30 17:12 - 2013-11-30 17:14 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar 2013-11-30 17:09 - 2013-11-30 17:12 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar 2013-11-30 17:06 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar 2013-11-30 17:02 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar 2013-11-30 16:59 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar 2013-11-30 16:56 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar 2013-11-30 16:53 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar 2013-11-30 16:49 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar 2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar 2013-11-30 16:46 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar 2013-11-30 16:43 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar 2013-11-30 16:40 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar 2013-11-30 16:36 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar 2013-11-30 16:33 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar 2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar 2013-11-28 19:54 - 2013-11-29 17:56 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-28 19:54 - 2013-11-29 17:56 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-28 19:54 - 2013-11-28 19:54 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-11-28 19:50 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-28 19:50 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-11-28 19:50 - 2013-10-30 18:02 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-11-28 19:37 - 2013-11-30 15:31 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar 2013-11-27 18:46 - 2013-11-27 18:46 - 02244104 _____ C:\Users\Saturn\Desktop\mcpatcher-4.3.0-beta4 (1).exe 2013-11-27 18:41 - 2013-11-27 18:41 - 00675988 _____ C:\Users\Saturn\Desktop\Minecraft (1.7.2).exe 2013-11-27 10:20 - 2013-11-27 10:20 - 00047240 _____ (RapidSolution Software AG) C:\Windows\system32\Drivers\tbhsd.sys 2013-11-27 10:20 - 2013-11-27 10:20 - 00024744 _____ (Audials AG) C:\Windows\system32\Drivers\RrNetCapFilterDriver.sys 2013-11-26 17:49 - 2013-11-26 17:49 - 00001456 _____ C:\Users\Saturn\AppData\Local\Adobe Für Web speichern 13.0 Prefs 2013-11-26 17:31 - 2013-12-03 18:51 - 00024584 _____ C:\Windows\IE11_main.log ==================== One Month Modified Files and Folders ======= 2013-12-26 13:45 - 2013-12-26 13:43 - 00042847 _____ C:\Users\Saturn\Desktop\FRST.txt 2013-12-26 13:45 - 2011-06-30 11:00 - 00000000 ____D C:\Users\Saturn\AppData\Local\PMB Files 2013-12-26 13:44 - 2013-12-26 13:44 - 00377856 _____ C:\Users\Saturn\Desktop\gmer_2.1.19163.exe 2013-12-26 13:44 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-26 13:44 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-26 13:43 - 2013-12-26 13:43 - 01928716 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe 2013-12-26 13:43 - 2013-12-26 13:43 - 00000000 ____D C:\FRST 2013-12-26 13:42 - 2013-12-26 13:42 - 00050477 _____ C:\Users\Saturn\Desktop\Defogger.exe 2013-12-26 13:42 - 2013-12-26 13:42 - 00000474 _____ C:\Users\Saturn\Desktop\defogger_disable.log 2013-12-26 13:42 - 2013-12-26 13:42 - 00000000 _____ C:\Users\Saturn\defogger_reenable 2013-12-26 13:42 - 2010-04-06 18:20 - 00000000 ____D C:\Users\Saturn 2013-12-26 13:41 - 2010-04-06 19:01 - 02022132 _____ C:\Windows\WindowsUpdate.log 2013-12-26 13:38 - 2013-12-26 08:55 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 13:38 - 2013-12-26 08:55 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 13:38 - 2013-05-10 16:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-12-26 13:37 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-26 13:37 - 2012-06-17 13:57 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job 2013-12-26 13:37 - 2012-04-07 18:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-26 13:37 - 2009-07-14 05:51 - 26545281 _____ C:\Windows\setupact.log 2013-12-26 13:37 - 2006-11-02 13:34 - 00000292 _____ C:\Windows\win.ini 2013-12-26 13:36 - 2013-12-26 13:36 - 00000022 _____ C:\Windows\S.dirmngr 2013-12-26 13:36 - 2009-09-07 15:11 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-26 13:36 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-26 13:35 - 2010-04-06 18:33 - 00928034 _____ C:\Windows\PFRO.log 2013-12-26 13:34 - 2013-12-26 13:33 - 00000000 ____D C:\AdwCleaner 2013-12-26 13:34 - 2013-06-13 17:19 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Common 2013-12-26 13:34 - 2012-04-01 20:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-26 13:33 - 2013-12-26 13:33 - 01233962 _____ C:\Users\Saturn\Desktop\adwcleaner_3.016.exe 2013-12-26 13:13 - 2012-04-07 18:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-26 11:01 - 2011-02-28 17:09 - 01183744 ___SH C:\Users\Saturn\Thumbs.db 2013-12-26 09:00 - 2010-03-06 14:16 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe 2013-12-23 20:37 - 2012-06-17 13:57 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job 2013-12-23 17:27 - 2010-04-06 20:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc 2013-12-23 15:48 - 2013-12-23 15:47 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u 2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses 2013-12-23 15:39 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler 2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2013-12-23 15:33 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D 2013-12-23 15:32 - 2013-09-14 14:14 - 00000000 ____D C:\ProgramData\Package Cache 2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\ProgramData\RapidSolution 2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\Program Files (x86)\Audials 2013-12-23 15:29 - 2013-06-13 17:15 - 00000000 ____D C:\Users\Saturn\AppData\Local\RapidSolution 2013-12-23 15:01 - 2013-12-17 18:31 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-23 15:01 - 2013-12-05 19:13 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-22 23:51 - 2013-05-30 11:17 - 00000000 ____D C:\Users\Saturn\Desktop\lustige Bilder 2013-12-22 21:48 - 2013-01-02 19:22 - 00000000 ____D C:\JDownloader 2 2013-12-22 21:47 - 2012-03-13 13:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner 2013-12-22 21:43 - 2012-04-06 18:05 - 00000000 ____D C:\Users\Saturn\Desktop\filme 2013-12-22 15:02 - 2013-12-22 14:51 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate 2013-12-22 15:01 - 2011-10-10 18:59 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI 2013-12-22 14:39 - 2010-04-08 16:47 - 00000000 ____D C:\Program Files (x86)\Steam 2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights 2013-12-21 18:37 - 2013-12-21 18:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2 2013-12-21 18:34 - 2010-04-06 20:18 - 00558241 _____ C:\Windows\DirectX.log 2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url 2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url 2013-12-19 20:54 - 2009-07-14 18:58 - 00728016 _____ C:\Windows\system32\perfh007.dat 2013-12-19 20:54 - 2009-07-14 18:58 - 00162238 _____ C:\Windows\system32\perfc007.dat 2013-12-19 20:54 - 2009-07-14 06:13 - 01702976 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Origin 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Local\Origin 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\ProgramData\Origin 2013-12-19 18:20 - 2011-10-26 09:42 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log 2013-12-19 18:18 - 2013-04-20 19:08 - 00000000 ____D C:\Users\Saturn\Documents\BioWare 2013-12-19 18:16 - 2012-04-22 22:24 - 00002216 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-19 18:15 - 2012-04-07 18:18 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url 2013-12-19 10:20 - 2012-08-04 17:38 - 00000000 ____D C:\Users\Saturn\Desktop\Canon Programme 2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url 2013-12-17 18:53 - 2013-10-25 08:35 - 00000000 ____D C:\Users\Saturn\Desktop\Lisa Master 2013-12-17 18:51 - 2013-06-02 21:22 - 00000000 ____D C:\Users\Saturn\Desktop\Stick zeug 2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-16 19:59 - 2013-08-17 13:01 - 00000000 ____D C:\Windows\system32\MRT 2013-12-16 19:56 - 2010-04-15 14:07 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-16 00:29 - 2009-09-08 09:08 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-12-16 00:28 - 2012-08-04 17:27 - 00000000 ____D C:\Program Files (x86)\Canon 2013-12-16 00:28 - 2010-04-16 13:02 - 00000000 ____D C:\Program Files (x86)\Trillian 2013-12-16 00:26 - 2009-09-07 15:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-15 22:09 - 2010-04-21 15:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-15 20:53 - 2010-03-05 19:23 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Mozilla 2013-12-15 20:32 - 2012-06-17 13:57 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA 2013-12-15 20:32 - 2012-06-17 13:57 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core 2013-12-15 20:14 - 2013-12-15 20:02 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 20:14 - 2012-02-25 09:52 - 00003756 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm 2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014 2013-12-15 20:06 - 2012-02-25 09:43 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014 2013-12-15 20:04 - 2013-12-15 20:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-12-15 20:03 - 2012-02-25 09:43 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TuneUp Software 2013-12-15 17:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-15 16:25 - 2009-07-14 05:45 - 05459720 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-12-15 12:06 - 2009-09-08 08:52 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn 2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-12-12 18:00 - 2012-09-02 22:09 - 00000000 ____D C:\Users\Saturn\Documents\stories 2013-12-11 21:58 - 2013-12-01 19:55 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server 2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url 2013-12-10 20:34 - 2012-04-01 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-10 20:34 - 2012-04-01 20:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-10 20:34 - 2011-05-14 10:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-10 20:27 - 2010-04-27 13:49 - 00000000 ____D C:\Users\Saturn\Documents\My Games 2013-12-09 23:32 - 2010-05-28 22:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Audacity 2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-08 17:35 - 2013-08-20 20:00 - 00000000 ____D C:\Users\Saturn\Desktop\2011-09-26 2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot 2013-12-07 21:31 - 2013-12-07 20:26 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part 2013-12-07 20:26 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar 2013-12-07 17:00 - 2010-05-11 21:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Skype 2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp 2013-12-07 15:08 - 2012-04-07 18:18 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-07 15:08 - 2012-04-07 18:18 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-07 14:06 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar 2013-12-07 14:03 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar 2013-12-07 13:59 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar 2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url 2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe 2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf 2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk 2013-12-05 19:50 - 2010-12-05 20:42 - 00000000 ____D C:\Program Files (x86)\PDF24 2013-12-03 22:04 - 2013-12-03 19:58 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013 2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk 2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-12-03 19:57 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-12-03 19:57 - 2011-10-10 19:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2013-12-03 19:57 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-12-03 19:56 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2013-12-03 19:55 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2013-12-03 19:53 - 2013-12-03 19:52 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2013-12-03 19:51 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-12-03 19:50 - 2011-07-26 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-12-03 19:49 - 2010-05-18 22:36 - 01676320 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion 2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe 2013-12-03 19:18 - 2013-12-03 19:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 19:18 - 2013-12-03 19:14 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA 2013-12-03 19:18 - 2011-10-28 12:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-03 19:15 - 2011-10-28 12:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-03 19:15 - 2011-10-28 12:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-03 19:05 - 2010-04-06 19:15 - 00001425 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-03 18:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-03 18:51 - 2013-11-26 17:31 - 00024584 _____ C:\Windows\IE11_main.log 2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-01 23:34 - 2011-10-25 08:16 - 00000000 ____D C:\Users\Saturn\Desktop\Rollenspiele 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url 2013-12-01 19:52 - 2013-12-01 19:53 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar 2013-12-01 18:24 - 2013-05-24 17:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\.minecraft 2013-11-30 20:53 - 2013-01-08 19:22 - 00000000 ____D C:\Users\Saturn\Downloads\mov-world.net 2013-11-30 17:53 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar 2013-11-30 17:50 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar 2013-11-30 17:46 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar 2013-11-30 17:43 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar 2013-11-30 17:40 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar 2013-11-30 17:37 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar 2013-11-30 17:33 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar 2013-11-30 17:30 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar 2013-11-30 17:27 - 2013-11-30 17:24 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar 2013-11-30 17:23 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar 2013-11-30 17:20 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar 2013-11-30 17:17 - 2013-11-30 17:14 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar 2013-11-30 17:14 - 2013-11-30 17:12 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar 2013-11-30 17:12 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar 2013-11-30 17:09 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar 2013-11-30 17:06 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar 2013-11-30 17:02 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar 2013-11-30 16:59 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar 2013-11-30 16:56 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar 2013-11-30 16:53 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar 2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar 2013-11-30 16:49 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar 2013-11-30 16:46 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar 2013-11-30 16:43 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar 2013-11-30 16:40 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar 2013-11-30 16:36 - 2013-11-30 16:33 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar 2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar 2013-11-30 15:31 - 2013-11-28 19:37 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar 2013-11-29 17:56 - 2013-11-28 19:54 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-29 17:56 - 2013-11-28 19:54 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-28 20:04 - 2012-02-28 22:19 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner (6) 2013-11-28 20:01 - 2010-04-09 14:13 - 00000000 ____D C:\Users\Saturn\Desktop\Games 2013-11-28 19:54 - 2013-11-28 19:54 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-11-28 19:37 - 2013-11-25 19:30 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part08.rar 2013-11-27 18:46 - 2013-11-27 18:46 - 02244104 _____ C:\Users\Saturn\Desktop\mcpatcher-4.3.0-beta4 (1).exe 2013-11-27 18:41 - 2013-11-27 18:41 - 00675988 _____ C:\Users\Saturn\Desktop\Minecraft (1.7.2).exe 2013-11-27 10:20 - 2013-11-27 10:20 - 00047240 _____ (RapidSolution Software AG) C:\Windows\system32\Drivers\tbhsd.sys 2013-11-27 10:20 - 2013-11-27 10:20 - 00024744 _____ (Audials AG) C:\Windows\system32\Drivers\RrNetCapFilterDriver.sys 2013-11-26 17:49 - 2013-11-26 17:49 - 00001456 _____ C:\Users\Saturn\AppData\Local\Adobe Für Web speichern 13.0 Prefs 2013-11-26 17:48 - 2010-03-05 19:38 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Adobe 2013-11-26 17:45 - 2013-10-23 17:27 - 00000132 _____ C:\Users\Saturn\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen 2013-11-26 12:54 - 2013-12-15 12:04 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 11:19 - 2013-12-15 12:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 11:18 - 2013-12-15 12:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 11:11 - 2013-12-15 12:04 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 10:48 - 2013-12-15 12:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 10:46 - 2013-12-15 12:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 10:41 - 2013-12-15 12:04 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 10:29 - 2013-12-15 12:04 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 10:27 - 2013-12-15 12:04 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 10:23 - 2013-12-15 12:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 10:21 - 2013-12-15 12:04 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 10:18 - 2013-12-15 12:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 10:18 - 2013-12-15 12:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 10:16 - 2013-12-15 12:04 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:57 - 2013-12-15 12:04 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 09:38 - 2013-12-15 12:04 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 09:38 - 2013-12-15 12:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 09:35 - 2013-12-15 12:04 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:32 - 2013-12-15 12:04 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 09:28 - 2013-12-15 12:04 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 09:16 - 2013-12-15 12:04 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 09:02 - 2013-12-15 12:04 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:48 - 2013-12-15 12:04 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 08:32 - 2013-12-15 12:04 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 08:26 - 2013-12-15 12:04 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 08:07 - 2013-12-15 12:04 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:40 - 2013-12-15 12:04 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 07:34 - 2013-12-15 12:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:34 - 2013-12-15 12:04 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 07:33 - 2013-12-15 12:04 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 07:27 - 2013-12-15 12:04 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll Files to move or delete: ==================== C:\ProgramData\hash.dat C:\Users\Saturn\DoorKickersAlpha_0031_Setup.exe C:\Users\Saturn\jagex_runescape_preferences.dat C:\Users\Saturn\jagex_runescape_preferences2.dat C:\Users\Saturn\jagex__preferences3.dat C:\Users\Saturn\RocketDock-v1.3.5.exe C:\Users\Saturn\SafariSetup-5.1.7.exe C:\Users\Saturn\setup2.5.0.exe Some content of TEMP: ==================== C:\Users\Saturn\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-20 00:22 ==================== End Of Log ============================ |
26.12.2013, 14:46 | #4 |
| Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-12-2013 Ran by Saturn at 2013-12-26 13:45:58 Running from C:\Users\Saturn\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky PURE 3.0 (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5} AS: Kaspersky PURE 3.0 (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky PURE 3.0 (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E} ==================== Installed Programs ====================== Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0) Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.0.0) Adobe AIR (x32 Version: 3.4.0.2540) Adobe Creative Suite 6 Master Collection (x32 Version: 6) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170) Adobe Help Manager (x32 Version: 4.0.244) Adobe Reader X (10.1.1) - Deutsch (x32 Version: 10.1.1) Apple Application Support (x32 Version: 2.3.6) Apple Mobile Device Support (Version: 7.0.0.117) Apple Software Update (x32 Version: 2.1.3.127) Ashampoo Burning Studio 2013 v.11.0.5 (x32 Version: 11.0.5) Audacity 1.3.12 (Unicode) (x32) Audials (x32 Version: 11.0.45100.0) AuthenTec TrueSuite (Version: 2.0.0.57) AutoCAD 2011 - Deutsch (Version: 18.1.49.0) AutoCAD 2011 Language Pack - Deutsch (Version: 18.1.49.0) Autodesk Material Library 2011 (x32 Version: 2.0.0.49) Autodesk Material Library 2011 Base Image library (x32 Version: 2.0.0.49) BIAS SoundSoap PE 2.1 (x32 Version: 2.1.1) BioShock (x32) Blitzkrieg Mod (x32 Version: 4.7.0.0) Blood Knights (x32) Bonjour (Version: 3.0.0.10) Build Tools - amd64 (Version: 12.0.21005) Build Tools - x86 (x32 Version: 12.0.21005) Buildtools-Sprachressourcen - amd64 (Version: 12.0.21005) Buildtools-Sprachressourcen - x86 (x32 Version: 12.0.21005) BulletStorm (x32 Version: 1.0.0005.130) Call of Duty Black Ops - Remote Console (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32) Call of Duty: Black Ops II - Multiplayer (x32) Call of Duty: Black Ops II - Zombies (x32) Call of Duty: Black Ops II (x32) Call of Duty: Ghosts - Multiplayer (x32) Call of Duty: Ghosts (x32) CANON iMAGE GATEWAY MyCamera Download Plugin (x32 Version: 3.1.1.2) Canon MOV Decoder (x32 Version: 1.8.0.7) Canon MOV Encoder (x32 Version: 1.6.0.1) Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.7.0.4) Canon Utilities EOS Sample Music (x32 Version: 1.0.0.204) Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (x32 Version: 1.0.0.10) Canon Utilities ZoomBrowser EX (x32 Version: 6.7.0.24) CCleaner (Version: 3.06) CDBurnerXP (x32 Version: 4.5.0.3661) ClearProg 1.6.1 Beta 1 (x32 Version: 1.6.1 Beta 1) CloneCD (x32) CloneDVD2 (x32 Version: 2.9.3.0) Company of Heroes (New Steam Version) (x32) Company of Heroes 2 (x32) Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000) CyberLink PhotoNow (x32 Version: 1.1.6904) CyberLink Power2Go (x32 Version: 6.1.2806) CyberLink PowerDirector (x32 Version: 7.0.4020) D3DX10 (x32 Version: 15.4.2368.0902) Dawn of War - Dark Crusade (x32 Version: 1.00.0000) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32) Dexpot (HKCU Version: 1.5.15) DivX (x32 Version: 5.2.1) Doctor Who: The Eternity Clock (x32) Door Kickers (x32) Dragon Age: Origins - Ultimate Edition (x32) Dragon Age™ II (x32 Version: 1.04.8524.0) Dropbox (HKCU Version: 2.0.22) DVD Bibliothek 2.33 (x32 Version: 2.33) Elevated Installer (x32 Version: 2.3.12.0) EmRegSysSetup (x32 Version: 1.6.0.1306) Entity Framework Tools for Visual Studio 2013 (x32 Version: 12.0.20912.0) Erforderliche Komponenten für SSDT (x32 Version: 11.1.3000.0) ESN Sonar (x32 Version: 0.70.4) EXPERTool 7.21 (x32) ffdshow v1.1.3800 [2011-03-28] (x32 Version: 1.1.3800.0) Formatwandler 2014 (x32 Version: 6.0.5060.20182) Formatwandler2014Setup (x32 Version: 6.0.0.1311) Futuremark SystemInfo (x32 Version: 3.21.2.1) Garmin Communicator Plugin (x32 Version: 4.0.4) Garmin Communicator Plugin x64 (Version: 4.0.1) Garmin Communicator Plugin x64 (Version: 4.0.4) Garmin Express (x32 Version: 2.3.12.0) Garmin Express Tray (x32 Version: 2.3.12.0) Garmin Training Center (x32 Version: 3.6.5) Garmin USB Drivers (x32 Version: 2.3.0.0) GeForce Experience NvStream Client Components (Version: 1.6.28) Google Chrome (HKCU Version: 31.0.1650.63) Google Earth (x32 Version: 7.1.2.2041) Google Talk Plugin (x32 Version: 4.9.1.16010) Google Update Helper (x32 Version: 1.3.22.3) Gpg4win (2.2.1) (x32 Version: 2.2.1) Haali Media Splitter (x32) Hacker Evolution (x32) HDX4DirectShowFilter (x32 Version: 1.0.0.1305) iCloud (Version: 3.0.2.163) Intel® Matrix Storage Manager iTunes (Version: 11.1.3.8) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Java(TM) 6 Update 25 (64-bit) (Version: 6.0.250) Java(TM) 6 Update 31 (x32 Version: 6.0.310) JavaFX 2.1.1 (x32 Version: 2.1.1) JDownloader (x32 Version: 0.89) Junk Mail filter update (x32 Version: 15.4.3502.0922) Kaspersky PURE 3.0 (x32 Version: 13.0.2.558) LAME v3.98.2 for Audacity (x32) League of Legends (x32 Version: 1.02.0000) Lexmark Pro800-Pro900 Series LogMeIn Hamachi (x32 Version: 2.2.0.109) Luminance HDR 2.3.0 Lyrics Plugin for Winamp (x32 Version: 0.4) <==== ATTENTION Macro Key Manager (Version: 4.13) Magic 2014 (x32) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322) Microsoft .NET Framework 1.1 (x32) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50710) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50710) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50710) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (x32 Version: 4.5.50932) Microsoft .NET Framework 4.5.1 SDK (Deutsch) (x32 Version: 4.5.51641) Microsoft .NET Framework 4.5.1 SDK (x32 Version: 4.5.51641) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft C++ REST SDK for Visual Studio 2013 (x32 Version: 1.0) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0) Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0) Microsoft Help Viewer 2.1 (x32 Version: 2.1.21005) Microsoft Help Viewer 2.1 Sprachpaket - DEU (x32 Version: 2.1.21005) Microsoft IntelliPoint 8.0 (Version: 8.0.225.0) Microsoft NuGet - Visual Studio Express 2013 for Windows Desktop (x32 Version: 2.7.40911.287) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000) Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.1.3000.0) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.1.2902.0) Microsoft SQL Server 2012 Data-Tier App Framework (x64) (Version: 11.1.2902.0) Microsoft SQL Server 2012 Express LocalDB (Version: 11.1.3000.0) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.1.3000.0) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.1.3000.0) Microsoft SQL Server 2012 Native Client (Version: 11.1.3000.0) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.1.3000.0) Microsoft SQL Server 2012 T-SQL-Sprachdienst (x32 Version: 11.1.3000.0) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1) Microsoft SQL Server Data Tools - DEU (12.0.30919.1) (x32 Version: 12.0.30919.1) Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (x32 Version: 12.0.30919.1) Microsoft SQL Server Desktop Engine (PINNACLESYS) (x32 Version: 8.00.2039) Microsoft Team Foundation Server 2013 Object Model (x64) (Version: 12.0.21005) Microsoft Team Foundation Server 2013-Objektmodell Sprachpaket (x64) - DEU (Version: 12.0.21005) Microsoft Visual C++ x64 Libraries (x32 Version: 12.0.21005) Microsoft Visual C++ x86 Libraries (x32 Version: 12.0.21005) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2013 32bit Compilers - DEU Resources (x32 Version: 12.0.21005) Microsoft Visual C++ 2013 Core Libraries (x32 Version: 12.0.21005) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005) Microsoft Visual C++ 2013 x64 Debug Runtime - 12.0.21005 (Version: 12.0.21005) Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005) Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005) Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005 (x32 Version: 12.0.21005) Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005) Microsoft Visual C++ 2013 x86-x64 Compilers (x32 Version: 12.0.21005) Microsoft Visual Studio 2013 Express Prerequisites x64 - DEU (Version: 12.0.21005) Microsoft Visual Studio 2013 Shell (Minimum) (x32 Version: 12.0.21005) Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies (x32 Version: 12.0.21005) Microsoft Visual Studio 2013 Shell-(Mindest)-Ressourcen (x32 Version: 12.0.21005) Microsoft Visual Studio 2013 Team Explorer Sprachpaket - DEU (x32 Version: 12.0.21005) Microsoft Visual Studio 2013-Vorbereitung (x32 Version: 12.0.21005) Microsoft Visual Studio Express 2013 for Windows Desktop (x32 Version: 12.0.21005) Microsoft Visual Studio Express 2013 für Windows Desktop - DEU (x32 Version: 12.0.21005) Microsoft Visual Studio Express 2013 für Windows Desktop - DEU (x32 Version: 12.0.21005.13) Microsoft Visual Studio Ultimate 2013 XAML UI Designer Core (x32 Version: 12.0.21005) Microsoft Visual Studio Ultimate 2013 XAML UI Designer deu Resources (x32 Version: 12.0.21005) Microsoft Works (x32 Version: 9.7.0621) Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0) Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0) Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0) Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.1.3366.16) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.1.3366.16) Minutor (x32 Version: 1.6.3) Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0) Mozilla Maintenance Service (x32 Version: 24.1.0) Mozilla Thunderbird 24.1.0 (x86 de) (x32 Version: 24.1.0) Mp3tag v2.48 (x32 Version: v2.48) MSVC80_x64_v2 (Version: 1.0.3.0) MSVC80_x86_v2 (x32 Version: 1.0.3.0) MSVC90_x64 (Version: 1.0.1.2) MSVC90_x86 (x32 Version: 1.0.1.2) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB927978) (x32 Version: 4.20.9841.0) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MTX (x32 Version: 1.0.0) No23 Recorder (x32 Version: 2.1.0.3) NVIDIA 3D Vision Controller Driver (x32 Version: 280.19) NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82) NVIDIA 3D Vision Treiber 331.82 (Version: 331.82) NVIDIA GeForce Experience 1.8 (Version: 1.8) NVIDIA Grafiktreiber 331.82 (Version: 331.82) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.142.992) NVIDIA LED Visualizer 1.0 (Version: 1.0) NVIDIA Network Service (Version: 1.0) NVIDIA PhysX (x32 Version: 9.13.0725) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725) NVIDIA ShadowPlay 10.10.5 (Version: 10.10.5) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182) NVIDIA Systemsteuerung 331.82 (Version: 331.82) NVIDIA Update 10.10.5 (Version: 10.10.5) NVIDIA Update Core (Version: 10.10.5) NVIDIA Virtual Audio 1.2.12 (Version: 1.2.12) OpenAL (x32) Opera 12.16 (x32 Version: 12.16.1860) Orcs Must Die! (x32) Orcs Must Die! 2 (x32) Origin (x32 Version: 8.5.0.4550) Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (x32 Version: 4.5.50932) Pando Media Booster (x32 Version: 2.3.6.0) PAYDAY 2 (x32) PC Connectivity Solution (x32 Version: 11.4.21.0) PDF Settings CS6 (x32 Version: 11.0) PDF24 Creator 6.1.0 (x32) PDFCanvas V1.5 (x32) PDFCreator (x32 Version: 1.2.3) pDRAW32 (x32) PE-DESIGN Lite (x32 Version: 1.00.0000) Plants vs. Zombies: Game of the Year (x32) PowerISO (x32 Version: 4.8) Prison Architect (x32) proDAD Vitascene 1.0 (x32) PunkBuster Services (x32 Version: 0.989) QuickTime (x32 Version: 7.74.80.86) RealDownloader (x32 Version: 1.3.3) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0) RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0) RealPlayer (x32 Version: 16.0.3) Realtek 8136 8168 8169 Ethernet Driver (x32 Version: 1.00.0007) Realtek High Definition Audio Driver (x32 Version: 6.0.1.5910) RealUpgrade 1.1 (x32 Version: 1.1.0) Recuva (Version: 1.43) ROCCAT Kova[+] Mouse Driver (x32 Version: 1.10) Safari (x32 Version: 5.34.57.2) Samsung SPP-2040 Series (x32) Scrolls (x32 Version: 1.0.0) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32) SHIELD Streaming (Version: 1.6.75) SimVector 2.0 (x32) SimVector 4.6 (x32 Version: 4.6) Skype™ 6.6 (x32 Version: 6.6.106) Stardock Software (x32 Version: 1.00) Steam (x32 Version: 1.0.0.0) Streamripper (Remove only) (x32) Studio Ultimate (x32 Version: 11.00.0013) SUPER © +Recorder.2013.55 (Mar 7, 2013) Version +Recorder.2013. (x32 Version: +Recorder.2013.55) Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005) TeamSpeak 3 Client (HKCU Version: 3.0.10.1) TeamViewer 8 (x32 Version: 8.0.20202) Torchlight II (x32) Trine 2 (x32) TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.169) TuneUp Utilities 2014 (x32 Version: 14.0.1000.169) TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4600.4) TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.179) Unity Web Player (HKCU Version: ) Update for (KB2504637) (x32 Version: 1) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2494150) (x32) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32) USB Video Device (x32 Version: 5.8.48205.104) Video Grabber (x32 Version: 1.00.0000) VirtualCloneDrive (x32) VLC media player 2.0.1 (x32 Version: 2.0.1) Warhammer® 40,000®: Dawn of War® II – Retributionâ„¢ Beta (x32) WebM Project Directshow Filters (HKCU) Winamp (x32 Version: 5.623 ) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3538.0513) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3538.0513) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Sync (x32 Version: 14.0.8089.726) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Movie Maker 2.6 (x32 Version: 2.6.4037.0) Windows Software Development Kit (x32 Version: 8.100.25984) Windows Software Development Kit (x32 Version: 8.59.29989) Windows Software Development Kit DirectX x64 Remote (Version: 8.100.25984) Windows Software Development Kit DirectX x64 Remote (Version: 8.59.29989) Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.100.25984) Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.29989) Windows Software Development Kit for Windows Store Apps (x32 Version: 8.100.25984) Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.100.25984) Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.100.25984) Windows XP Targeting with C++ (x32 Version: 11.0.51106) Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0) WinRAR Xiph.Org Open Codecs 0.85.17777 (x32 Version: 0.85.17777) Xvid 1.2.2 final uninstall (x32 Version: 1.2) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2006-11-02 13:34 - 2012-09-29 10:43 - 00006608 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 3dns-2.adobe.com #192.150.22.22 127.0.0.1 3dns-3.adobe.com #192.150.14.21 127.0.0.1 3dns-4.adobe.com #192.150.18.247 127.0.0.1 3dns-5.adobe.com #192.150.22.46 127.0.0.1 adobe-dns.adobe.com #192.150.11.30 127.0.0.1 adobe-dns-2.adobe.com #192.150.11.247 127.0.0.1 adobe-dns-3.adobe.com #192.150.22.30 127.0.0.1 adobe.activate.com #69.175.22.26 127.0.0.1 activate.adobe.com #192.150.22.40 127.0.0.1 activate.wip3.adobe.com #192.150.22.40 127.0.0.1 activate.wip4.adobe.com #192.150.22.40 127.0.0.1 activate-sea.adobe.com #192.150.22.40 127.0.0.1 activate-sjc0.adobe.com #192.150.14.69 127.0.0.1 ereg.adobe.com #192.150.18.103 127.0.0.1 ereg.wip3.adobe.com #192.150.18.63 127.0.0.1 ereg.wip4.adobe.com #192.150.18.103 127.0.0.1 practivate.adobe.com #192.150.18.54 127.0.0.1 www.wip3.adobe.com #192.150.8.60 127.0.0.1 www.wip4.adobe.com #192.150.18.200 127.0.0.1 www.adobeereg.com #75.125.24.83 127.0.0.1 adobeereg.com #207.66.2.10 127.0.0.1 hl2rcv.adobe.com #192.150.14.174 127.0.0.1 wwis-dubc1-vip30.adobe.com #192.150.8.30 127.0.0.1 wwis-dubc1-vip31.adobe.com #192.150.8.31 127.0.0.1 wwis-dubc1-vip32.adobe.com #192.150.8.32 127.0.0.1 wwis-dubc1-vip33.adobe.com #192.150.8.33 127.0.0.1 wwis-dubc1-vip34.adobe.com #192.150.8.34 127.0.0.1 wwis-dubc1-vip35.adobe.com #192.150.8.35 127.0.0.1 wwis-dubc1-vip36.adobe.com #192.150.8.36 There are 105 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {0391F325-EEE3-45BA-BF56-99FD519AA6A2} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.) Task: {0AEAFAF6-F116-4A60-AFB4-C8B755A6E975} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {0D30E5BF-ED40-4091-AECE-7965FBBF7B4D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-10-30] (TuneUp Software) Task: {436855EE-1BED-4312-AC87-D825507DF371} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {4D605A75-3153-4310-983F-9ECEE3CB6B28} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {56E1894B-25A1-435C-AFED-E732E1F21286} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {5CE032EF-0BB6-49F0-846F-143D146FC82C} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {6B3B370E-B356-4C6F-96F1-A3C5A6AF1BFF} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation) Task: {6BAC24E7-748B-41D1-BD32-BD9845000389} - System32\Tasks\{B734321D-1D84-4724-AE20-1A98B1C916F9} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.) Task: {6C3CB3C0-6052-42E8-BD25-7C52815C5798} - System32\Tasks\Google Updater and Installer => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.) Task: {712C6861-2B14-4E72-92BA-22B6921FE2B7} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs Task: {71BB4441-40B7-40D5-AD5C-2A61420A8117} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.) Task: {72E6E58C-3DEF-4B5D-A1D3-9B8E77E33FA2} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [2013-09-30] (RealNetworks, Inc.) Task: {7DBAF4EC-81F2-4830-B9F7-D8C736F0A742} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {8108CB2C-AAE1-4651-90B3-BCED3C158789} - \Software Updater Ui No Task File Task: {AFD79A5C-F000-4681-A8F7-15287C6A8BB0} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {B1324958-0973-4662-867B-F86DAC6FBE7F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06] (Adobe Systems Incorporated) Task: {B9F5DFE3-3E12-480C-8B6B-0C822D82D0FB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-07] (Google Inc.) Task: {C74BC520-BA36-4658-8E95-B5EA54DAC1AB} - System32\Tasks\AdobeAAMUpdater-1.0-RAVENHOME-Saturn => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2012-04-04] (Adobe Systems Incorporated) Task: {CAAE9414-F4F3-4129-B376-3CD4826ACDA6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated) Task: {D4966FBF-E80C-480C-8D19-1EDDE188C296} - \Software Updater No Task File Task: {D51726B2-B034-4E34-87EA-441AC5478715} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {D54B9BE1-DD12-4AE6-A5D3-B081C3BB4C19} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2010-07-21] (Microsoft Corporation) Task: {DB98B526-822B-400F-BFEB-4C91782A65EB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-07] (Google Inc.) Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs Task: {F6E1045F-CA4E-4014-81ED-C82C6B72B9CB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {FFB0F86C-24E9-4058-A0F9-982D51D81FB9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-03-22 13:36 - 2010-03-15 11:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll 2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2012-12-20 17:19 - 2012-12-20 17:19 - 00479752 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\dblite.dll 2012-12-20 17:19 - 2012-12-20 17:19 - 01310728 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\kpcengine.2.2.dll 2013-10-07 15:49 - 2013-10-07 15:49 - 00221184 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll 2013-10-07 15:47 - 2013-10-07 15:47 - 00037888 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll 2013-10-07 15:44 - 2013-10-07 15:44 - 00050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll 2013-10-07 15:49 - 2013-10-07 15:49 - 00069632 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll 2013-10-07 15:49 - 2013-10-07 15:49 - 00628224 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-11.dll 2012-02-09 19:48 - 1998-10-31 10:55 - 00005120 _____ () C:\Program Files (x86)\EXPERTool\TBManage.dll 2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll 2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll 2013-11-27 10:20 - 2013-11-27 10:20 - 00046080 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_thread-vc90-mt-1_39.dll 2013-11-27 10:20 - 2013-11-27 10:20 - 00045056 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_date_time-vc90-mt-1_39.dll 2013-11-27 10:20 - 2013-11-27 10:20 - 00545032 _____ () C:\Program Files (x86)\Audials\Audials 11\StreamingClient.dll 2013-11-27 10:20 - 2013-11-27 10:20 - 00012800 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_system-vc90-mt-1_39.dll 2013-11-27 10:20 - 2013-11-27 10:20 - 00068360 _____ () C:\Program Files (x86)\Audials\Audials 11\CrashRpt.dll 2013-11-27 10:20 - 2013-11-27 10:20 - 00409352 _____ () C:\Program Files (x86)\Audials\Audials 11\SQLite3.dll 2013-11-27 10:20 - 2013-11-27 10:20 - 00614912 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_regex-vc90-mt-1_39.dll 2013-12-23 15:30 - 2013-12-23 15:30 - 00290304 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Utils\b7c10796273ed29a0e437b1bb32d1a30\Utils.ni.dll 2013-12-23 15:30 - 2013-12-23 15:30 - 00580096 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ManagedInterfaces\88a1b2862a92b8502c23801c0135abdb\ManagedInterfaces.ni.dll 2013-12-23 15:30 - 2013-12-23 15:30 - 02921984 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\AudialsComponents\cfef2f7bc31f8ea1e6239c4e148ee4f8\AudialsComponents.ni.dll 2013-12-23 15:30 - 2013-12-23 15:30 - 00178688 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\fastJSON\57f79304aeca7969c43a34a60d2dea2f\fastJSON.ni.dll 2013-01-04 13:31 - 2010-05-29 14:57 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\hiddriver.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2012-06-17 14:16 - 2012-06-17 14:16 - 00206336 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0\plugin\convenience.dll 2013-12-15 20:44 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-15 20:44 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-15 20:44 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-15 20:44 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-15 20:44 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-12-15 20:44 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Saturn\Achmed the Dead Terrorist.avi:TOC.WMV AlternateDataStreams: C:\Users\Saturn\Cookies:A0aqdbUKErwC9lz63atV AlternateDataStreams: C:\Users\Saturn\AppData\Local\Temp:gFWXbYbSeYeNSTyoEy9aZcH ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/26/2013 01:37:20 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc) (User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] Error: (12/26/2013 09:39:51 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"1". Die abhängige Assemblierung "FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (12/26/2013 08:53:20 AM) (Source: MsiInstaller) (User: RAVENHOME) Description: Product: Google Chrome Frame -- Error 1925. You do not have sufficient privileges to complete this installation for all users of the machine. Log on as administrator and then retry this installation. Error: (12/26/2013 08:50:55 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/23/2013 07:52:02 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"1". Die abhängige Assemblierung "FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (12/23/2013 03:01:32 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/23/2013 00:04:06 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] System errors: ============= Error: (12/26/2013 01:37:24 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (12/26/2013 01:37:24 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (12/26/2013 01:37:23 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: PCLEPCI Error: (12/26/2013 01:37:23 PM) (Source: Service Control Manager) (User: ) Description: Dienst "MSSQL$PINNACLESYS" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (12/26/2013 01:36:45 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (12/26/2013 01:36:45 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht. Error: (12/26/2013 01:35:47 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\SysWow64\drivers\pclepci.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (12/26/2013 08:56:16 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (12/26/2013 08:55:13 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (60000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht. Error: (12/26/2013 08:51:51 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Microsoft Office Sessions: ========================= Error: (12/26/2013 01:37:20 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc)(User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc)(User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc)(User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] Error: (12/26/2013 09:39:51 AM) (Source: SideBySide)(User: ) Description: FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"C:\Program Files\Autodesk\AutoCAD 2011\FaroImporter.exe Error: (12/26/2013 08:53:20 AM) (Source: MsiInstaller)(User: RAVENHOME) Description: Product: Google Chrome Frame -- Error 1925. You do not have sufficient privileges to complete this installation for all users of the machine. Log on as administrator and then retry this installation.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (12/26/2013 08:50:55 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/23/2013 07:52:02 PM) (Source: SideBySide)(User: ) Description: FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"C:\Program Files\Autodesk\AutoCAD 2011\FaroImporter.exe Error: (12/23/2013 03:01:32 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/23/2013 00:04:06 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] CodeIntegrity Errors: =================================== Date: 2012-02-09 20:24:44.757 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Saturn\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-02-09 20:24:44.726 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Saturn\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-02-09 20:24:44.445 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-02-09 20:24:44.414 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-06-27 20:37:19.235 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-06-27 20:37:19.213 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-06-27 18:08:37.107 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-06-27 18:08:37.084 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-06-27 18:05:36.526 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-06-27 18:05:36.503 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 8183.11 MB Available physical RAM: 5136.03 MB Total Pagefile: 16364.41 MB Available Pagefile: 12915.78 MB Total Virtual: 8192 MB Available Virtual: 8191.79 MB ==================== Drives ================================ Drive c: (BOOT) (Fixed) (Total:901.24 GB) (Free:116.2 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (RECOVER) (Fixed) (Total:30.26 GB) (Free:19.22 GB) FAT32 Drive i: (HD-HSU2) (Fixed) (Total:465.65 GB) (Free:99.93 GB) FAT32 Drive j: (Volume) (Fixed) (Total:1397.26 GB) (Free:185.87 GB) NTFS Drive k: (TREKSTOR) (Fixed) (Total:698.64 GB) (Free:197.7 GB) NTFS Drive l: (Volume) (Fixed) (Total:1863.01 GB) (Free:1100.4 GB) NTFS Drive m: (USB-HDD) (Fixed) (Total:1863.01 GB) (Free:167.19 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 2BAB359D) Partition 1: (Active) - (Size=901 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=30 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 699 GB) (Disk ID: 13070461) Partition 1: (Not Active) - (Size=699 GB) - (Type=07 NTFS) ======================================================== Disk: 5 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: DAD933CE) Partition 1: (Not Active) - (Size=-698723860480) - (Type=07 NTFS) ======================================================== Disk: 6 (Size: 466 GB) (Disk ID: CCC68C61) Partition 1: (Not Active) - (Size=466 GB) - (Type=0C) ======================================================== Disk: 7 (Size: 1863 GB) (Disk ID: 0C40E8F1) Partition 1: (Not Active) - (Size=-198626966528) - (Type=07 NTFS) ======================================================== Disk: 8 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 39A04C21) Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS) ==================== End Of Log ============================ |
27.12.2013, 10:40 | #5 | |
/// the machine /// TB-Ausbilder | Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändertCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
27.12.2013, 11:28 | #6 |
| Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Combo-Fix ist durchgelaufen. hier das log-file: Code:
ATTFilter ComboFix 13-12-26.01 - Saturn 27.12.2013 11:13:16.2.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8183.5315 [GMT 1:00] ausgeführt von:: c:\users\Saturn\Desktop\ComboFix.exe AV: Kaspersky PURE 3.0 *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5} FW: Kaspersky PURE 3.0 *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E} SP: Kaspersky PURE 3.0 *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Neuer Wiederherstellungspunkt wurde erstellt . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Saturn\AppData\Roaming\inst.exe c:\users\Saturn\SafariSetup-5.1.7.exe J:\Autorun.inf J:\install.exe M:\install.exe . . ((((((((((((((((((((((( Dateien erstellt von 2013-11-27 bis 2013-12-27 )))))))))))))))))))))))))))))) . . 2013-12-27 10:22 . 2013-12-27 10:22 -------- d-----w- c:\users\Public\AppData\Local\temp 2013-12-27 10:22 . 2013-12-27 10:22 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-12-27 10:14 . 2013-12-27 10:14 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FF6C5ECD-3AA2-439D-9DC9-067D2045FA19}\offreg.dll 2013-12-26 16:50 . 2013-12-26 16:50 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-12-26 12:43 . 2013-12-26 12:43 -------- d-----w- C:\FRST 2013-12-26 12:33 . 2013-12-26 14:03 -------- d-----w- C:\AdwCleaner 2013-12-26 08:01 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FF6C5ECD-3AA2-439D-9DC9-067D2045FA19}\mpengine.dll 2013-12-23 14:39 . 2013-12-23 14:39 -------- d-----w- c:\programdata\Licenses 2013-12-23 14:33 . 2013-12-23 14:33 -------- d-----w- c:\program files (x86)\Common Files\WebM Project 2013-12-23 14:33 . 2013-12-23 14:33 -------- d-----w- c:\program files (x86)\Common Files\HDX4 2013-12-23 14:32 . 2013-12-23 14:32 -------- d-----w- c:\users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 14:32 . 2013-12-23 14:32 -------- d-----w- c:\programdata\Engelmann Media 2013-12-23 14:32 . 2013-12-23 14:32 -------- d-----w- c:\program files (x86)\S.A.D 2013-12-22 13:51 . 2013-12-22 14:02 -------- d--h--w- c:\users\Saturn\AppData\Roaming\RPPrivate 2013-12-21 17:35 . 2013-12-21 17:37 -------- d-----w- c:\users\Saturn\AppData\Roaming\Trine2 2013-12-18 15:28 . 2013-09-15 23:03 361119 ----a-w- c:\windows\mod_frst.exe 2013-12-15 19:11 . 2013-12-15 19:11 -------- d-----w- c:\users\Saturn\AppData\Local\Avg2014 2013-12-15 19:04 . 2013-12-15 19:04 -------- d-----w- c:\users\Saturn\TuneUp 2014 2013-12-15 19:04 . 2013-10-30 09:45 43320 ----a-w- c:\windows\system32\uxtuneup.dll 2013-12-15 19:04 . 2013-10-30 09:45 36152 ----a-w- c:\windows\SysWow64\uxtuneup.dll 2013-12-15 19:03 . 2013-10-30 09:45 40760 ----a-w- c:\windows\system32\TURegOpt.exe 2013-12-15 19:03 . 2013-10-30 09:45 29496 ----a-w- c:\windows\system32\authuitu.dll 2013-12-15 19:03 . 2013-10-30 09:45 25400 ----a-w- c:\windows\SysWow64\authuitu.dll 2013-12-15 19:03 . 2013-12-15 19:04 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2014 2013-12-15 19:02 . 2013-12-15 19:14 -------- d-sh--w- c:\programdata\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 12:38 . 2013-12-15 12:38 -------- d-----w- c:\program files\Microsoft Xbox 360 Accessories 2013-12-15 11:06 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2013-12-15 11:06 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe 2013-12-15 11:06 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL 2013-12-15 11:06 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL 2013-12-15 11:06 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll 2013-12-12 19:35 . 2013-12-27 10:06 -------- d-----w- c:\users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-12 19:35 . 2013-12-12 19:35 -------- d-----w- c:\users\Saturn\AppData\Local\LogMeIn 2013-12-12 19:35 . 2013-12-12 19:35 -------- d-----w- c:\programdata\LogMeIn 2013-12-12 17:37 . 2013-12-12 17:37 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi 2013-12-07 14:08 . 2013-12-07 14:08 -------- d-----w- c:\program files (x86)\GUM1C5.tmp 2013-12-03 19:29 . 2013-12-03 19:29 -------- d-----w- c:\users\Saturn\AppData\Roaming\NuGet 2013-12-03 18:58 . 2013-12-03 18:58 1139040 ----a-w- c:\programdata\Microsoft\WDExpress\12.0\1031\ResourceCache.dll 2013-12-03 18:57 . 2013-12-03 18:57 -------- d-----w- c:\programdata\NuGet 2013-12-03 18:57 . 2013-12-03 18:57 -------- d-----w- c:\program files (x86)\NuGet 2013-12-03 18:55 . 2013-12-03 18:55 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules 2013-12-03 18:52 . 2013-12-03 18:53 -------- d-----w- c:\program files (x86)\Windows Kits 2013-12-03 18:52 . 2013-12-03 18:52 -------- d-----w- c:\program files (x86)\Common Files\Microsoft 2013-12-03 18:51 . 2013-12-03 18:51 -------- d-----w- c:\program files (x86)\Microsoft Help Viewer 2013-12-03 18:51 . 2013-12-03 18:55 -------- d-----w- c:\program files (x86)\Microsoft SDKs 2013-12-03 18:51 . 2013-12-03 18:51 -------- d-----w- c:\windows\SysWow64\1033 2013-12-03 18:51 . 2013-12-03 18:51 -------- d-----w- c:\windows\SysWow64\1031 2013-12-03 18:51 . 2013-12-03 18:51 -------- d-----w- c:\windows\system32\1033 2013-12-03 18:51 . 2013-12-03 18:51 -------- d-----w- c:\windows\system32\1031 2013-12-03 18:51 . 2013-12-03 18:57 -------- d-----w- c:\program files\Microsoft SQL Server 2013-12-03 18:50 . 2013-12-03 18:50 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition 2013-12-03 18:50 . 2013-12-03 18:56 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 12.0 2013-12-03 18:44 . 2013-12-03 18:44 -------- d-----w- c:\windows\Migration 2013-12-03 18:43 . 2013-12-03 18:43 -------- d-----w- c:\users\Saturn\AppData\Local\Introversion 2013-12-03 18:41 . 2013-12-03 18:41 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft 2013-12-03 18:17 . 2013-12-03 18:18 -------- d-----w- c:\users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 18:15 . 2013-10-30 17:03 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys 2013-12-03 18:15 . 2013-10-30 17:02 32544 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll 2013-12-03 18:14 . 2013-12-03 18:18 -------- d-----w- c:\users\Saturn\AppData\Local\NVIDIA 2013-12-03 17:51 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE 2013-11-28 18:54 . 2013-11-29 16:56 1096480 ----a-w- c:\windows\system32\nvspcap64.dll 2013-11-28 18:54 . 2013-11-29 16:56 979744 ----a-w- c:\windows\SysWow64\nvspcap.dll 2013-11-28 18:54 . 2013-11-28 18:54 -------- d-----w- c:\program files (x86)\AGEIA Technologies . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-12-16 18:56 . 2010-04-15 13:07 90708896 ----a-w- c:\windows\system32\MRT.exe 2013-12-10 19:34 . 2012-04-01 19:49 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-12-10 19:34 . 2011-05-14 09:43 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-11-27 09:20 . 2013-11-27 09:20 47240 ----a-w- c:\windows\system32\drivers\tbhsd.sys 2013-11-27 09:20 . 2013-11-27 09:20 24744 ----a-w- c:\windows\system32\drivers\RrNetCapFilterDriver.sys 2013-11-19 02:33 . 2010-03-06 09:02 267936 ------w- c:\windows\system32\MpSigStub.exe 2013-11-14 11:56 . 2012-02-09 18:39 18293608 ----a-w- c:\windows\system32\nvwgf2umx.dll 2013-11-14 11:56 . 2012-02-21 18:07 1436528 ----a-w- c:\windows\system32\nvumdshimx.dll 2013-11-14 11:56 . 2012-02-09 18:39 2697248 ----a-w- c:\windows\SysWow64\nvapi.dll 2013-11-14 11:56 . 2009-09-17 06:51 3069608 ----a-w- c:\windows\system32\nvapi64.dll 2013-11-11 15:02 . 2009-08-17 01:39 6674208 ----a-w- c:\windows\system32\nvcpl.dll 2013-11-11 15:02 . 2009-08-17 01:39 3490080 ----a-w- c:\windows\system32\nvsvc64.dll 2013-11-11 15:01 . 2009-08-17 01:39 922912 ----a-w- c:\windows\system32\nvvsvc.exe 2013-11-11 15:01 . 2009-08-17 01:39 2559776 ----a-w- c:\windows\system32\nvsvcr.dll 2013-11-11 15:01 . 2009-08-17 01:39 219424 ----a-w- c:\windows\system32\nvmctray.dll 2013-11-11 15:01 . 2009-07-23 01:06 63776 ----a-w- c:\windows\system32\nvshext.dll 2013-11-11 15:01 . 2012-02-21 18:09 3467927 ----a-w- c:\windows\system32\nvcoproc.bin 2013-11-11 07:59 . 2013-11-11 07:59 590112 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2013-10-27 08:12 . 2013-10-27 08:12 31520 ----a-w- c:\windows\system32\nvhdap64.dll 2013-10-27 08:12 . 2013-10-27 08:12 196384 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2013-10-27 08:12 . 2013-10-27 08:12 1884448 ----a-w- c:\windows\system32\nvdispco6433165.dll 2013-10-27 08:12 . 2013-10-27 08:12 1511712 ----a-w- c:\windows\system32\nvdispgenco6433165.dll 2013-10-27 08:12 . 2013-10-27 08:12 1510176 ----a-w- c:\windows\system32\nvhdagenco64.dll 2013-10-18 15:48 . 2013-05-10 15:51 626272 ----a-w- c:\windows\system32\drivers\klif.sys 2013-10-18 15:48 . 2012-09-03 16:23 29280 ----a-w- c:\windows\system32\drivers\klmouflt.sys 2013-10-18 15:48 . 2012-09-03 15:57 29280 ----a-w- c:\windows\system32\drivers\klkbdflt.sys 2013-10-18 15:48 . 2013-05-10 15:51 90208 ----a-w- c:\windows\system32\drivers\klflt.sys 2013-10-18 15:48 . 2012-06-19 15:28 7717984 ----a-w- c:\windows\system32\drivers\kl1.sys 2013-10-12 02:30 . 2013-11-14 20:08 830464 ----a-w- c:\windows\system32\nshwfp.dll 2013-10-12 02:29 . 2013-11-14 20:08 859648 ----a-w- c:\windows\system32\IKEEXT.DLL 2013-10-12 02:29 . 2013-11-14 20:08 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL 2013-10-12 02:03 . 2013-11-14 20:08 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll 2013-10-12 02:01 . 2013-11-14 20:08 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL 2013-10-08 05:50 . 2013-10-21 17:41 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-10-06 18:36 . 2010-04-07 08:38 298280 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2013-10-06 18:36 . 2010-04-06 19:33 298280 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2013-10-06 18:25 . 2010-04-06 19:33 298280 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2013-10-05 20:25 . 2013-11-14 20:08 1474048 ----a-w- c:\windows\system32\crypt32.dll 2013-10-05 19:57 . 2013-11-14 20:08 1168384 ----a-w- c:\windows\SysWow64\crypt32.dll 2013-10-05 16:25 . 2010-04-06 19:33 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2013-10-05 15:35 . 2010-05-18 21:35 3360624 ----a-w- c:\windows\SysWow64\pbsvc.exe 2013-10-05 01:38 . 2013-10-05 01:38 97440 ----a-w- c:\windows\SysWow64\mfcm120d.dll 2013-10-05 01:38 . 2013-10-05 01:38 970912 ----a-w- c:\windows\SysWow64\msvcr120.dll 2013-10-05 01:38 . 2013-10-05 01:38 96936 ----a-w- c:\windows\SysWow64\mfcm120ud.dll 2013-10-05 01:38 . 2013-10-05 01:38 912552 ----a-w- c:\windows\SysWow64\vcamp120d.dll 2013-10-05 01:38 . 2013-10-05 01:38 83104 ----a-w- c:\windows\SysWow64\mfcm120u.dll 2013-10-05 01:38 . 2013-10-05 01:38 83104 ----a-w- c:\windows\SysWow64\mfcm120.dll 2013-10-05 01:38 . 2013-10-05 01:38 8282784 ----a-w- c:\windows\SysWow64\mfc120ud.dll 2013-10-05 01:38 . 2013-10-05 01:38 8212640 ----a-w- c:\windows\SysWow64\mfc120d.dll 2013-10-05 01:38 . 2013-10-05 01:38 815272 ----a-w- c:\windows\SysWow64\msvcp120d.dll 2013-10-05 01:38 . 2013-10-05 01:38 772784 ----a-w- c:\windows\SysWow64\vccorlib120d.dll 2013-10-05 01:38 . 2013-10-05 01:38 74920 ----a-w- c:\windows\SysWow64\mfc120fra.dll 2013-10-05 01:38 . 2013-10-05 01:38 74920 ----a-w- c:\windows\SysWow64\mfc120deu.dll 2013-10-05 01:38 . 2013-10-05 01:38 73896 ----a-w- c:\windows\SysWow64\mfc120esn.dll 2013-10-05 01:38 . 2013-10-05 01:38 72872 ----a-w- c:\windows\SysWow64\mfc120ita.dll 2013-10-05 01:38 . 2013-10-05 01:38 70824 ----a-w- c:\windows\SysWow64\mfc120rus.dll 2013-10-05 01:38 . 2013-10-05 01:38 65192 ----a-w- c:\windows\SysWow64\mfc120enu.dll 2013-10-05 01:38 . 2013-10-05 01:38 53928 ----a-w- c:\windows\SysWow64\mfc120jpn.dll 2013-10-05 01:38 . 2013-10-05 01:38 53416 ----a-w- c:\windows\SysWow64\mfc120kor.dll 2013-10-05 01:38 . 2013-10-05 01:38 46248 ----a-w- c:\windows\SysWow64\mfc120cht.dll 2013-10-05 01:38 . 2013-10-05 01:38 46248 ----a-w- c:\windows\SysWow64\mfc120chs.dll 2013-10-05 01:38 . 2013-10-05 01:38 455328 ----a-w- c:\windows\SysWow64\msvcp120.dll 2013-10-05 01:38 . 2013-10-05 01:38 4449952 ----a-w- c:\windows\SysWow64\mfc120u.dll 2013-10-05 01:38 . 2013-10-05 01:38 4424344 ----a-w- c:\windows\SysWow64\mfc120.dll 2013-10-05 01:38 . 2013-10-05 01:38 339616 ----a-w- c:\windows\SysWow64\vcamp120.dll 2013-10-05 01:38 . 2013-10-05 01:38 247984 ----a-w- c:\windows\SysWow64\vccorlib120.dll 2013-10-05 01:38 . 2013-10-05 01:38 1824424 ----a-w- c:\windows\SysWow64\msvcr120d.dll 2013-10-05 01:38 . 2013-10-05 01:38 149672 ----a-w- c:\windows\SysWow64\vcomp120d.dll 2013-10-05 01:38 . 2013-10-05 01:38 119456 ----a-w- c:\windows\SysWow64\vcomp120.dll 2013-10-04 22:58 . 2013-10-04 22:58 963232 ----a-w- c:\windows\system32\msvcr120.dll 2013-10-04 22:58 . 2013-10-04 22:58 91808 ----a-w- c:\windows\system32\mfcm120u.dll 2013-10-04 22:58 . 2013-10-04 22:58 91808 ----a-w- c:\windows\system32\mfcm120.dll 2013-10-04 22:58 . 2013-10-04 22:58 74920 ----a-w- c:\windows\system32\mfc120fra.dll 2013-10-04 22:58 . 2013-10-04 22:58 74920 ----a-w- c:\windows\system32\mfc120deu.dll 2013-10-04 22:58 . 2013-10-04 22:58 73896 ----a-w- c:\windows\system32\mfc120esn.dll 2013-10-04 22:58 . 2013-10-04 22:58 72872 ----a-w- c:\windows\system32\mfc120ita.dll 2013-10-04 22:58 . 2013-10-04 22:58 70824 ----a-w- c:\windows\system32\mfc120rus.dll 2013-10-04 22:58 . 2013-10-04 22:58 660128 ----a-w- c:\windows\system32\msvcp120.dll 2013-10-04 22:58 . 2013-10-04 22:58 65192 ----a-w- c:\windows\system32\mfc120enu.dll 2013-10-04 22:58 . 2013-10-04 22:58 5634720 ----a-w- c:\windows\system32\mfc120u.dll 2013-10-04 22:58 . 2013-10-04 22:58 5608088 ----a-w- c:\windows\system32\mfc120.dll 2013-10-04 22:58 . 2013-10-04 22:58 53928 ----a-w- c:\windows\system32\mfc120jpn.dll 2013-10-04 22:58 . 2013-10-04 22:58 53416 ----a-w- c:\windows\system32\mfc120kor.dll 2013-10-04 22:58 . 2013-10-04 22:58 481952 ----a-w- c:\windows\system32\vcamp120.dll 2013-10-04 22:58 . 2013-10-04 22:58 46248 ----a-w- c:\windows\system32\mfc120cht.dll 2013-10-04 22:58 . 2013-10-04 22:58 46248 ----a-w- c:\windows\system32\mfc120chs.dll 2013-10-04 22:58 . 2013-10-04 22:58 356528 ----a-w- c:\windows\system32\vccorlib120.dll 2013-10-04 22:58 . 2013-10-04 22:58 2150568 ----a-w- c:\windows\system32\msvcr120d.dll 2013-10-04 22:58 . 2013-10-04 22:58 168616 ----a-w- c:\windows\system32\vcomp120d.dll 2013-10-04 22:58 . 2013-10-04 22:58 137376 ----a-w- c:\windows\system32\vcomp120.dll 2013-10-04 22:58 . 2013-10-04 22:58 1241256 ----a-w- c:\windows\system32\vcamp120d.dll 2013-10-04 22:58 . 2013-10-04 22:58 1101480 ----a-w- c:\windows\system32\msvcp120d.dll 2013-10-04 22:58 . 2013-10-04 22:58 10973344 ----a-w- c:\windows\system32\mfc120ud.dll 2013-10-04 22:58 . 2013-10-04 22:58 10901152 ----a-w- c:\windows\system32\mfc120d.dll 2013-10-04 22:58 . 2013-10-04 22:58 107680 ----a-w- c:\windows\system32\mfcm120d.dll 2013-10-04 22:58 . 2013-10-04 22:58 107176 ----a-w- c:\windows\system32\mfcm120ud.dll 2013-10-04 22:58 . 2013-10-04 22:58 1023664 ----a-w- c:\windows\system32\vccorlib120d.dll 2013-10-04 02:28 . 2013-11-14 20:08 190464 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll 2013-10-04 02:25 . 2013-11-14 20:08 197120 ----a-w- c:\windows\system32\credui.dll 2013-10-04 02:24 . 2013-11-14 20:08 1930752 ----a-w- c:\windows\system32\authui.dll 2006-05-03 09:06 163328 --sha-r- c:\windows\SysWOW64\flvDX.dll 2007-02-21 10:47 31232 --sha-r- c:\windows\SysWOW64\msfDX.dll 2008-03-16 12:30 216064 --sha-r- c:\windows\SysWOW64\nbDX.dll 2010-01-06 21:00 107520 --sha-r- c:\windows\SysWOW64\TAKDSDecoder.dll 2012-10-05 17:54 188416 --sha-r- c:\windows\SysWOW64\winDCE32.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon] @="{dd230880-495a-11d1-b064-008048ec2fc5}" [HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}] 2012-12-20 16:20 459784 ----a-w- c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] "Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-10-19 3077528] "GAINWARD"="c:\program files (x86)\EXPERTool\TBPanel.exe" [2011-08-02 2273608] "iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-09-14 59720] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "snp2uvc"="c:\windows\vsnp2uvc.exe" [2008-08-01 675840] "tsnp2uvc"="c:\windows\tsnp2uvc.exe" [2009-12-11 320512] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "UpdatePDRShortCut"="c:\program files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "CloneCDTray"="c:\program files (x86)\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344] "AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [2013-10-18 356128] "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184] "PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-12-04 186408] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-11-29 3806544] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" "Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" "Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices "FixCamera"=c:\windows\FixCamera.exe "Samsung Common SM"="c:\windows\Samsung\ComSMMgr\ssmmgr.exe" /autorun "TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot "AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . R1 bnqstsgk;bnqstsgk;c:\windows\system32\drivers\bnqstsgk.sys;c:\windows\SYSNATIVE\drivers\bnqstsgk.sys [x] R1 dfhtpxsf;dfhtpxsf;c:\windows\system32\drivers\dfhtpxsf.sys;c:\windows\SYSNATIVE\drivers\dfhtpxsf.sys [x] R1 evkomlpb;evkomlpb;c:\windows\system32\drivers\evkomlpb.sys;c:\windows\SYSNATIVE\drivers\evkomlpb.sys [x] R1 exghbnub;exghbnub;c:\windows\system32\drivers\exghbnub.sys;c:\windows\SYSNATIVE\drivers\exghbnub.sys [x] R1 flnvtwiu;flnvtwiu;c:\windows\system32\drivers\flnvtwiu.sys;c:\windows\SYSNATIVE\drivers\flnvtwiu.sys [x] R1 ggplayov;ggplayov;c:\windows\system32\drivers\ggplayov.sys;c:\windows\SYSNATIVE\drivers\ggplayov.sys [x] R1 glhbzrdp;glhbzrdp;c:\windows\system32\drivers\glhbzrdp.sys;c:\windows\SYSNATIVE\drivers\glhbzrdp.sys [x] R1 hjgequpo;hjgequpo;c:\windows\system32\drivers\hjgequpo.sys;c:\windows\SYSNATIVE\drivers\hjgequpo.sys [x] R1 ibrmytkv;ibrmytkv;c:\windows\system32\drivers\ibrmytkv.sys;c:\windows\SYSNATIVE\drivers\ibrmytkv.sys [x] R1 ihpczvzt;ihpczvzt;c:\windows\system32\drivers\ihpczvzt.sys;c:\windows\SYSNATIVE\drivers\ihpczvzt.sys [x] R1 iwxgprso;iwxgprso;c:\windows\system32\drivers\iwxgprso.sys;c:\windows\SYSNATIVE\drivers\iwxgprso.sys [x] R1 jhostfze;jhostfze;c:\windows\system32\drivers\jhostfze.sys;c:\windows\SYSNATIVE\drivers\jhostfze.sys [x] R1 kiaqjrtf;kiaqjrtf;c:\windows\system32\drivers\kiaqjrtf.sys;c:\windows\SYSNATIVE\drivers\kiaqjrtf.sys [x] R1 kpqjothk;kpqjothk;c:\windows\system32\drivers\kpqjothk.sys;c:\windows\SYSNATIVE\drivers\kpqjothk.sys [x] R1 mozosloe;mozosloe;c:\windows\system32\drivers\mozosloe.sys;c:\windows\SYSNATIVE\drivers\mozosloe.sys [x] R1 mwtafrhe;mwtafrhe;c:\windows\system32\drivers\mwtafrhe.sys;c:\windows\SYSNATIVE\drivers\mwtafrhe.sys [x] R1 nijxcfnj;nijxcfnj;c:\windows\system32\drivers\nijxcfnj.sys;c:\windows\SYSNATIVE\drivers\nijxcfnj.sys [x] R1 njlwenqt;njlwenqt;c:\windows\system32\drivers\njlwenqt.sys;c:\windows\SYSNATIVE\drivers\njlwenqt.sys [x] R1 nrmqgeaq;nrmqgeaq;c:\windows\system32\drivers\nrmqgeaq.sys;c:\windows\SYSNATIVE\drivers\nrmqgeaq.sys [x] R1 olekorua;olekorua;c:\windows\system32\drivers\olekorua.sys;c:\windows\SYSNATIVE\drivers\olekorua.sys [x] R1 pddbwrxt;pddbwrxt;c:\windows\system32\drivers\pddbwrxt.sys;c:\windows\SYSNATIVE\drivers\pddbwrxt.sys [x] R1 pkijmgtn;pkijmgtn;c:\windows\system32\drivers\pkijmgtn.sys;c:\windows\SYSNATIVE\drivers\pkijmgtn.sys [x] R1 ptvuibnd;ptvuibnd;c:\windows\system32\drivers\ptvuibnd.sys;c:\windows\SYSNATIVE\drivers\ptvuibnd.sys [x] R1 qlnvkvlz;qlnvkvlz;c:\windows\system32\drivers\qlnvkvlz.sys;c:\windows\SYSNATIVE\drivers\qlnvkvlz.sys [x] R1 qqfmmntb;qqfmmntb;c:\windows\system32\drivers\qqfmmntb.sys;c:\windows\SYSNATIVE\drivers\qqfmmntb.sys [x] R1 qyyteedz;qyyteedz;c:\windows\system32\drivers\qyyteedz.sys;c:\windows\SYSNATIVE\drivers\qyyteedz.sys [x] R1 reiphzej;reiphzej;c:\windows\system32\drivers\reiphzej.sys;c:\windows\SYSNATIVE\drivers\reiphzej.sys [x] R1 rkispkye;rkispkye;c:\windows\system32\drivers\rkispkye.sys;c:\windows\SYSNATIVE\drivers\rkispkye.sys [x] R1 rqxvktor;rqxvktor;c:\windows\system32\drivers\rqxvktor.sys;c:\windows\SYSNATIVE\drivers\rqxvktor.sys [x] R1 rsnvucpt;rsnvucpt;c:\windows\system32\drivers\rsnvucpt.sys;c:\windows\SYSNATIVE\drivers\rsnvucpt.sys [x] R1 sljolomf;sljolomf;c:\windows\system32\drivers\sljolomf.sys;c:\windows\SYSNATIVE\drivers\sljolomf.sys [x] R1 tpioqxek;tpioqxek;c:\windows\system32\drivers\tpioqxek.sys;c:\windows\SYSNATIVE\drivers\tpioqxek.sys [x] R1 trdhienr;trdhienr;c:\windows\system32\drivers\trdhienr.sys;c:\windows\SYSNATIVE\drivers\trdhienr.sys [x] R1 txvztkiq;txvztkiq;c:\windows\system32\drivers\txvztkiq.sys;c:\windows\SYSNATIVE\drivers\txvztkiq.sys [x] R1 tzjkmdvf;tzjkmdvf;c:\windows\system32\drivers\tzjkmdvf.sys;c:\windows\SYSNATIVE\drivers\tzjkmdvf.sys [x] R1 uguzijuk;uguzijuk;c:\windows\system32\drivers\uguzijuk.sys;c:\windows\SYSNATIVE\drivers\uguzijuk.sys [x] R1 vgrfszla;vgrfszla;c:\windows\system32\drivers\vgrfszla.sys;c:\windows\SYSNATIVE\drivers\vgrfszla.sys [x] R1 vtxmuojc;vtxmuojc;c:\windows\system32\drivers\vtxmuojc.sys;c:\windows\SYSNATIVE\drivers\vtxmuojc.sys [x] R1 wrsxqila;wrsxqila;c:\windows\system32\drivers\wrsxqila.sys;c:\windows\SYSNATIVE\drivers\wrsxqila.sys [x] R1 xeshofoi;xeshofoi;c:\windows\system32\drivers\xeshofoi.sys;c:\windows\SYSNATIVE\drivers\xeshofoi.sys [x] R1 xhbipmbk;xhbipmbk;c:\windows\system32\drivers\xhbipmbk.sys;c:\windows\SYSNATIVE\drivers\xhbipmbk.sys [x] R1 ybmjedft;ybmjedft;c:\windows\system32\drivers\ybmjedft.sys;c:\windows\SYSNATIVE\drivers\ybmjedft.sys [x] R1 ydnwlbze;ydnwlbze;c:\windows\system32\drivers\ydnwlbze.sys;c:\windows\SYSNATIVE\drivers\ydnwlbze.sys [x] R1 yrxzjdal;yrxzjdal;c:\windows\system32\drivers\yrxzjdal.sys;c:\windows\SYSNATIVE\drivers\yrxzjdal.sys [x] R1 yssdrnbz;yssdrnbz;c:\windows\system32\drivers\yssdrnbz.sys;c:\windows\SYSNATIVE\drivers\yssdrnbz.sys [x] R1 yvzmfhna;yvzmfhna;c:\windows\system32\drivers\yvzmfhna.sys;c:\windows\SYSNATIVE\drivers\yvzmfhna.sys [x] R1 zirtwuoe;zirtwuoe;c:\windows\system32\drivers\zirtwuoe.sys;c:\windows\SYSNATIVE\drivers\zirtwuoe.sys [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 DirMngr;DirMngr;c:\program files (x86)\GNU\GnuPG\dirmngr.exe;c:\program files (x86)\GNU\GnuPG\dirmngr.exe [x] R2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x] R2 lxecCATSCustConnectService;lxecCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\lxecserv.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 AF9035HB;AF9035 Hybrid Device;c:\windows\system32\Drivers\AF9035HB.sys;c:\windows\SYSNATIVE\Drivers\AF9035HB.sys [x] R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys;c:\windows\SYSNATIVE\Drivers\ATSwpWDF.sys [x] R3 busbcrw;USB Card Reader Writer driver;c:\windows\system32\Drivers\bucrw64.sys;c:\windows\SYSNATIVE\Drivers\bucrw64.sys [x] R3 cpuz130;cpuz130;c:\users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys;c:\users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\program files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe;c:\program files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [x] R3 dump_wmimmc;dump_wmimmc;c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys;c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x] R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x] R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x] R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 VsEtwService120;Visual Studio ETW-Ereignisauflistungsdienst;c:\program files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe;c:\program files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys;c:\windows\SYSNATIVE\DRIVERS\CSCrySec.sys [x] S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys;c:\windows\SYSNATIVE\DRIVERS\CSVirtualDiskDrv.sys [x] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x] S1 RrNetCapFilterDriver;RadioRip Filter Driver;c:\windows\system32\DRIVERS\RrNetCapFilterDriver.sys;c:\windows\SYSNATIVE\DRIVERS\RrNetCapFilterDriver.sys [x] S2 CSObjectsSrv;Verwaltungsservice vom CryproStorage-System;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [x] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x] S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x] S2 lxec_device;lxec_device;c:\windows\system32\lxeccoms.exe;c:\windows\SYSNATIVE\lxeccoms.exe [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x] S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x] S2 WTService;WTService;c:\windows\system32\atwtusb.exe;c:\windows\SYSNATIVE\atwtusb.exe [x] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x] S3 KovaPlusFltr;ROCCAT Kova[+] Mouse;c:\windows\system32\drivers\KovaPlusFltr.sys;c:\windows\SYSNATIVE\drivers\KovaPlusFltr.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *Deregistered* - afw *Deregistered* - afwcore *Deregistered* - avgntflt *Deregistered* - BdFileSpy . Inhalt des "geplante Tasks" Ordners . 2013-12-27 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 19:34] . 2013-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-07 17:18] . 2013-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-07 17:18] . 2013-12-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job - c:\users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17 12:57] . 2013-12-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job - c:\users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17 12:57] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 ----a-w- c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 ----a-w- c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 ----a-w- c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 ----a-w- c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon] @="{dd230880-495a-11d1-b064-008048ec2fc5}" [HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}] 2012-12-20 16:22 492040 ----a-w- c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-04 8060960] "IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 2327952] "snp2uvc"="c:\windows\vsnp2uvc.exe" [2008-08-01 675840] "MacrokeyManager"="WTMKM.exe" [2011-04-12 7325184] "Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-14 1028384] "ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-11-29 1096480] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-11-29 2273056] "XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler] "{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files (x86)\Stardock\ObjectDockPlus2\ODMenu64.dll" [2010-03-24 633200] . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105 IE: Hinzufügen zu Anti-Banner - c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ie_banner_deny.htm IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000 IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\ FF - ExtSQL: 2013-11-01 17:55; {43616d3f-8ae4-4351-9b52-74faeeb1a3dc}; c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi FF - ExtSQL: 2013-11-13 17:30; snt@dotlabs.co; c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\extensions\snt@dotlabs.co.xpi FF - ExtSQL: 2013-11-20 17:14; om@offermosquito.com; c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\extensions\om@offermosquito.com.xpi FF - ExtSQL: 2013-12-22 14:54; {18f64064-a482-4fbf-8fd6-3c6e5806565a}; c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi FF - ExtSQL: !HIDDEN! 2010-04-06 19:25; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe Wow6432Node-HKLM-Run-<NO NAME> - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start AddRemove-{CF91A5A9-F10D-433D-A677-9505B84EAF1B} - c:\programdata\{0F4A7EFE-5950-4389-BF36-1E625D72456B}\shareware.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*2*6*4*-*A*A*C*)*(Á8\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*b*l*o*g*)ôÄU\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*D*V*kßIP\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*e%%`\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*—†É=\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*ãèÏi\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*åïÍj\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*4*Vnñ&\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*4*ü~K\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*¸ÊPO] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*¸ÊPO\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*êA'U¼*€»] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*êA'U¼*€»\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*)CÐj] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*)CÐj\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*²Y&ixD*€™b Fb`Eb*Eb*Db@Db€CbàCb CbÀBb*Bb*Ab@Abà@b€@b @b*?b`?bà=b@>b€=b =bÀ<b`<b*<b*;b€:bà:b`9bÀ9b] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*²Y&ixD*€™b Fb`Eb*Eb*Db@Db€CbàCb CbÀBb*Bb*Ab@Abà@b€@b @b*?b`?bà=b@>b€=b =bÀ<b`<b*<b*;b€:bà:b`9bÀ9b\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*áb–.] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*áb–.\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*…u[] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*…u[\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*êÌÝF] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*êÌÝF\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*vêÏi] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*vêÏi\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*ýîÍj] @Class="Shell" @Allowed: (Read) (RestrictedCode) . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*ýîÍj\OpenWithList] @Class="Shell" "a"="vlc.exe" "MRUList"="a" . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] @Allowed: (Read) (RestrictedCode) "??"=hex:13,95,31,d7,8b,66,70,31,f9,5f,f5,8f,a6,ac,40,8b,9d,ae,2e,52,2f,ef,b6, f5,d0,c8,00,38,6b,d5,3c,6b,78,77,c2,5f,7d,98,30,6a,50,50,02,ac,30,4a,69,0e,\ "??"=hex:5d,2e,bc,00,9b,07,bc,9c,34,34,87,88,c9,ab,ca,0d . [HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\SecuROM\License information*] "datasecu"=hex:bb,b2,ed,4d,64,d9,15,7d,4a,ed,d5,4d,89,1f,c9,5f,d8,2a,2f,9e,3a, e7,0c,17,c9,d5,1d,fc,26,7e,8f,c4,13,bd,60,6b,8e,21,b5,eb,52,b9,35,61,4a,bb,\ "rkeysecu"=hex:d0,fb,2a,78,2c,a7,1e,f0,05,98,19,d5,16,69,d9,3c . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-12-27 11:24:54 ComboFix-quarantined-files.txt 2013-12-27 10:24 ComboFix2.txt 2011-05-04 13:21 . Vor Suchlauf: 23 Verzeichnis(se), 112.675.827.712 Bytes frei Nach Suchlauf: 26 Verzeichnis(se), 112.822.898.688 Bytes frei . - - End Of File - - FF14B7CE7E7ED174BDE23A1A736C7A04 A36C5E4F47E84449FF07ED3517B43A31 |
28.12.2013, 08:27 | #7 |
/// the machine /// TB-Ausbilder | Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.12.2013, 15:41 | #8 |
| Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert so... hier die log-files: Malwarebytes Anti-Malware : Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.28.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Saturn :: RAVENHOME [Administrator] 28.12.2013 11:28:54 mbam-log-2013-12-28 (11-28-54).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 229047 Laufzeit: 11 Minute(n), 17 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) AdwCleaner: Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 28/12/2013 um 15:13:50 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Saturn - RAVENHOME # Gestartet von : C:\Users\Saturn\Desktop\Sicherheitsprogramme und logs\adwcleaner_3.016.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v24.0 (de) [ Datei : C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\prefs.js ] -\\ Google Chrome v [ Datei : C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht : urls_to_restore_on_startup ************************* AdwCleaner[R0].txt - [11855 octets] - [26/12/2013 13:33:35] AdwCleaner[R1].txt - [1254 octets] - [26/12/2013 15:02:16] AdwCleaner[R2].txt - [1344 octets] - [28/12/2013 15:12:05] AdwCleaner[S0].txt - [11403 octets] - [26/12/2013 13:34:38] AdwCleaner[S1].txt - [1226 octets] - [28/12/2013 15:13:50] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1286 octets] ########## JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.8 (11.05.2013:1) OS: Windows 7 Home Premium x64 Ran by Saturn on 28.12.2013 at 15:21:32,55 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" Successfully deleted: [Empty Folder] C:\Users\Saturn\appdata\local\{0F4D27EC-DDAD-45C8-BEA7-A7884F242A3D} Successfully deleted: [Empty Folder] C:\Users\Saturn\appdata\local\{3ED3D50D-D913-47EA-97A0-C79A37993845} Successfully deleted: [Empty Folder] C:\Users\Saturn\appdata\local\{995F100F-0566-46D7-9E82-69C74301601E} ~~~ FireFox Emptied folder: C:\Users\Saturn\AppData\Roaming\mozilla\firefox\profiles\8ta2xjux.default\minidumps [30 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 28.12.2013 at 15:27:22,55 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013 Ran by Saturn (administrator) on RAVENHOME on 28-12-2013 15:37:22 Running from C:\Users\Saturn\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Sonix) C:\Windows\vsnp2uvc.exe () C:\Windows\System32\WTMKM.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe () C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe () C:\Windows\tsnp2uvc.exe (Roccat GmbH) C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe ( ) C:\Windows\System32\lxeccoms.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Windows\System32\atwtusb.exe () C:\Windows\System32\atwtusb.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe (Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-04] (Realtek Semiconductor) HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation) HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix) HKLM\...\Run: [MacrokeyManager] - C:\Windows\System32\WTMKM.exe [7325184 2011-04-12] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation) HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix) HKLM-x32\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [320512 2009-12-11] () HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.) HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [539688 2011-03-17] (Roccat GmbH) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-10-19] () HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPANEL.exe [2273608 2011-08-02] (Gainward Co.) HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5765A900BFCBCB01 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} SearchScopes: HKCU - {44219366-4C90-49F2-B082-3F7B238E29B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms} BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] ShellExecuteHooks-x32: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 62.109.121.2 62.109.121.1 FireFox: ======== FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default FF Homepage: www.google.de FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Heroes Updater - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\battlefieldheroespatcher@ea.com FF Extension: ProxTube - Unblock YouTube - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\ich@maltegoetz.de FF Extension: YouTube Unblocker - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\youtubeunblocker@unblocker.yt FF Extension: Flagfox - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} FF Extension: Garmin Communicator - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} FF Extension: Microsoft .NET Framework Assistant - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: DownloadHelper - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: Simple New Tab - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\snt@dotlabs.co.xpi FF Extension: TinEye Reverse Image Search - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\tineye@ideeinc.com.xpi FF Extension: Shockwave Flash Plugin Free - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi FF Extension: {43616d3f-8ae4-4351-9b52-74faeeb1a3dc} - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi FF Extension: Adblock Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Download Statusbar - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi FF Extension: Tab Mix Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com" CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll No File CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.486_0\plugin/npUrlAdvisor.dll No File CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.486_0\plugin/npVKPlugin.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (YouTube) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Kaspersky URL Advisor) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0 CHR Extension: (bloomind ct deepdark) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd\1_0 CHR Extension: (Chrome Toolbox (by Google)) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0 CHR Extension: (TinEye Reverse Image Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.3_0 CHR Extension: (Safe Money) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0 CHR Extension: (Content Blocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.2.614_0 CHR Extension: (RealDownloader) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0 CHR Extension: (Virtual Keyboard) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.614_0 CHR Extension: (Google Wallet) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (YouTube Unblocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0 CHR Extension: (Gmail) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR Extension: (Anti-Banner) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0 CHR Extension: (Simple New Tab) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga\1.0.0_0 CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx CHR StartMenuInternet: Google Chrome - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO) R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-11] (BioWare) R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [248664 2013-09-12] (Garmin Ltd or its subsidiaries) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.) S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.) R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-01-07] ( ) R2 lxec_device; C:\Windows\SysWow64\lxeccoms.exe [598696 2010-01-07] ( ) S2 MSSQL$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [9150464 2005-05-03] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation) S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4005936 2011-06-06] (INCA Internet Co., Ltd.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-05] () R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] () S3 SQLAgent$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software) S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation) R2 WTService; C:\Windows\system32\atwtusb.exe [916992 2011-04-27] () ==================== Drivers (Whitelisted) ==================== S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies ) S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) R3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2011-10-08] (VSO Software) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO) R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.) R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider) S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) S1 PCLEPCI; C:\Windows\SysWow64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH) R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-11-27] (Audials AG) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2009-12-18] () S3 TBPanel; No ImagePath R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S1 bnqstsgk; \??\C:\Windows\system32\drivers\bnqstsgk.sys [x] S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 cpuz130; \??\C:\Users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] S1 dfhtpxsf; \??\C:\Windows\system32\drivers\dfhtpxsf.sys [x] S3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x] S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x] S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x] S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x] S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x] S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x] S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x] S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x] S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x] S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x] S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO) S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x] S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x] S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x] S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x] S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x] S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x] S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x] S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x] S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x] S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x] S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x] S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x] S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x] S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x] S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x] S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x] S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x] S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x] S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x] S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x] S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x] S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x] S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x] S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x] S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x] S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x] S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x] S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x] S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x] S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x] S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x] S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x] S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x] S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-28 15:37 - 2013-12-28 15:37 - 00040505 _____ C:\Users\Saturn\Desktop\FRST.txt 2013-12-28 15:27 - 2013-12-28 15:27 - 00001150 _____ C:\Users\Saturn\Desktop\JRT.txt 2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT 2013-12-28 15:17 - 2013-12-28 15:18 - 00000000 ____D C:\Users\Saturn\Desktop\wisersearch 2013-12-28 15:17 - 2013-12-28 15:17 - 00001366 _____ C:\Users\Saturn\Desktop\AdwCleaner[S1].txt 2013-12-28 15:15 - 2013-12-28 15:15 - 00000022 _____ C:\Windows\S.dirmngr 2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg 2013-12-26 23:43 - 2013-12-27 17:59 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 23:43 - 2013-12-27 17:59 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-12-26 19:41 - 2013-12-28 15:16 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:41 - 2013-12-28 15:16 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp 2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-26 13:43 - 2013-12-26 13:43 - 01928716 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe 2013-12-26 13:43 - 2013-12-26 13:43 - 00000000 ____D C:\FRST 2013-12-26 13:33 - 2013-12-28 15:13 - 00000000 ____D C:\AdwCleaner 2013-12-23 15:47 - 2013-12-23 15:48 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u 2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses 2013-12-23 15:33 - 2013-12-23 15:39 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler 2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2013-12-23 15:32 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D 2013-12-22 14:51 - 2013-12-22 15:02 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate 2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights 2013-12-21 18:35 - 2013-12-21 18:37 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2 2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url 2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url 2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log 2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url 2013-12-18 16:28 - 2013-09-16 00:03 - 00361119 _____ (Farbar) C:\Windows\mod_frst.exe 2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url 2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014 2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014 2013-12-15 20:04 - 2013-10-30 10:45 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-12-15 20:04 - 2013-10-30 10:45 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-12-15 20:03 - 2013-12-15 20:04 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-12-15 20:03 - 2013-10-30 10:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-12-15 20:03 - 2013-10-30 10:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-12-15 20:03 - 2013-10-30 10:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-12-15 20:02 - 2013-12-15 20:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-12-15 12:06 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-15 12:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-15 12:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-15 12:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-15 12:04 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-15 12:04 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-15 12:04 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-15 12:04 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-15 12:04 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-15 12:04 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-15 12:04 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-15 12:04 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-15 12:04 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-15 12:04 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-15 12:04 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-15 12:04 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-15 12:04 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-15 12:04 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-15 12:04 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-15 12:04 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-15 12:04 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-15 12:04 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-15 12:04 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-15 12:04 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-15 12:04 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-15 12:04 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-15 12:04 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-15 12:04 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-15 12:04 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-15 12:04 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-15 12:04 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-15 12:04 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-15 12:04 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-15 12:04 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-15 12:04 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-12 20:35 - 2013-12-28 15:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn 2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-12-12 17:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-12 17:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-12 17:48 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-12 17:48 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-12 17:48 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-12 17:48 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-12 17:48 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-12 17:48 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-12 17:48 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-12 17:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-12 17:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-12 17:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-12 17:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-12 17:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-12 17:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-12 17:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-12 17:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-12 17:48 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-12 17:48 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url 2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot 2013-12-07 20:26 - 2013-12-07 21:31 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part 2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp 2013-12-07 14:06 - 2013-12-07 20:26 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar 2013-12-07 14:03 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar 2013-12-07 13:59 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar 2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url 2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe 2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf 2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk 2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk 2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet 2013-12-03 19:58 - 2013-12-03 22:04 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-12-03 19:52 - 2013-12-03 19:53 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2013-12-03 19:51 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-12-03 19:51 - 2013-12-03 19:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2013-12-03 19:50 - 2013-12-03 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion 2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe 2013-12-03 19:17 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 19:15 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-03 19:15 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-03 19:14 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA 2013-12-03 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url 2013-12-01 19:55 - 2013-12-11 21:58 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server 2013-12-01 19:53 - 2013-12-01 19:52 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar 2013-11-30 17:53 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar 2013-11-30 17:50 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar 2013-11-30 17:46 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar 2013-11-30 17:43 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar 2013-11-30 17:40 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar 2013-11-30 17:37 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar 2013-11-30 17:33 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar 2013-11-30 17:30 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar 2013-11-30 17:27 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar 2013-11-30 17:24 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar 2013-11-30 17:20 - 2013-11-30 17:23 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar 2013-11-30 17:17 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar 2013-11-30 17:14 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar 2013-11-30 17:12 - 2013-11-30 17:14 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar 2013-11-30 17:09 - 2013-11-30 17:12 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar 2013-11-30 17:06 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar 2013-11-30 17:02 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar 2013-11-30 16:59 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar 2013-11-30 16:56 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar 2013-11-30 16:53 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar 2013-11-30 16:49 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar 2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar 2013-11-30 16:46 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar 2013-11-30 16:43 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar 2013-11-30 16:40 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar 2013-11-30 16:36 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar 2013-11-30 16:33 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar 2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar 2013-11-28 19:54 - 2013-11-29 17:56 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-28 19:54 - 2013-11-29 17:56 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-28 19:54 - 2013-11-28 19:54 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-11-28 19:50 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-28 19:50 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-11-28 19:50 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-11-28 19:50 - 2013-10-30 18:02 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-11-28 19:37 - 2013-11-30 15:31 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar ==================== One Month Modified Files and Folders ======= 2013-12-28 15:38 - 2013-12-28 15:37 - 00040505 _____ C:\Users\Saturn\Desktop\FRST.txt 2013-12-28 15:38 - 2011-06-30 11:00 - 00000000 ____D C:\Users\Saturn\AppData\Local\PMB Files 2013-12-28 15:37 - 2012-06-17 13:57 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job 2013-12-28 15:34 - 2012-04-01 20:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-28 15:27 - 2013-12-28 15:27 - 00001150 _____ C:\Users\Saturn\Desktop\JRT.txt 2013-12-28 15:24 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-28 15:24 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT 2013-12-28 15:18 - 2013-12-28 15:17 - 00000000 ____D C:\Users\Saturn\Desktop\wisersearch 2013-12-28 15:18 - 2013-05-10 16:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-12-28 15:17 - 2013-12-28 15:17 - 00001366 _____ C:\Users\Saturn\Desktop\AdwCleaner[S1].txt 2013-12-28 15:17 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-28 15:17 - 2006-11-02 13:34 - 00000292 _____ C:\Windows\win.ini 2013-12-28 15:16 - 2013-12-26 19:41 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-28 15:16 - 2013-12-26 19:41 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-28 15:16 - 2009-07-14 05:51 - 27083805 _____ C:\Windows\setupact.log 2013-12-28 15:15 - 2013-12-28 15:15 - 00000022 _____ C:\Windows\S.dirmngr 2013-12-28 15:15 - 2012-04-07 18:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-28 15:15 - 2009-09-07 15:11 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-28 15:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-28 15:14 - 2010-04-06 19:01 - 01059280 _____ C:\Windows\WindowsUpdate.log 2013-12-28 15:13 - 2013-12-26 13:33 - 00000000 ____D C:\AdwCleaner 2013-12-28 15:13 - 2012-04-07 18:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-28 10:27 - 2010-04-06 20:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc 2013-12-28 09:31 - 2010-03-06 14:16 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe 2013-12-28 09:21 - 2010-04-06 18:33 - 00937318 _____ C:\Windows\PFRO.log 2013-12-27 20:37 - 2012-06-17 13:57 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job 2013-12-27 19:40 - 2010-05-28 22:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Audacity 2013-12-27 19:39 - 2012-04-06 18:05 - 00000000 ____D C:\Users\Saturn\Desktop\filme 2013-12-27 18:28 - 2013-01-02 19:22 - 00000000 ____D C:\JDownloader 2 2013-12-27 18:27 - 2012-03-13 13:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner 2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg 2013-12-27 17:59 - 2013-12-26 23:43 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-27 17:59 - 2013-12-26 23:43 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-27 17:33 - 2013-10-30 17:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-27 11:24 - 2011-05-04 13:57 - 00000000 ____D C:\Qoobox 2013-12-27 11:22 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-12-27 11:21 - 2010-04-06 18:20 - 00000000 ____D C:\Users\Saturn 2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-12-26 19:44 - 2011-05-05 15:50 - 00000000 ____D C:\Program Files\CCleaner 2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp 2013-12-26 19:36 - 2011-01-11 01:00 - 738757377 _____ C:\Windows\MEMORY.DMP 2013-12-26 19:36 - 2011-01-11 01:00 - 00000000 ____D C:\Windows\Minidump 2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-26 13:43 - 2013-12-26 13:43 - 01928716 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe 2013-12-26 13:43 - 2013-12-26 13:43 - 00000000 ____D C:\FRST 2013-12-26 13:34 - 2013-06-13 17:19 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Common 2013-12-26 11:01 - 2011-02-28 17:09 - 01183744 ___SH C:\Users\Saturn\Thumbs.db 2013-12-23 15:48 - 2013-12-23 15:47 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u 2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses 2013-12-23 15:39 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler 2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2013-12-23 15:33 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D 2013-12-23 15:32 - 2013-09-14 14:14 - 00000000 ____D C:\ProgramData\Package Cache 2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\ProgramData\RapidSolution 2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\Program Files (x86)\Audials 2013-12-23 15:29 - 2013-06-13 17:15 - 00000000 ____D C:\Users\Saturn\AppData\Local\RapidSolution 2013-12-22 23:51 - 2013-05-30 11:17 - 00000000 ____D C:\Users\Saturn\Desktop\lustige Bilder 2013-12-22 15:02 - 2013-12-22 14:51 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate 2013-12-22 15:01 - 2011-10-10 18:59 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI 2013-12-22 14:39 - 2010-04-08 16:47 - 00000000 ____D C:\Program Files (x86)\Steam 2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights 2013-12-21 18:37 - 2013-12-21 18:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2 2013-12-21 18:34 - 2010-04-06 20:18 - 00558241 _____ C:\Windows\DirectX.log 2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url 2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url 2013-12-19 20:54 - 2009-07-14 18:58 - 00728016 _____ C:\Windows\system32\perfh007.dat 2013-12-19 20:54 - 2009-07-14 18:58 - 00162238 _____ C:\Windows\system32\perfc007.dat 2013-12-19 20:54 - 2009-07-14 06:13 - 01702976 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Origin 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Local\Origin 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\ProgramData\Origin 2013-12-19 18:20 - 2011-10-26 09:42 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log 2013-12-19 18:18 - 2013-04-20 19:08 - 00000000 ____D C:\Users\Saturn\Documents\BioWare 2013-12-19 18:16 - 2012-04-22 22:24 - 00002216 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-19 18:15 - 2012-04-07 18:18 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url 2013-12-19 10:20 - 2012-08-04 17:38 - 00000000 ____D C:\Users\Saturn\Desktop\Canon Programme 2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url 2013-12-17 18:53 - 2013-10-25 08:35 - 00000000 ____D C:\Users\Saturn\Desktop\Lisa Master 2013-12-17 18:51 - 2013-06-02 21:22 - 00000000 ____D C:\Users\Saturn\Desktop\Stick zeug 2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-16 19:59 - 2013-08-17 13:01 - 00000000 ____D C:\Windows\system32\MRT 2013-12-16 19:56 - 2010-04-15 14:07 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-16 00:29 - 2009-09-08 09:08 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-12-16 00:28 - 2012-08-04 17:27 - 00000000 ____D C:\Program Files (x86)\Canon 2013-12-16 00:28 - 2010-04-16 13:02 - 00000000 ____D C:\Program Files (x86)\Trillian 2013-12-16 00:26 - 2009-09-07 15:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-15 22:09 - 2010-04-21 15:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-15 20:53 - 2010-03-05 19:23 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Mozilla 2013-12-15 20:32 - 2012-06-17 13:57 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA 2013-12-15 20:32 - 2012-06-17 13:57 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core 2013-12-15 20:14 - 2013-12-15 20:02 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 20:14 - 2012-02-25 09:52 - 00003756 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm 2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014 2013-12-15 20:06 - 2012-02-25 09:43 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014 2013-12-15 20:04 - 2013-12-15 20:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-12-15 20:03 - 2012-02-25 09:43 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TuneUp Software 2013-12-15 17:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-15 16:25 - 2009-07-14 05:45 - 05459720 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-12-15 12:06 - 2009-09-08 08:52 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn 2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-12-12 18:00 - 2012-09-02 22:09 - 00000000 ____D C:\Users\Saturn\Documents\stories 2013-12-11 21:58 - 2013-12-01 19:55 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server 2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url 2013-12-10 20:34 - 2012-04-01 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-10 20:34 - 2012-04-01 20:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-10 20:34 - 2011-05-14 10:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-10 20:27 - 2010-04-27 13:49 - 00000000 ____D C:\Users\Saturn\Documents\My Games 2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-08 17:35 - 2013-08-20 20:00 - 00000000 ____D C:\Users\Saturn\Desktop\2011-09-26 2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot 2013-12-07 21:31 - 2013-12-07 20:26 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part 2013-12-07 20:26 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar 2013-12-07 17:00 - 2010-05-11 21:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Skype 2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp 2013-12-07 15:08 - 2012-04-07 18:18 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-07 15:08 - 2012-04-07 18:18 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-07 14:06 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar 2013-12-07 14:03 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar 2013-12-07 13:59 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar 2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url 2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe 2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf 2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk 2013-12-05 19:50 - 2010-12-05 20:42 - 00000000 ____D C:\Program Files (x86)\PDF24 2013-12-03 22:04 - 2013-12-03 19:58 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013 2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk 2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-12-03 19:57 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-12-03 19:57 - 2011-10-10 19:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2013-12-03 19:57 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-12-03 19:56 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2013-12-03 19:55 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2013-12-03 19:53 - 2013-12-03 19:52 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2013-12-03 19:51 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-12-03 19:50 - 2011-07-26 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-12-03 19:49 - 2010-05-18 22:36 - 01676320 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion 2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe 2013-12-03 19:18 - 2013-12-03 19:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 19:18 - 2013-12-03 19:14 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA 2013-12-03 19:18 - 2011-10-28 12:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-03 19:15 - 2011-10-28 12:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-03 19:15 - 2011-10-28 12:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-03 19:05 - 2010-04-06 19:15 - 00001425 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-03 18:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-03 18:51 - 2013-11-26 17:31 - 00024584 _____ C:\Windows\IE11_main.log 2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-01 23:34 - 2011-10-25 08:16 - 00000000 ____D C:\Users\Saturn\Desktop\Rollenspiele 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url 2013-12-01 19:52 - 2013-12-01 19:53 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar 2013-12-01 18:24 - 2013-05-24 17:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\.minecraft 2013-11-30 20:53 - 2013-01-08 19:22 - 00000000 ____D C:\Users\Saturn\Downloads\mov-world.net 2013-11-30 17:53 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar 2013-11-30 17:50 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar 2013-11-30 17:46 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar 2013-11-30 17:43 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar 2013-11-30 17:40 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar 2013-11-30 17:37 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar 2013-11-30 17:33 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar 2013-11-30 17:30 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar 2013-11-30 17:27 - 2013-11-30 17:24 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar 2013-11-30 17:23 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar 2013-11-30 17:20 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar 2013-11-30 17:17 - 2013-11-30 17:14 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar 2013-11-30 17:14 - 2013-11-30 17:12 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar 2013-11-30 17:12 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar 2013-11-30 17:09 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar 2013-11-30 17:06 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar 2013-11-30 17:02 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar 2013-11-30 16:59 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar 2013-11-30 16:56 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar 2013-11-30 16:53 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar 2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar 2013-11-30 16:49 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar 2013-11-30 16:46 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar 2013-11-30 16:43 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar 2013-11-30 16:40 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar 2013-11-30 16:36 - 2013-11-30 16:33 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar 2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar 2013-11-30 15:31 - 2013-11-28 19:37 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar 2013-11-29 17:56 - 2013-11-28 19:54 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-29 17:56 - 2013-11-28 19:54 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-28 20:04 - 2012-02-28 22:19 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner (6) 2013-11-28 20:01 - 2010-04-09 14:13 - 00000000 ____D C:\Users\Saturn\Desktop\Games 2013-11-28 19:54 - 2013-11-28 19:54 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-11-28 19:37 - 2013-11-25 19:30 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part08.rar Files to move or delete: ==================== C:\ProgramData\hash.dat C:\Users\Saturn\DoorKickersAlpha_0031_Setup.exe C:\Users\Saturn\jagex_runescape_preferences.dat C:\Users\Saturn\jagex_runescape_preferences2.dat C:\Users\Saturn\jagex__preferences3.dat C:\Users\Saturn\RocketDock-v1.3.5.exe C:\Users\Saturn\setup2.5.0.exe Some content of TEMP: ==================== C:\Users\Saturn\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-20 00:22 ==================== End Of Log ============================ --- --- --- |
29.12.2013, 12:25 | #9 |
/// the machine /// TB-Ausbilder | Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändertESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
30.12.2013, 08:29 | #10 |
| Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert hier die neuen logs: ESET-log: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=11c4e7bb732002408ea941ba34eb173f # engine=16442 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-30 03:16:52 # local_time=2013-12-30 04:16:52 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 33226 140003262 0 0 # scanned=862751 # found=2 # cleaned=0 # scan_time=28464 sh=E5620CAACD2BF0B4F20A75CBD7131644989B41EA ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2008-5353.F trojan" ac=I fn="C:\Users\Saturn\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\7061701b-2c3f4dba" sh=2C94CC36BF25B9914BD9979501DAFA56243363F9 ft=1 fh=ca84b168bd913bd9 vn="Win32/Packed.Themida.D trojan" ac=I fn="K:\alles wichtige\fraps\Fraps v.2.98.exe" Checkup: Code:
ATTFilter Results of screen317's Security Check version 0.99.77 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Kaspersky PURE 3.0 Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Call of Duty: Ghosts Call of Duty: Ghosts - Multiplayer Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2014 TuneUp Utilities Language Pack (de-DE) TuneUp Utilities 2014 (de-DE) TuneUp Utilities Language Pack (de-DE) TuneUp Utilities 2014 JavaFX 2.1.1 Java(TM) 6 Update 31 Java 7 Update 45 Adobe Flash Player 11.9.900.170 Adobe Reader 10.1.1 Adobe Reader out of Date! Mozilla Firefox (26.0) Mozilla Thunderbird (24.1.0) Google Chrome 29.0.1547.62 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` Kaspersky Lab Kaspersky PURE 3.0 avp.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01 Ran by Saturn (administrator) on RAVENHOME on 30-12-2013 08:25:19 Running from C:\Users\Saturn\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Sonix) C:\Windows\vsnp2uvc.exe () C:\Windows\System32\WTMKM.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe () C:\Windows\tsnp2uvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Roccat GmbH) C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe ( ) C:\Windows\System32\lxeccoms.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe () C:\Windows\System32\atwtusb.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE () C:\Windows\System32\atwtusb.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe (Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-04] (Realtek Semiconductor) HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation) HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix) HKLM\...\Run: [MacrokeyManager] - C:\Windows\System32\WTMKM.exe [7325184 2011-04-12] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation) HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix) HKLM-x32\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [320512 2009-12-11] () HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.) HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [539688 2011-03-17] (Roccat GmbH) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-10-19] () HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPANEL.exe [2273608 2011-08-02] (Gainward Co.) HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5765A900BFCBCB01 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} SearchScopes: HKCU - {44219366-4C90-49F2-B082-3F7B238E29B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms} BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] ShellExecuteHooks-x32: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 62.109.121.2 62.109.121.1 FireFox: ======== FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default FF Homepage: www.google.de FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Heroes Updater - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\battlefieldheroespatcher@ea.com FF Extension: ProxTube - Unblock YouTube - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\ich@maltegoetz.de FF Extension: YouTube Unblocker - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\youtubeunblocker@unblocker.yt FF Extension: Flagfox - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} FF Extension: Garmin Communicator - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} FF Extension: Microsoft .NET Framework Assistant - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: DownloadHelper - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: Simple New Tab - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\snt@dotlabs.co.xpi FF Extension: TinEye Reverse Image Search - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\tineye@ideeinc.com.xpi FF Extension: Shockwave Flash Plugin Free - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi FF Extension: {43616d3f-8ae4-4351-9b52-74faeeb1a3dc} - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi FF Extension: Adblock Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Download Statusbar - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi FF Extension: Tab Mix Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com" CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll No File CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.486_0\plugin/npUrlAdvisor.dll No File CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.486_0\plugin/npVKPlugin.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB) CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (YouTube) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Kaspersky URL Advisor) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0 CHR Extension: (bloomind ct deepdark) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd\1_0 CHR Extension: (Chrome Toolbox (by Google)) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0 CHR Extension: (TinEye Reverse Image Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.3_0 CHR Extension: (Safe Money) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0 CHR Extension: (Content Blocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.2.614_0 CHR Extension: (RealDownloader) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0 CHR Extension: (Virtual Keyboard) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.614_0 CHR Extension: (Google Wallet) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (YouTube Unblocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0 CHR Extension: (Gmail) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR Extension: (Anti-Banner) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0 CHR Extension: (Simple New Tab) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga\1.0.0_0 CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx CHR StartMenuInternet: Google Chrome - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO) R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-11] (BioWare) R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [248664 2013-09-12] (Garmin Ltd or its subsidiaries) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.) S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.) R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-01-07] ( ) R2 lxec_device; C:\Windows\SysWow64\lxeccoms.exe [598696 2010-01-07] ( ) S2 MSSQL$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [9150464 2005-05-03] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation) S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4005936 2011-06-06] (INCA Internet Co., Ltd.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-05] () R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] () S3 SQLAgent$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software) S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation) R2 WTService; C:\Windows\system32\atwtusb.exe [916992 2011-04-27] () ==================== Drivers (Whitelisted) ==================== S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies ) S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) R3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2011-10-08] (VSO Software) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO) R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.) R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider) S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) S1 PCLEPCI; C:\Windows\SysWow64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH) R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-11-27] (Audials AG) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2009-12-18] () S3 TBPanel; No ImagePath R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S1 bnqstsgk; \??\C:\Windows\system32\drivers\bnqstsgk.sys [x] S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 cpuz130; \??\C:\Users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] S1 dfhtpxsf; \??\C:\Windows\system32\drivers\dfhtpxsf.sys [x] S3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x] S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x] S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x] S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x] S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x] S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x] S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x] S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x] S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x] S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x] S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO) S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x] S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x] S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x] S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x] S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x] S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x] S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x] S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x] S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x] S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x] S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x] S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x] S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x] S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x] S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x] S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x] S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x] S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x] S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x] S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x] S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x] S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x] S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x] S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x] S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x] S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x] S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x] S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x] S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x] S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x] S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x] S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x] S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x] S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-30 08:25 - 2013-12-30 08:25 - 00040673 _____ C:\Users\Saturn\Desktop\FRST.txt 2013-12-30 08:24 - 2013-12-30 08:24 - 00001196 _____ C:\Users\Saturn\Desktop\checkup.txt 2013-12-29 19:52 - 2013-12-29 20:09 - 00000022 _____ C:\Windows\S.dirmngr 2013-12-28 20:27 - 2013-12-28 20:32 - 00000000 ____D C:\Users\Saturn\Downloads\Lena 2013-12-28 20:20 - 2013-12-28 20:27 - 00000000 ____D C:\Users\Saturn\Downloads\Cosi 2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT 2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg 2013-12-27 17:33 - 2013-12-27 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-26 23:43 - 2013-12-29 20:09 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 23:43 - 2013-12-29 20:09 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-12-26 19:41 - 2013-12-29 19:53 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:41 - 2013-12-29 19:53 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp 2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-26 13:43 - 2013-12-30 08:25 - 01931302 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe 2013-12-26 13:43 - 2013-12-30 08:25 - 00000000 ____D C:\FRST 2013-12-26 13:33 - 2013-12-28 15:13 - 00000000 ____D C:\AdwCleaner 2013-12-23 15:47 - 2013-12-23 15:48 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u 2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses 2013-12-23 15:33 - 2013-12-23 15:39 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler 2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2013-12-23 15:32 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D 2013-12-22 14:51 - 2013-12-22 15:02 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate 2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights 2013-12-21 18:35 - 2013-12-21 18:37 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2 2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url 2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url 2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log 2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url 2013-12-18 16:28 - 2013-09-16 00:03 - 00361119 _____ (Farbar) C:\Windows\mod_frst.exe 2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url 2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014 2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014 2013-12-15 20:04 - 2013-10-30 10:45 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-12-15 20:04 - 2013-10-30 10:45 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-12-15 20:03 - 2013-12-15 20:04 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-12-15 20:03 - 2013-10-30 10:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-12-15 20:03 - 2013-10-30 10:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-12-15 20:03 - 2013-10-30 10:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-12-15 20:02 - 2013-12-15 20:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-12-15 12:06 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-15 12:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-15 12:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-15 12:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-15 12:04 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-15 12:04 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-15 12:04 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-15 12:04 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-15 12:04 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-15 12:04 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-15 12:04 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-15 12:04 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-15 12:04 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-15 12:04 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-15 12:04 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-15 12:04 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-15 12:04 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-15 12:04 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-15 12:04 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-15 12:04 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-15 12:04 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-15 12:04 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-15 12:04 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-15 12:04 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-15 12:04 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-15 12:04 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-15 12:04 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-15 12:04 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-15 12:04 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-15 12:04 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-15 12:04 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-15 12:04 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-15 12:04 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-15 12:04 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-15 12:04 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-12 20:35 - 2013-12-29 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn 2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-12-12 17:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-12 17:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-12 17:48 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-12 17:48 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-12 17:48 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-12 17:48 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-12 17:48 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-12 17:48 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-12 17:48 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-12 17:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-12 17:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-12 17:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-12 17:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-12 17:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-12 17:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-12 17:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-12 17:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-12 17:48 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-12 17:48 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url 2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot 2013-12-07 20:26 - 2013-12-07 21:31 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part 2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp 2013-12-07 14:06 - 2013-12-07 20:26 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar 2013-12-07 14:03 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar 2013-12-07 13:59 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar 2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url 2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe 2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf 2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk 2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk 2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet 2013-12-03 19:58 - 2013-12-03 22:04 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-12-03 19:52 - 2013-12-03 19:53 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2013-12-03 19:51 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-12-03 19:51 - 2013-12-03 19:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2013-12-03 19:50 - 2013-12-03 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion 2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe 2013-12-03 19:17 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 19:15 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-03 19:15 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-03 19:14 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA 2013-12-03 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url 2013-12-01 19:55 - 2013-12-11 21:58 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server 2013-12-01 19:53 - 2013-12-01 19:52 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar 2013-11-30 17:53 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar 2013-11-30 17:50 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar 2013-11-30 17:46 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar 2013-11-30 17:43 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar 2013-11-30 17:40 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar 2013-11-30 17:37 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar 2013-11-30 17:33 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar 2013-11-30 17:30 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar 2013-11-30 17:27 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar 2013-11-30 17:24 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar 2013-11-30 17:20 - 2013-11-30 17:23 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar 2013-11-30 17:17 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar 2013-11-30 17:14 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar 2013-11-30 17:12 - 2013-11-30 17:14 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar 2013-11-30 17:09 - 2013-11-30 17:12 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar 2013-11-30 17:06 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar 2013-11-30 17:02 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar 2013-11-30 16:59 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar 2013-11-30 16:56 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar 2013-11-30 16:53 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar 2013-11-30 16:49 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar 2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar 2013-11-30 16:46 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar 2013-11-30 16:43 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar 2013-11-30 16:40 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar 2013-11-30 16:36 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar 2013-11-30 16:33 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar 2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar ==================== One Month Modified Files and Folders ======= 2013-12-30 08:25 - 2013-12-30 08:25 - 00040673 _____ C:\Users\Saturn\Desktop\FRST.txt 2013-12-30 08:25 - 2013-12-26 13:43 - 01931302 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe 2013-12-30 08:25 - 2013-12-26 13:43 - 00000000 ____D C:\FRST 2013-12-30 08:24 - 2013-12-30 08:24 - 00001196 _____ C:\Users\Saturn\Desktop\checkup.txt 2013-12-30 08:13 - 2012-04-07 18:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-30 07:37 - 2012-06-17 13:57 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job 2013-12-30 07:34 - 2012-04-01 20:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-30 06:36 - 2013-05-10 16:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-12-30 05:16 - 2010-04-06 19:01 - 01097198 _____ C:\Windows\WindowsUpdate.log 2013-12-30 02:00 - 2010-03-06 14:16 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe 2013-12-29 20:40 - 2011-06-30 11:00 - 00000000 ____D C:\Users\Saturn\AppData\Local\PMB Files 2013-12-29 20:37 - 2012-06-17 13:57 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job 2013-12-29 20:19 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-29 20:19 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-29 20:11 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-29 20:11 - 2009-07-14 05:51 - 27383517 _____ C:\Windows\setupact.log 2013-12-29 20:11 - 2006-11-02 13:34 - 00000292 _____ C:\Windows\win.ini 2013-12-29 20:09 - 2013-12-29 19:52 - 00000022 _____ C:\Windows\S.dirmngr 2013-12-29 20:09 - 2013-12-26 23:43 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-29 20:09 - 2013-12-26 23:43 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-29 20:09 - 2012-04-07 18:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-29 20:09 - 2009-09-07 15:11 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-29 20:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-29 19:56 - 2012-06-15 17:10 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2013-12-29 19:53 - 2013-12-26 19:41 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-29 19:53 - 2013-12-26 19:41 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-29 12:25 - 2011-10-25 08:16 - 00000000 ____D C:\Users\Saturn\Desktop\Rollenspiele 2013-12-29 11:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-29 11:00 - 2013-07-23 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-28 20:44 - 2011-02-28 17:09 - 01183744 ___SH C:\Users\Saturn\Thumbs.db 2013-12-28 20:32 - 2013-12-28 20:27 - 00000000 ____D C:\Users\Saturn\Downloads\Lena 2013-12-28 20:27 - 2013-12-28 20:20 - 00000000 ____D C:\Users\Saturn\Downloads\Cosi 2013-12-28 20:19 - 2011-08-26 20:42 - 00242064 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-12-28 20:18 - 2010-05-28 22:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Audacity 2013-12-28 16:32 - 2013-01-02 19:22 - 00000000 ____D C:\JDownloader 2 2013-12-28 16:32 - 2012-03-13 13:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner 2013-12-28 16:25 - 2012-04-06 18:05 - 00000000 ____D C:\Users\Saturn\Desktop\filme 2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT 2013-12-28 15:13 - 2013-12-26 13:33 - 00000000 ____D C:\AdwCleaner 2013-12-28 10:27 - 2010-04-06 20:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc 2013-12-28 09:21 - 2010-04-06 18:33 - 00937318 _____ C:\Windows\PFRO.log 2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg 2013-12-27 17:33 - 2013-12-27 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-27 11:24 - 2011-05-04 13:57 - 00000000 ____D C:\Qoobox 2013-12-27 11:22 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-12-27 11:21 - 2010-04-06 18:20 - 00000000 ____D C:\Users\Saturn 2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-12-26 19:44 - 2011-05-05 15:50 - 00000000 ____D C:\Program Files\CCleaner 2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp 2013-12-26 19:36 - 2011-01-11 01:00 - 738757377 _____ C:\Windows\MEMORY.DMP 2013-12-26 19:36 - 2011-01-11 01:00 - 00000000 ____D C:\Windows\Minidump 2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-26 13:34 - 2013-06-13 17:19 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Common 2013-12-23 15:48 - 2013-12-23 15:47 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u 2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses 2013-12-23 15:39 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler 2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2013-12-23 15:33 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D 2013-12-23 15:32 - 2013-09-14 14:14 - 00000000 ____D C:\ProgramData\Package Cache 2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\ProgramData\RapidSolution 2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\Program Files (x86)\Audials 2013-12-23 15:29 - 2013-06-13 17:15 - 00000000 ____D C:\Users\Saturn\AppData\Local\RapidSolution 2013-12-22 23:51 - 2013-05-30 11:17 - 00000000 ____D C:\Users\Saturn\Desktop\lustige Bilder 2013-12-22 15:02 - 2013-12-22 14:51 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate 2013-12-22 15:01 - 2011-10-10 18:59 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI 2013-12-22 14:39 - 2010-04-08 16:47 - 00000000 ____D C:\Program Files (x86)\Steam 2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights 2013-12-21 18:37 - 2013-12-21 18:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2 2013-12-21 18:34 - 2010-04-06 20:18 - 00558241 _____ C:\Windows\DirectX.log 2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url 2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url 2013-12-19 20:54 - 2009-07-14 18:58 - 00728016 _____ C:\Windows\system32\perfh007.dat 2013-12-19 20:54 - 2009-07-14 18:58 - 00162238 _____ C:\Windows\system32\perfc007.dat 2013-12-19 20:54 - 2009-07-14 06:13 - 01702976 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Origin 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Local\Origin 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\ProgramData\Origin 2013-12-19 18:20 - 2011-10-26 09:42 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log 2013-12-19 18:18 - 2013-04-20 19:08 - 00000000 ____D C:\Users\Saturn\Documents\BioWare 2013-12-19 18:16 - 2012-04-22 22:24 - 00002216 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-19 18:15 - 2012-04-07 18:18 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url 2013-12-19 10:20 - 2012-08-04 17:38 - 00000000 ____D C:\Users\Saturn\Desktop\Canon Programme 2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url 2013-12-17 18:53 - 2013-10-25 08:35 - 00000000 ____D C:\Users\Saturn\Desktop\Lisa Master 2013-12-17 18:51 - 2013-06-02 21:22 - 00000000 ____D C:\Users\Saturn\Desktop\Stick zeug 2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-16 19:59 - 2013-08-17 13:01 - 00000000 ____D C:\Windows\system32\MRT 2013-12-16 19:56 - 2010-04-15 14:07 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-16 00:29 - 2009-09-08 09:08 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-12-16 00:28 - 2012-08-04 17:27 - 00000000 ____D C:\Program Files (x86)\Canon 2013-12-16 00:28 - 2010-04-16 13:02 - 00000000 ____D C:\Program Files (x86)\Trillian 2013-12-16 00:26 - 2009-09-07 15:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-15 22:09 - 2010-04-21 15:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-15 20:53 - 2010-03-05 19:23 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Mozilla 2013-12-15 20:32 - 2012-06-17 13:57 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA 2013-12-15 20:32 - 2012-06-17 13:57 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core 2013-12-15 20:14 - 2013-12-15 20:02 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 20:14 - 2012-02-25 09:52 - 00003756 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm 2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014 2013-12-15 20:06 - 2012-02-25 09:43 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014 2013-12-15 20:04 - 2013-12-15 20:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-12-15 20:03 - 2012-02-25 09:43 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TuneUp Software 2013-12-15 17:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-15 16:25 - 2009-07-14 05:45 - 05459720 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-12-15 12:06 - 2009-09-08 08:52 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn 2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-12-12 18:00 - 2012-09-02 22:09 - 00000000 ____D C:\Users\Saturn\Documents\stories 2013-12-11 21:58 - 2013-12-01 19:55 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server 2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url 2013-12-10 20:34 - 2012-04-01 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-10 20:34 - 2012-04-01 20:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-10 20:34 - 2011-05-14 10:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-10 20:27 - 2010-04-27 13:49 - 00000000 ____D C:\Users\Saturn\Documents\My Games 2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-08 17:35 - 2013-08-20 20:00 - 00000000 ____D C:\Users\Saturn\Desktop\2011-09-26 2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot 2013-12-07 21:31 - 2013-12-07 20:26 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part 2013-12-07 20:26 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar 2013-12-07 17:00 - 2010-05-11 21:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Skype 2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp 2013-12-07 15:08 - 2012-04-07 18:18 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-07 15:08 - 2012-04-07 18:18 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-07 14:06 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar 2013-12-07 14:03 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar 2013-12-07 13:59 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar 2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url 2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe 2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf 2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk 2013-12-05 19:50 - 2010-12-05 20:42 - 00000000 ____D C:\Program Files (x86)\PDF24 2013-12-03 22:04 - 2013-12-03 19:58 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013 2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk 2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-12-03 19:57 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-12-03 19:57 - 2011-10-10 19:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2013-12-03 19:57 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-12-03 19:56 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2013-12-03 19:55 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2013-12-03 19:53 - 2013-12-03 19:52 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2013-12-03 19:51 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-12-03 19:50 - 2011-07-26 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-12-03 19:49 - 2010-05-18 22:36 - 01676320 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion 2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe 2013-12-03 19:18 - 2013-12-03 19:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 19:18 - 2013-12-03 19:14 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA 2013-12-03 19:18 - 2011-10-28 12:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-03 19:15 - 2011-10-28 12:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-03 19:15 - 2011-10-28 12:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-03 19:05 - 2010-04-06 19:15 - 00001425 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-03 18:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-03 18:51 - 2013-11-26 17:31 - 00024584 _____ C:\Windows\IE11_main.log 2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url 2013-12-01 19:52 - 2013-12-01 19:53 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar 2013-12-01 18:24 - 2013-05-24 17:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\.minecraft 2013-11-30 20:53 - 2013-01-08 19:22 - 00000000 ____D C:\Users\Saturn\Downloads\mov-world.net 2013-11-30 17:53 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar 2013-11-30 17:50 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar 2013-11-30 17:46 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar 2013-11-30 17:43 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar 2013-11-30 17:40 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar 2013-11-30 17:37 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar 2013-11-30 17:33 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar 2013-11-30 17:30 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar 2013-11-30 17:27 - 2013-11-30 17:24 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar 2013-11-30 17:23 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar 2013-11-30 17:20 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar 2013-11-30 17:17 - 2013-11-30 17:14 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar 2013-11-30 17:14 - 2013-11-30 17:12 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar 2013-11-30 17:12 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar 2013-11-30 17:09 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar 2013-11-30 17:06 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar 2013-11-30 17:02 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar 2013-11-30 16:59 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar 2013-11-30 16:56 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar 2013-11-30 16:53 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar 2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar 2013-11-30 16:49 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar 2013-11-30 16:46 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar 2013-11-30 16:43 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar 2013-11-30 16:40 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar 2013-11-30 16:36 - 2013-11-30 16:33 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar 2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar 2013-11-30 15:31 - 2013-11-28 19:37 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar Files to move or delete: ==================== C:\ProgramData\hash.dat C:\Users\Saturn\DoorKickersAlpha_0031_Setup.exe C:\Users\Saturn\jagex_runescape_preferences.dat C:\Users\Saturn\jagex_runescape_preferences2.dat C:\Users\Saturn\jagex__preferences3.dat C:\Users\Saturn\RocketDock-v1.3.5.exe C:\Users\Saturn\setup2.5.0.exe Some content of TEMP: ==================== C:\Users\Saturn\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 04:51 ==================== End Of Log ============================ --- --- --- Leider besteht das Problem zumindest in Chrome weiterhin. In Firefox ist es weg. Geändert von Ravenwing (30.12.2013 um 08:34 Uhr) Grund: genauere Beschreibung |
30.12.2013, 18:04 | #11 |
/// the machine /// TB-Ausbilder | Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Chrome deinstallieren, keine Daten behalten, neu installieren. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
30.12.2013, 22:08 | #12 |
| Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Alles wie gefordert gemacht, hier das neue FRST-log file: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01 Ran by Saturn (administrator) on RAVENHOME on 30-12-2013 21:58:05 Running from C:\Users\Saturn\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe (Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe ( ) C:\Windows\System32\lxeccoms.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Windows\System32\atwtusb.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE () C:\Windows\System32\atwtusb.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe () C:\Windows\System32\WTMKM.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe (Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe (Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-04] (Realtek Semiconductor) HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation) HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix) HKLM\...\Run: [MacrokeyManager] - C:\Windows\System32\WTMKM.exe [7325184 2011-04-12] () HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation) HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix) HKLM-x32\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [320512 2009-12-11] () HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.) HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [539688 2011-03-17] (Roccat GmbH) HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-10-19] () HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPANEL.exe [2273608 2011-08-02] (Gainward Co.) HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5765A900BFCBCB01 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} SearchScopes: HKCU - {44219366-4C90-49F2-B082-3F7B238E29B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms} BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] ShellExecuteHooks-x32: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ] Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 62.109.121.2 62.109.121.1 FireFox: ======== FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default FF Homepage: www.google.de FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Heroes Updater - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\battlefieldheroespatcher@ea.com FF Extension: ProxTube - Unblock YouTube - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\ich@maltegoetz.de FF Extension: YouTube Unblocker - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\youtubeunblocker@unblocker.yt FF Extension: Flagfox - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} FF Extension: Garmin Communicator - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} FF Extension: Microsoft .NET Framework Assistant - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: DownloadHelper - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: Simple New Tab - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\snt@dotlabs.co.xpi FF Extension: TinEye Reverse Image Search - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\tineye@ideeinc.com.xpi FF Extension: Shockwave Flash Plugin Free - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi FF Extension: {43616d3f-8ae4-4351-9b52-74faeeb1a3dc} - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi FF Extension: Adblock Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Download Statusbar - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi FF Extension: Tab Mix Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ Chrome: ======= CHR Extension: (Docs) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0 CHR Extension: (Google Drive) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0 CHR Extension: (YouTube) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 CHR Extension: (Google Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 CHR Extension: (Kaspersky URL Advisor) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0 CHR Extension: (bloomind ct deepdark) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd\1_0 CHR Extension: (Chrome Toolbox (by Google)) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0 CHR Extension: (TinEye Reverse Image Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.3_0 CHR Extension: (Safe Money) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0 CHR Extension: (Content Blocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.2.614_0 CHR Extension: (RealDownloader) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0 CHR Extension: (Virtual Keyboard) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.614_0 CHR Extension: (Google Wallet) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (YouTube Unblocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0 CHR Extension: (Gmail) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR Extension: (Anti-Banner) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0 CHR Extension: (Simple New Tab) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga\1.0.0_0 CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO) R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-11] (BioWare) R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [248664 2013-09-12] (Garmin Ltd or its subsidiaries) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.) S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.) R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-01-07] ( ) R2 lxec_device; C:\Windows\SysWow64\lxeccoms.exe [598696 2010-01-07] ( ) S2 MSSQL$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [9150464 2005-05-03] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation) S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4005936 2011-06-06] (INCA Internet Co., Ltd.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-05] () R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] () S3 SQLAgent$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software) S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation) R2 WTService; C:\Windows\system32\atwtusb.exe [916992 2011-04-27] () ==================== Drivers (Whitelisted) ==================== S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies ) S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) R3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2011-10-08] (VSO Software) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO) R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.) R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider) S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) S1 PCLEPCI; C:\Windows\SysWow64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH) R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-11-27] (Audials AG) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2009-12-18] () S3 TBPanel; No ImagePath R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S1 bnqstsgk; \??\C:\Windows\system32\drivers\bnqstsgk.sys [x] S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 cpuz130; \??\C:\Users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x] S1 dfhtpxsf; \??\C:\Windows\system32\drivers\dfhtpxsf.sys [x] S3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x] S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x] S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x] S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x] S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x] S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x] S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x] S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x] S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x] S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x] S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO) S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x] S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x] S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x] S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x] S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x] S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x] S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x] S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x] S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x] S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x] S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x] S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x] S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x] S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x] S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x] S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x] S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x] S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x] S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x] S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x] S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x] S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x] S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x] S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x] S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x] S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x] S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x] S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x] S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x] S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x] S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x] S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x] S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x] S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-30 21:58 - 2013-12-30 21:58 - 00035680 _____ C:\Users\Saturn\Desktop\FRST.txt 2013-12-30 21:50 - 2013-12-30 21:50 - 00819144 _____ (Google Inc.) C:\Users\Saturn\Desktop\chrome_installer_31.0.1650.63.exe 2013-12-30 21:49 - 2013-12-30 21:49 - 00448512 _____ (OldTimer Tools) C:\Users\Saturn\Desktop\TFC.exe 2013-12-30 21:40 - 2013-12-30 21:40 - 00000022 _____ C:\Windows\S.dirmngr 2013-12-30 12:24 - 2013-12-30 12:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner (4) 2013-12-28 20:27 - 2013-12-28 20:32 - 00000000 ____D C:\Users\Saturn\Downloads\Lena 2013-12-28 20:20 - 2013-12-28 20:27 - 00000000 ____D C:\Users\Saturn\Downloads\Cosi 2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT 2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg 2013-12-27 17:33 - 2013-12-27 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-26 23:43 - 2013-12-29 20:09 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 23:43 - 2013-12-29 20:09 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-12-26 19:41 - 2013-12-30 21:47 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:41 - 2013-12-30 21:47 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp 2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-26 13:43 - 2013-12-30 08:25 - 01931302 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe 2013-12-26 13:43 - 2013-12-30 08:25 - 00000000 ____D C:\FRST 2013-12-26 13:33 - 2013-12-28 15:13 - 00000000 ____D C:\AdwCleaner 2013-12-23 15:47 - 2013-12-23 15:48 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u 2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses 2013-12-23 15:33 - 2013-12-23 15:39 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler 2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2013-12-23 15:32 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D 2013-12-22 14:51 - 2013-12-22 15:02 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate 2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights 2013-12-21 18:35 - 2013-12-21 18:37 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2 2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url 2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url 2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log 2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url 2013-12-18 16:28 - 2013-09-16 00:03 - 00361119 _____ (Farbar) C:\Windows\mod_frst.exe 2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url 2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014 2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014 2013-12-15 20:04 - 2013-10-30 10:45 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2013-12-15 20:04 - 2013-10-30 10:45 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2013-12-15 20:03 - 2013-12-15 20:04 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-12-15 20:03 - 2013-10-30 10:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2013-12-15 20:03 - 2013-10-30 10:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2013-12-15 20:03 - 2013-10-30 10:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2013-12-15 20:02 - 2013-12-15 20:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-12-15 12:06 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-15 12:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-15 12:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-15 12:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-15 12:04 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-15 12:04 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-15 12:04 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-15 12:04 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-15 12:04 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-15 12:04 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-15 12:04 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-15 12:04 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-15 12:04 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-15 12:04 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-15 12:04 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-15 12:04 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-15 12:04 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-15 12:04 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-15 12:04 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-15 12:04 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-15 12:04 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-15 12:04 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-15 12:04 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-15 12:04 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-15 12:04 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-15 12:04 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-15 12:04 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-15 12:04 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-15 12:04 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-15 12:04 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-15 12:04 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-15 12:04 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-15 12:04 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-15 12:04 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-15 12:04 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-12 20:35 - 2013-12-30 21:47 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn 2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-12-12 17:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-12 17:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-12 17:48 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-12 17:48 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-12 17:48 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-12 17:48 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-12 17:48 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-12 17:48 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-12 17:48 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-12 17:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-12 17:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-12 17:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-12 17:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-12 17:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-12 17:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-12 17:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-12 17:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-12 17:48 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-12 17:48 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url 2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot 2013-12-07 20:26 - 2013-12-07 21:31 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part 2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp 2013-12-07 14:06 - 2013-12-07 20:26 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar 2013-12-07 14:03 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar 2013-12-07 13:59 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar 2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url 2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe 2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf 2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk 2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk 2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet 2013-12-03 19:58 - 2013-12-03 22:04 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-12-03 19:52 - 2013-12-03 19:53 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2013-12-03 19:51 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-12-03 19:51 - 2013-12-03 19:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2013-12-03 19:50 - 2013-12-03 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion 2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe 2013-12-03 19:17 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 19:15 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-03 19:15 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-03 19:14 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA 2013-12-03 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url 2013-12-01 19:55 - 2013-12-11 21:58 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server 2013-12-01 19:53 - 2013-12-01 19:52 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar 2013-11-30 17:53 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar 2013-11-30 17:50 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar 2013-11-30 17:46 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar 2013-11-30 17:43 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar 2013-11-30 17:40 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar 2013-11-30 17:37 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar 2013-11-30 17:33 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar 2013-11-30 17:30 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar 2013-11-30 17:27 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar 2013-11-30 17:24 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar 2013-11-30 17:20 - 2013-11-30 17:23 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar 2013-11-30 17:17 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar 2013-11-30 17:14 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar 2013-11-30 17:12 - 2013-11-30 17:14 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar 2013-11-30 17:09 - 2013-11-30 17:12 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar 2013-11-30 17:06 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar 2013-11-30 17:02 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar 2013-11-30 16:59 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar 2013-11-30 16:56 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar 2013-11-30 16:53 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar 2013-11-30 16:49 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar 2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar 2013-11-30 16:46 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar 2013-11-30 16:43 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar 2013-11-30 16:40 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar 2013-11-30 16:36 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar 2013-11-30 16:33 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar 2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar ==================== One Month Modified Files and Folders ======= 2013-12-30 21:58 - 2013-12-30 21:58 - 00035680 _____ C:\Users\Saturn\Desktop\FRST.txt 2013-12-30 21:56 - 2011-06-30 11:00 - 00000000 ____D C:\Users\Saturn\AppData\Local\PMB Files 2013-12-30 21:55 - 2013-05-10 16:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-12-30 21:54 - 2012-04-07 18:18 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-30 21:50 - 2013-12-30 21:50 - 00819144 _____ (Google Inc.) C:\Users\Saturn\Desktop\chrome_installer_31.0.1650.63.exe 2013-12-30 21:49 - 2013-12-30 21:49 - 00448512 _____ (OldTimer Tools) C:\Users\Saturn\Desktop\TFC.exe 2013-12-30 21:48 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-30 21:48 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-30 21:47 - 2013-12-26 19:41 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-30 21:47 - 2013-12-26 19:41 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-30 21:47 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi 2013-12-30 21:47 - 2012-04-07 18:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-30 21:40 - 2013-12-30 21:40 - 00000022 _____ C:\Windows\S.dirmngr 2013-12-30 21:40 - 2009-09-07 15:11 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-30 21:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-30 21:40 - 2009-07-14 05:51 - 27653349 _____ C:\Windows\setupact.log 2013-12-30 21:40 - 2006-11-02 13:34 - 00000292 _____ C:\Windows\win.ini 2013-12-30 12:26 - 2010-04-06 19:01 - 01112996 _____ C:\Windows\WindowsUpdate.log 2013-12-30 12:25 - 2013-12-30 12:24 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner (4) 2013-12-30 08:38 - 2010-04-06 18:33 - 00938152 _____ C:\Windows\PFRO.log 2013-12-30 08:34 - 2012-04-01 20:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-30 08:25 - 2013-12-26 13:43 - 01931302 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe 2013-12-30 08:25 - 2013-12-26 13:43 - 00000000 ____D C:\FRST 2013-12-30 08:13 - 2012-04-07 18:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-30 07:37 - 2012-06-17 13:57 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job 2013-12-30 02:00 - 2010-03-06 14:16 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe 2013-12-29 20:37 - 2012-06-17 13:57 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job 2013-12-29 20:09 - 2013-12-26 23:43 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-29 20:09 - 2013-12-26 23:43 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 2013-12-29 19:56 - 2012-06-15 17:10 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2013-12-29 12:25 - 2011-10-25 08:16 - 00000000 ____D C:\Users\Saturn\Desktop\Rollenspiele 2013-12-29 11:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-29 11:00 - 2013-07-23 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-28 20:44 - 2011-02-28 17:09 - 01183744 ___SH C:\Users\Saturn\Thumbs.db 2013-12-28 20:32 - 2013-12-28 20:27 - 00000000 ____D C:\Users\Saturn\Downloads\Lena 2013-12-28 20:27 - 2013-12-28 20:20 - 00000000 ____D C:\Users\Saturn\Downloads\Cosi 2013-12-28 20:19 - 2011-08-26 20:42 - 00242064 ____H C:\Windows\SysWOW64\mlfcache.dat 2013-12-28 20:18 - 2010-05-28 22:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Audacity 2013-12-28 16:32 - 2013-01-02 19:22 - 00000000 ____D C:\JDownloader 2 2013-12-28 16:32 - 2012-03-13 13:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner 2013-12-28 16:25 - 2012-04-06 18:05 - 00000000 ____D C:\Users\Saturn\Desktop\filme 2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT 2013-12-28 15:13 - 2013-12-26 13:33 - 00000000 ____D C:\AdwCleaner 2013-12-28 10:27 - 2010-04-06 20:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc 2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg 2013-12-27 17:33 - 2013-12-27 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-27 11:24 - 2011-05-04 13:57 - 00000000 ____D C:\Qoobox 2013-12-27 11:22 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-12-27 11:21 - 2010-04-06 18:20 - 00000000 ____D C:\Users\Saturn 2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-12-26 19:44 - 2011-05-05 15:50 - 00000000 ____D C:\Program Files\CCleaner 2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp 2013-12-26 19:36 - 2011-01-11 01:00 - 738757377 _____ C:\Windows\MEMORY.DMP 2013-12-26 19:36 - 2011-01-11 01:00 - 00000000 ____D C:\Windows\Minidump 2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-26 13:34 - 2013-06-13 17:19 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Common 2013-12-23 15:48 - 2013-12-23 15:47 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u 2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses 2013-12-23 15:39 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler 2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter 2013-12-23 15:33 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media 2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D 2013-12-23 15:32 - 2013-09-14 14:14 - 00000000 ____D C:\ProgramData\Package Cache 2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\ProgramData\RapidSolution 2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\Program Files (x86)\Audials 2013-12-23 15:29 - 2013-06-13 17:15 - 00000000 ____D C:\Users\Saturn\AppData\Local\RapidSolution 2013-12-22 23:51 - 2013-05-30 11:17 - 00000000 ____D C:\Users\Saturn\Desktop\lustige Bilder 2013-12-22 15:02 - 2013-12-22 14:51 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate 2013-12-22 15:01 - 2011-10-10 18:59 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI 2013-12-22 14:39 - 2010-04-08 16:47 - 00000000 ____D C:\Program Files (x86)\Steam 2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights 2013-12-21 18:37 - 2013-12-21 18:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2 2013-12-21 18:34 - 2010-04-06 20:18 - 00558241 _____ C:\Windows\DirectX.log 2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url 2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url 2013-12-19 20:54 - 2009-07-14 18:58 - 00728016 _____ C:\Windows\system32\perfh007.dat 2013-12-19 20:54 - 2009-07-14 18:58 - 00162238 _____ C:\Windows\system32\perfc007.dat 2013-12-19 20:54 - 2009-07-14 06:13 - 01702976 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Origin 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Local\Origin 2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\ProgramData\Origin 2013-12-19 18:20 - 2011-10-26 09:42 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log 2013-12-19 18:18 - 2013-04-20 19:08 - 00000000 ____D C:\Users\Saturn\Documents\BioWare 2013-12-19 18:16 - 2012-04-22 22:24 - 00002216 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url 2013-12-19 10:20 - 2012-08-04 17:38 - 00000000 ____D C:\Users\Saturn\Desktop\Canon Programme 2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url 2013-12-17 18:53 - 2013-10-25 08:35 - 00000000 ____D C:\Users\Saturn\Desktop\Lisa Master 2013-12-17 18:51 - 2013-06-02 21:22 - 00000000 ____D C:\Users\Saturn\Desktop\Stick zeug 2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-16 19:59 - 2013-08-17 13:01 - 00000000 ____D C:\Windows\system32\MRT 2013-12-16 19:56 - 2010-04-15 14:07 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-16 00:29 - 2009-09-08 09:08 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-12-16 00:28 - 2012-08-04 17:27 - 00000000 ____D C:\Program Files (x86)\Canon 2013-12-16 00:28 - 2010-04-16 13:02 - 00000000 ____D C:\Program Files (x86)\Trillian 2013-12-16 00:26 - 2009-09-07 15:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-15 22:09 - 2010-04-21 15:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-15 20:53 - 2010-03-05 19:23 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Mozilla 2013-12-15 20:32 - 2012-06-17 13:57 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA 2013-12-15 20:32 - 2012-06-17 13:57 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core 2013-12-15 20:14 - 2013-12-15 20:02 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-12-15 20:14 - 2012-02-25 09:52 - 00003756 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm 2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014 2013-12-15 20:06 - 2012-02-25 09:43 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014 2013-12-15 20:04 - 2013-12-15 20:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-12-15 20:03 - 2012-02-25 09:43 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TuneUp Software 2013-12-15 17:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-15 16:25 - 2009-07-14 05:45 - 05459720 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-12-15 12:06 - 2009-09-08 08:52 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn 2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn 2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-12-12 18:00 - 2012-09-02 22:09 - 00000000 ____D C:\Users\Saturn\Documents\stories 2013-12-11 21:58 - 2013-12-01 19:55 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server 2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url 2013-12-10 20:34 - 2012-04-01 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-10 20:34 - 2012-04-01 20:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-10 20:34 - 2011-05-14 10:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-10 20:27 - 2010-04-27 13:49 - 00000000 ____D C:\Users\Saturn\Documents\My Games 2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe 2013-12-08 17:35 - 2013-08-20 20:00 - 00000000 ____D C:\Users\Saturn\Desktop\2011-09-26 2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot 2013-12-07 21:31 - 2013-12-07 20:26 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part 2013-12-07 20:26 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar 2013-12-07 17:00 - 2010-05-11 21:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Skype 2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp 2013-12-07 15:08 - 2012-04-07 18:18 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-07 15:08 - 2012-04-07 18:18 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-07 14:06 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar 2013-12-07 14:03 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar 2013-12-07 13:59 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar 2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url 2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe 2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf 2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk 2013-12-05 19:50 - 2010-12-05 20:42 - 00000000 ____D C:\Program Files (x86)\PDF24 2013-12-03 22:04 - 2013-12-03 19:58 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013 2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk 2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet 2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-12-03 19:57 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-12-03 19:57 - 2011-10-10 19:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2013-12-03 19:57 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-12-03 19:56 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2013-12-03 19:55 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2013-12-03 19:53 - 2013-12-03 19:52 - 00000000 ____D C:\Program Files (x86)\Windows Kits 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031 2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2013-12-03 19:51 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2013-12-03 19:50 - 2011-07-26 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-12-03 19:49 - 2010-05-18 22:36 - 01676320 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion 2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe 2013-12-03 19:18 - 2013-12-03 19:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation 2013-12-03 19:18 - 2013-12-03 19:14 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA 2013-12-03 19:18 - 2011-10-28 12:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-03 19:15 - 2011-10-28 12:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-03 19:15 - 2011-10-28 12:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-03 19:05 - 2010-04-06 19:15 - 00001425 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-03 18:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-03 18:51 - 2013-11-26 17:31 - 00024584 _____ C:\Windows\IE11_main.log 2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url 2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url 2013-12-01 19:52 - 2013-12-01 19:53 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar 2013-12-01 18:24 - 2013-05-24 17:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\.minecraft 2013-11-30 20:53 - 2013-01-08 19:22 - 00000000 ____D C:\Users\Saturn\Downloads\mov-world.net 2013-11-30 17:53 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar 2013-11-30 17:50 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar 2013-11-30 17:46 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar 2013-11-30 17:43 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar 2013-11-30 17:40 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar 2013-11-30 17:37 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar 2013-11-30 17:33 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar 2013-11-30 17:30 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar 2013-11-30 17:27 - 2013-11-30 17:24 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar 2013-11-30 17:23 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar 2013-11-30 17:20 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar 2013-11-30 17:17 - 2013-11-30 17:14 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar 2013-11-30 17:14 - 2013-11-30 17:12 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar 2013-11-30 17:12 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar 2013-11-30 17:09 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar 2013-11-30 17:06 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar 2013-11-30 17:02 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar 2013-11-30 16:59 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar 2013-11-30 16:56 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar 2013-11-30 16:53 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar 2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar 2013-11-30 16:49 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar 2013-11-30 16:46 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar 2013-11-30 16:43 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar 2013-11-30 16:40 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar 2013-11-30 16:36 - 2013-11-30 16:33 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar 2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar 2013-11-30 15:31 - 2013-11-28 19:37 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar Files to move or delete: ==================== C:\ProgramData\hash.dat C:\Users\Saturn\DoorKickersAlpha_0031_Setup.exe C:\Users\Saturn\jagex_runescape_preferences.dat C:\Users\Saturn\jagex_runescape_preferences2.dat C:\Users\Saturn\jagex__preferences3.dat C:\Users\Saturn\RocketDock-v1.3.5.exe C:\Users\Saturn\setup2.5.0.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 04:51 ==================== End Of Log ============================ Chrome schon getestet, Weiterleitung auf "wisersearch" nicht mehr vorhanden. Vielen Dank. |
31.12.2013, 15:41 | #13 |
/// the machine /// TB-Ausbilder | Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x] S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x] S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x] S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x] S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x] S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x] S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x] S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x] S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x] S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x] S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x] S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x] S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x] S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x] S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x] S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x] S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x] S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x] S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x] S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x] S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x] S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x] S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x] S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x] S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x] S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x] S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x] S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x] S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x] S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x] S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x] S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x] S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x] S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x] S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x] S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x] S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x] S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x] S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x] S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x] S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x] S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x] S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x] S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x] S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x] Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.01.2014, 09:41 | #14 |
| Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert hier der Fixlog: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-01-2014 01 Ran by Saturn at 2014-01-02 09:38:58 Run:1 Running from C:\Users\Saturn\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x] S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x] S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x] S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x] S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x] S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x] S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x] S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x] S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x] S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x] S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x] S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x] S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x] S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x] S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x] S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x] S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x] S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x] S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x] S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x] S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x] S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x] S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x] S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x] S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x] S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x] S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x] S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x] S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x] S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x] S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x] S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x] S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x] S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x] S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x] S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x] S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x] S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x] S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x] S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x] S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x] S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x] S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x] S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x] S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x] ***************** evkomlpb => Service deleted successfully. exghbnub => Service deleted successfully. flnvtwiu => Service deleted successfully. ggplayov => Service deleted successfully. glhbzrdp => Service deleted successfully. hjgequpo => Service deleted successfully. ibrmytkv => Service deleted successfully. ihpczvzt => Service deleted successfully. iwxgprso => Service deleted successfully. jhostfze => Service deleted successfully. kiaqjrtf => Service deleted successfully. kpqjothk => Service deleted successfully. mozosloe => Service deleted successfully. mwtafrhe => Service deleted successfully. nijxcfnj => Service deleted successfully. njlwenqt => Service deleted successfully. nrmqgeaq => Service deleted successfully. olekorua => Service deleted successfully. pddbwrxt => Service deleted successfully. pkijmgtn => Service deleted successfully. ptvuibnd => Service deleted successfully. qlnvkvlz => Service deleted successfully. qqfmmntb => Service deleted successfully. qyyteedz => Service deleted successfully. reiphzej => Service deleted successfully. rkispkye => Service deleted successfully. rqxvktor => Service deleted successfully. rsnvucpt => Service deleted successfully. sljolomf => Service deleted successfully. tpioqxek => Service deleted successfully. trdhienr => Service deleted successfully. txvztkiq => Service deleted successfully. tzjkmdvf => Service deleted successfully. uguzijuk => Service deleted successfully. vgrfszla => Service deleted successfully. vtxmuojc => Service deleted successfully. wrsxqila => Service deleted successfully. xeshofoi => Service deleted successfully. xhbipmbk => Service deleted successfully. ybmjedft => Service deleted successfully. ydnwlbze => Service deleted successfully. yrxzjdal => Service deleted successfully. yssdrnbz => Service deleted successfully. yvzmfhna => Service deleted successfully. zirtwuoe => Service deleted successfully. ==== End of Fixlog ==== Ich habe sämtliche Schritte durchgeführt und mein System ist jetzt wieder sauber. Somit kann dieses Thema geschlossen werden. Nochmals vielen Dank für die gute Hilfe! Geändert von Ravenwing (02.01.2014 um 09:46 Uhr) Grund: Ergänzungen |
03.01.2014, 09:49 | #15 |
/// the machine /// TB-Ausbilder | Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert |
64-bit, als startseite, automatisch, browser, channel, chrome, einsatz, einstellungen, firefox, geladen, geändert, hallo zusammen, helft, problem, recovery, scan, seite, startseite, tagen, tool, version, windows, windows 7, wisersearch, zusammen |