| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: BOO/TDss.O & Parameter Name: ValueWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
27.12.2013, 14:06
| #1 |
 |  BOO/TDss.O & Parameter Name: Value Guten Tag Forum  Erstmal hoffe ich, dass ihr alle erfreuliche Feiertage hattet und mir nun bei meinem Problem behilflich sein könnt. Und zwar habe ich jetzt seit geraumer Zeit die Avira Meldung, dass sich in meinem Masterbootsektor eben dieses " BOO/TDss.O " befindet. Nun denke ich mal, dass dies nicht vorteilhaft für meinen PC sein kann und möchte nun fragen wie man diesen schnellstmöglich weg bekommt ! (Ich benutze Win7 64x Ultimate) Jetzt habe ich noch ein zweites Problem. Beim Start von Win7 erscheint folgende Fehlermeldung - ptotected:value to add was out of range, parameter name: value - scheint so, als wäre irgendeine Größe in einem schreibgeschützten Programm auf nahezu unendlich erhöht wurden. Ich kann diese Fehlermeldung lediglich wegdrücken und passieren tut danach auch nichts. Ich hoffe ihr könnt mir weiterhelfen ! Danke im Voraus |
|
27.12.2013, 16:13
| #2 |
| /// the machine /// TB-Ausbilder    | BOO/TDss.O & Parameter Name: Value hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
27.12.2013, 18:01
| #3 |
| | BOO/TDss.O & Parameter Name: Value FRST.txt
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-12-2013 01
Ran by Silverlink (administrator) on DARKNESS on 27-12-2013 17:51:54
Running from C:\Users\Silverlink\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Spotify Ltd) C:\Users\Silverlink\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Akamai Technologies, Inc.) C:\Users\Silverlink\AppData\Local\Akamai\netsession_win.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser 4\MBCameraMonitor.exe
() C:\Program Files (x86)\NETGEAR\WNA1100\WNA1100.exe
(Akamai Technologies, Inc.) C:\Users\Silverlink\AppData\Local\Akamai\netsession_win.exe
(Windows Net) C:\Users\Silverlink\AppData\Roaming\Windows Net Data\net.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Windows\SysWOW64\ASGT.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2278504 2011-10-14] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [THX TruStudio NB Settings] - C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909824 2011-05-19] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [HTC Sync Loader] - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
HKCU\...\Run: [Google Update] - C:\Users\Silverlink\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-11] (Google Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Silverlink\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-23] (Spotify Ltd)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Silverlink\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-11-05] (SteelSeries ApS)
HKCU\...\Policies\Explorer\Run: [Policies] - C:\Windows\system32\System\jushed.exe No File
HKCU\...\Policies\system: [DisableLockWorkstation] 0
MountPoints2: G - G:\pushinst.exe
MountPoints2: {67c8635c-0c78-11e1-9d38-806e6f6e6963} - E:\setup.exe
MountPoints2: {72387d35-0c7b-11e1-99ed-001c4af33633} - G:\pushinst.exe
MountPoints2: {a28e1bef-a20e-11e2-a61a-902b349d2cc0} - F:\setup.exe
HKU\UpdatusUser\...\Run: [Google Update] - C:\Users\Silverlink\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-11] (Google Inc.)
HKU\UpdatusUser\...\Run: [Spotify] - C:\Users\Silverlink\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-23] (Spotify Ltd)
HKU\UpdatusUser\...\Run: [Spotify Web Helper] - C:\Users\Silverlink\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-23] (Spotify Ltd)
HKU\UpdatusUser\...\Run: [ASRockXTU] - [x]
HKU\UpdatusUser\...\Run: [zASRockInstantBoot] - [x]
HKU\UpdatusUser\...\Policies\Explorer\Run: [Policies] - C:\Windows\system32\System\jushed.exe
Startup: C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Silverlink\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE030989D6A51CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:newtab
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317740&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP86734E64-8A96-436E-B5DC-521751CB3E02&q={searchTerms}&SSPV=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: No Name - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No File
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {a25e7121-3dd8-41b3-855b-756c5bc45449} - No File
DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.203.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default
FF NewTab: about:home
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Silverlink\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Silverlink\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Silverlink\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Silverlink\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Silverlink\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @us-w1.rockmelt.com/RockMelt Update;version=8 - C:\Users\Silverlink\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll (RockMelt Inc.)
FF SearchPlugin: C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: NetVideoHunter - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\netvideohunter@netvideohunter.com
FF Extension: No Name - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\staged
FF Extension: YouTube Unblocker - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: FireShot - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
FF Extension: ICQ Toolbar - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Live HTTP Headers - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
FF Extension: HomeTab - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{ad7ef860-f366-4be1-8d12-4363b9356947}
FF Extension: DownloadHelper - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Easy YouTube Video Downloader - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
Chrome:
=======
CHR HomePage: https://www.google.com/
CHR Extension: (ProxTube) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.6_0
CHR Extension: (Google Docs) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube Options) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdokagampppgbnjfdlkfpphniapiiifn\1.8.150_0
CHR Extension: (YouTube) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Battlefield Heroes) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh\5.0.203.0_1
CHR Extension: (Adblock Plus) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0
CHR Extension: (Google Search) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (AdBlock) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Skype Click to Call) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_0
CHR Extension: (Google Wallet) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR HKLM-x32\...\Chrome\Extension: [bddpogknpjlgfpbboediomaiiaecfajn] - C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-09-28] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] ()
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [356352 2006-12-28] (AVM Berlin)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [102400 2006-04-18] (SEIKO EPSON CORPORATION)
S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2003-04-18] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-08] ()
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [297984 2013-12-27] ()
S3 wampapache; C:\Program Files (x86)\wamp\bin\apache\apache2.2.21\bin\httpd.exe [18432 2011-09-26] (Apache Software Foundation)
S3 wampmysqld; C:\Program Files (x86)\wamp\bin\mysql\mysql5.5.20\bin\mysqld.exe [8176640 2012-01-25] ()
R2 WSWNA1100; C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe [278528 2009-11-27] ()
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-12-15] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2012-01-24] (Turtle Entertainment GmbH)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2006-12-28] (AVM GmbH)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-12-15] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [34304 2012-01-11] (ManyCam LLC)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2012-02-22] (ManyCam LLC)
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15168 2012-03-10] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-04-10] (Duplex Secure Ltd.)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 aarmwr5h; C:\Windows\System32\Drivers\aarmwr5h.sys [0 ] (Advanced Micro Devices)
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [x]
S3 bnsdusb; system32\DRIVERS\bnsdusb.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 MBfilt; system32\drivers\MBfilt64.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-27 17:51 - 2013-12-27 17:55 - 00025234 _____ C:\Users\Silverlink\Downloads\FRST.txt
2013-12-27 17:51 - 2013-12-27 17:51 - 00000000 ____D C:\FRST
2013-12-27 17:50 - 2013-12-27 17:50 - 01930746 _____ (Farbar) C:\Users\Silverlink\Downloads\FRST64.exe
2013-12-26 19:24 - 2013-12-26 19:24 - 03978232 _____ (SteelSeries) C:\Users\Silverlink\Downloads\SSEFix_1.25.4.1.exe
2013-12-26 01:24 - 2013-12-26 01:24 - 00000000 ____D C:\Users\Silverlink\AppData\Local\SteelSeries_ApS
2013-12-26 01:23 - 2013-12-26 01:23 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\SteelSeries
2013-12-26 01:19 - 2013-12-26 01:19 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries
2013-12-26 01:19 - 2013-12-26 01:19 - 00000000 ____D C:\ProgramData\SteelSeries
2013-12-26 01:18 - 2013-12-26 01:18 - 46074088 _____ C:\Users\Silverlink\Downloads\SteelSeriesEngine_2.8.0171.exe
2013-12-26 01:18 - 2013-12-26 01:18 - 00000000 ____D C:\Program Files\SteelSeries
2013-12-25 12:30 - 2013-12-25 12:30 - 00007715 _____ C:\Users\Silverlink\.recently-used.xbel
2013-12-23 13:02 - 2013-12-23 14:22 - 00000000 ____D C:\Users\Silverlink\Desktop\NoScope
2013-12-23 11:33 - 2013-12-27 13:29 - 00000809 _____ C:\Windows\setupact.log
2013-12-23 11:33 - 2013-12-23 11:33 - 00000000 _____ C:\Windows\setuperr.log
2013-12-23 11:32 - 2013-12-23 11:32 - 00009298 _____ C:\Windows\PFRO.log
2013-12-18 17:38 - 2013-12-18 17:38 - 00000000 ____D C:\Users\Silverlink\AppData\Local\SoftwareUpdater
2013-12-17 21:31 - 2013-12-17 21:31 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Blizzard
2013-12-17 21:22 - 2013-12-26 00:51 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-12-17 21:22 - 2013-12-17 21:22 - 00001179 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-12-17 21:21 - 2013-12-27 15:38 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Battle.net
2013-12-17 21:21 - 2013-12-20 20:36 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-12-17 21:21 - 2013-12-17 21:31 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Battle.net
2013-12-17 21:19 - 2013-12-17 21:19 - 05933240 _____ (Blizzard Entertainment) C:\Users\Silverlink\Downloads\Hearthstone-Beta-Setup-enGB.exe
2013-12-17 14:54 - 2013-12-17 14:54 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Blizzard Entertainment
2013-12-17 13:55 - 2013-12-17 13:55 - 83293072 _____ (Blizzard Entertainment) C:\Users\Silverlink\Downloads\World-of-Warcraft-Setup-deDE.exe
2013-12-15 13:32 - 2013-12-15 13:32 - 00810938 _____ C:\Users\Silverlink\Downloads\Explosion_01 (1).mp4
2013-12-15 12:56 - 2013-12-15 12:57 - 00002264 _____ C:\Users\Silverlink\Downloads\clock-ticking-3.mp3.sfk
2013-12-14 21:04 - 2013-12-14 21:04 - 00013192 _____ C:\Users\Silverlink\Downloads\GeT RiGhT.cfg
2013-12-13 00:26 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 00:26 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 00:26 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-13 00:26 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-13 00:24 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 00:24 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 00:24 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 00:24 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 00:24 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 00:24 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 00:24 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 00:24 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 00:24 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 00:24 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 00:24 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 00:24 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 00:24 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 00:24 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 00:24 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 00:24 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 00:24 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 00:24 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 00:24 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-13 00:24 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-13 00:24 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 00:24 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 00:24 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 00:24 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-13 00:24 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 00:24 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 00:24 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 00:24 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 00:24 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-13 00:24 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 00:24 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 18:55 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 18:55 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 18:55 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 18:55 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 18:55 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 18:55 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 18:55 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 18:55 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 18:55 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 18:55 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 18:55 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-12 18:53 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 18:53 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 18:53 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 18:53 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 18:53 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 18:53 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 18:53 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 18:53 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-09 19:11 - 2013-12-09 19:11 - 00513536 _____ C:\Users\Silverlink\Downloads\Pagealicious_RocketFuelInstaller.exe
2013-12-08 14:09 - 2013-12-08 14:09 - 00000000 ____D C:\ProgramData\Oracle
2013-12-08 14:08 - 2013-12-08 14:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-08 14:05 - 2013-12-08 14:05 - 00915368 _____ (Oracle Corporation) C:\Users\Silverlink\Downloads\chromeinstall-7u45.exe
2013-12-06 14:07 - 2013-12-06 14:07 - 00102975 _____ C:\Users\Silverlink\Downloads\LOIC-1.0.7.42-binary.zip
2013-12-05 00:43 - 2013-12-05 00:43 - 00012816 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_AuroraCSGO.zip
2013-12-05 00:41 - 2013-12-05 00:41 - 00813260 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_ExFURY.zip
2013-12-05 00:40 - 2013-12-05 00:40 - 04492424 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_CSGO Wallhacked Players v2.rar
2013-12-04 00:08 - 2013-12-04 00:08 - 00023908 _____ C:\Users\Silverlink\Downloads\easy.odt
2013-12-02 10:26 - 2013-12-02 10:26 - 00000000 ____D C:\Users\Silverlink\Documents\Telltale Games
2013-12-01 16:20 - 2013-12-01 16:20 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Namco
2013-12-01 13:13 - 2013-12-01 13:13 - 01467128 _____ C:\Users\Silverlink\Downloads\SystemCheck_deDE (1).exe
2013-11-28 13:40 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-28 13:24 - 2013-11-28 13:24 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-28 13:24 - 2013-11-28 13:24 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 13:24 - 2013-11-28 13:24 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 13:24 - 2013-11-28 13:24 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-28 13:24 - 2013-11-28 13:24 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 13:24 - 2013-11-28 13:24 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-28 13:24 - 2013-11-28 13:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
==================== One Month Modified Files and Folders =======
2013-12-27 17:55 - 2013-12-27 17:51 - 00025234 _____ C:\Users\Silverlink\Downloads\FRST.txt
2013-12-27 17:55 - 2011-11-19 20:11 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Skype
2013-12-27 17:51 - 2013-12-27 17:51 - 00000000 ____D C:\FRST
2013-12-27 17:50 - 2013-12-27 17:50 - 01930746 _____ (Farbar) C:\Users\Silverlink\Downloads\FRST64.exe
2013-12-27 17:42 - 2011-11-11 16:43 - 00001140 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA.job
2013-12-27 17:39 - 2012-04-04 13:39 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-27 17:36 - 2011-11-11 16:29 - 01751298 _____ C:\Windows\WindowsUpdate.log
2013-12-27 17:24 - 2012-07-22 12:16 - 00000948 _____ C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA.job
2013-12-27 17:13 - 2012-05-05 17:13 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-27 16:45 - 2013-10-08 11:26 - 00004188 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-12-27 16:45 - 2013-10-08 11:25 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-12-27 15:38 - 2013-12-17 21:21 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Battle.net
2013-12-27 15:33 - 2012-01-11 17:30 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-27 15:11 - 2012-03-13 17:10 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-27 13:42 - 2011-11-11 16:43 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core.job
2013-12-27 13:38 - 2009-07-14 05:45 - 00020352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-27 13:38 - 2009-07-14 05:45 - 00020352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-27 13:30 - 2012-01-17 21:10 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Htc
2013-12-27 13:29 - 2013-12-23 11:33 - 00000809 _____ C:\Windows\setupact.log
2013-12-27 13:29 - 2013-05-11 11:45 - 00000424 _____ C:\Windows\Tasks\PC Optimizer Pro64 startups.job
2013-12-27 13:29 - 2012-12-25 20:32 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-27 13:29 - 2012-05-05 17:13 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-27 13:29 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-26 21:25 - 2011-11-13 16:49 - 00000000 ____D C:\Users\Silverlink\.gimp-2.6
2013-12-26 19:24 - 2013-12-26 19:24 - 03978232 _____ (SteelSeries) C:\Users\Silverlink\Downloads\SSEFix_1.25.4.1.exe
2013-12-26 18:33 - 2011-11-12 20:19 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Adobe
2013-12-26 14:36 - 2013-10-08 11:17 - 00000000 ____D C:\Program Files (x86)\Plus-HD-3.8
2013-12-26 13:23 - 2012-07-22 12:16 - 00000896 _____ C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core.job
2013-12-26 01:24 - 2013-12-26 01:24 - 00000000 ____D C:\Users\Silverlink\AppData\Local\SteelSeries_ApS
2013-12-26 01:23 - 2013-12-26 01:23 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\SteelSeries
2013-12-26 01:19 - 2013-12-26 01:19 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries
2013-12-26 01:19 - 2013-12-26 01:19 - 00000000 ____D C:\ProgramData\SteelSeries
2013-12-26 01:18 - 2013-12-26 01:18 - 46074088 _____ C:\Users\Silverlink\Downloads\SteelSeriesEngine_2.8.0171.exe
2013-12-26 01:18 - 2013-12-26 01:18 - 00000000 ____D C:\Program Files\SteelSeries
2013-12-26 00:51 - 2013-12-17 21:22 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-12-25 12:30 - 2013-12-25 12:30 - 00007715 _____ C:\Users\Silverlink\.recently-used.xbel
2013-12-25 12:30 - 2011-11-13 17:07 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\gtk-2.0
2013-12-25 12:30 - 2011-11-11 16:29 - 00000000 ____D C:\Users\Silverlink
2013-12-25 12:06 - 2013-01-10 17:36 - 00000000 ____D C:\Users\Silverlink\AppData\Local\CrashDumps
2013-12-24 19:46 - 2011-11-11 18:29 - 00739622 _____ C:\Windows\system32\perfh015.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00713320 _____ C:\Windows\system32\prfh0416.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00690210 _____ C:\Windows\system32\perfh00C.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00683782 _____ C:\Windows\system32\perfh00E.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00607978 _____ C:\Windows\system32\perfh008.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00492860 _____ C:\Windows\system32\perfh014.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00477724 _____ C:\Windows\system32\perfh001.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00176122 _____ C:\Windows\system32\perfc00E.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00160194 _____ C:\Windows\system32\perfc015.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00151600 _____ C:\Windows\system32\prfc0416.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00133886 _____ C:\Windows\system32\perfc00C.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00115822 _____ C:\Windows\system32\perfc008.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00098682 _____ C:\Windows\system32\perfc014.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00097896 _____ C:\Windows\system32\perfc001.dat
2013-12-24 19:46 - 2011-11-11 17:15 - 00480322 _____ C:\Windows\system32\perfh00B.dat
2013-12-24 19:46 - 2011-11-11 17:15 - 00105320 _____ C:\Windows\system32\perfc00B.dat
2013-12-24 19:46 - 2009-07-14 06:13 - 06709608 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-23 23:05 - 2013-10-03 22:38 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\.minecraft
2013-12-23 20:53 - 2012-12-07 13:58 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Spotify
2013-12-23 17:03 - 2012-12-07 13:58 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Spotify
2013-12-23 14:22 - 2013-12-23 13:02 - 00000000 ____D C:\Users\Silverlink\Desktop\NoScope
2013-12-23 11:33 - 2013-12-23 11:33 - 00000000 _____ C:\Windows\setuperr.log
2013-12-23 11:32 - 2013-12-23 11:32 - 00009298 _____ C:\Windows\PFRO.log
2013-12-23 11:32 - 2011-12-30 18:35 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-12-23 02:37 - 2011-11-21 17:49 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\TS3Client
2013-12-22 16:40 - 2012-06-18 16:00 - 00000000 ____D C:\ProgramData\Origin
2013-12-22 16:40 - 2012-06-18 15:58 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Origin
2013-12-22 16:40 - 2012-06-06 18:53 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-22 16:37 - 2012-06-15 14:54 - 00000000 ____D C:\Users\Silverlink\AppData\Local\LogMeIn Hamachi
2013-12-22 16:34 - 2011-11-22 18:07 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-12-22 16:32 - 2012-03-03 21:17 - 00000000 ____D C:\Program Files (x86)\Free FLV Converter
2013-12-22 16:31 - 2013-06-08 10:38 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2013-12-22 16:31 - 2013-06-08 10:30 - 00000000 ____D C:\Program Files (x86)\FL Studio 10
2013-12-22 16:30 - 2013-04-12 15:50 - 00000000 ____D C:\Program Files (x86)\Vstplugins
2013-12-22 16:29 - 2013-08-19 19:08 - 00000000 ____D C:\AeriaGames
2013-12-22 16:29 - 2012-01-31 14:06 - 00000000 ____D C:\Program Files\EslWire
2013-12-22 16:22 - 2012-06-18 16:01 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-22 16:16 - 2011-12-27 17:58 - 00000000 ____D C:\Program Files (x86)\Cinema 4D R12
2013-12-22 16:11 - 2012-07-20 14:39 - 00000000 ____D C:\Program Files (x86)\Call Graph
2013-12-22 16:10 - 2012-03-28 19:11 - 00000000 ____D C:\Program Files (x86)\Black Tomato Mod
2013-12-22 16:10 - 2011-12-13 16:16 - 00000000 ____D C:\Users\Silverlink\Documents\Battlefield Heroes
2013-12-22 16:06 - 2012-06-06 16:43 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-12-22 16:06 - 2009-07-14 08:46 - 00000000 ____D C:\Windows\ShellNew
2013-12-22 13:25 - 2011-12-11 22:28 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\DAEMON Tools Lite
2013-12-22 13:24 - 2012-02-25 18:09 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\uTorrent
2013-12-22 13:24 - 2011-11-17 15:08 - 00000000 ____D C:\Windows\Minidump
2013-12-22 13:24 - 2011-11-12 01:17 - 00000000 ____D C:\Windows\Panther
2013-12-20 20:36 - 2013-12-17 21:21 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-12-19 16:36 - 2012-06-29 16:51 - 00000000 ____D C:\Users\Silverlink\Documents\RPGVXAce
2013-12-19 16:36 - 2012-06-25 19:12 - 00000000 ____D C:\Users\Silverlink\Documents\RPGXP
2013-12-19 16:36 - 2011-11-11 21:11 - 00000000 ____D C:\Users\Silverlink\Documents\RPGVX
2013-12-19 16:35 - 2011-11-13 14:03 - 00000000 ___RD C:\Users\Silverlink\Desktop\Programme
2013-12-19 16:35 - 2011-11-11 20:39 - 00000000 ___RD C:\Users\Silverlink\Desktop\Games
2013-12-18 17:38 - 2013-12-18 17:38 - 00000000 ____D C:\Users\Silverlink\AppData\Local\SoftwareUpdater
2013-12-17 21:31 - 2013-12-17 21:31 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Blizzard
2013-12-17 21:31 - 2013-12-17 21:21 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Battle.net
2013-12-17 21:22 - 2013-12-17 21:22 - 00001179 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-12-17 21:19 - 2013-12-17 21:19 - 05933240 _____ (Blizzard Entertainment) C:\Users\Silverlink\Downloads\Hearthstone-Beta-Setup-enGB.exe
2013-12-17 14:54 - 2013-12-17 14:54 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Blizzard Entertainment
2013-12-17 13:55 - 2013-12-17 13:55 - 83293072 _____ (Blizzard Entertainment) C:\Users\Silverlink\Downloads\World-of-Warcraft-Setup-deDE.exe
2013-12-17 11:56 - 2013-08-08 14:59 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-17 11:56 - 2013-08-08 14:57 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-17 11:56 - 2013-08-08 14:57 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-17 11:48 - 2009-07-14 06:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-16 16:50 - 2012-10-02 15:18 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Awesomium
2013-12-15 21:00 - 2013-08-14 22:58 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 19:14 - 2012-05-05 17:13 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-15 18:57 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-15 13:32 - 2013-12-15 13:32 - 00810938 _____ C:\Users\Silverlink\Downloads\Explosion_01 (1).mp4
2013-12-15 12:57 - 2013-12-15 12:56 - 00002264 _____ C:\Users\Silverlink\Downloads\clock-ticking-3.mp3.sfk
2013-12-14 21:04 - 2013-12-14 21:04 - 00013192 _____ C:\Users\Silverlink\Downloads\GeT RiGhT.cfg
2013-12-14 01:20 - 2011-11-11 17:25 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 08:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-13 07:51 - 2009-07-14 05:45 - 05020144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\th-TH
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sr-Latn-CS
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sl-SI
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sk-SK
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ro-RO
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\th-TH
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sl-SI
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sk-SK
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ro-RO
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ar-SA
2013-12-13 00:26 - 2012-02-01 17:56 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 13:39 - 2012-04-04 13:39 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 13:39 - 2012-04-04 13:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 13:39 - 2011-11-14 09:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-09 19:11 - 2013-12-09 19:11 - 00513536 _____ C:\Users\Silverlink\Downloads\Pagealicious_RocketFuelInstaller.exe
2013-12-08 14:09 - 2013-12-08 14:09 - 00000000 ____D C:\ProgramData\Oracle
2013-12-08 14:08 - 2013-12-08 14:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-08 14:08 - 2012-09-05 14:26 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-08 14:08 - 2012-09-05 14:25 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-08 14:08 - 2012-09-05 14:25 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-08 14:05 - 2013-12-08 14:05 - 00915368 _____ (Oracle Corporation) C:\Users\Silverlink\Downloads\chromeinstall-7u45.exe
2013-12-07 13:03 - 2011-12-22 20:01 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2013-12-06 14:07 - 2013-12-06 14:07 - 00102975 _____ C:\Users\Silverlink\Downloads\LOIC-1.0.7.42-binary.zip
2013-12-05 23:08 - 2012-05-05 17:13 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-05 23:08 - 2012-05-05 17:13 - 00003862 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-05 00:43 - 2013-12-05 00:43 - 00012816 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_AuroraCSGO.zip
2013-12-05 00:41 - 2013-12-05 00:41 - 00813260 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_ExFURY.zip
2013-12-05 00:40 - 2013-12-05 00:40 - 04492424 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_CSGO Wallhacked Players v2.rar
2013-12-04 16:51 - 2012-10-10 12:54 - 00000002 _____ C:\Windows\system32\HRUPPROG.TXT
2013-12-04 00:08 - 2013-12-04 00:08 - 00023908 _____ C:\Users\Silverlink\Downloads\easy.odt
2013-12-03 13:37 - 2011-11-11 16:43 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA
2013-12-03 13:37 - 2011-11-11 16:43 - 00003724 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core
2013-12-02 10:26 - 2013-12-02 10:26 - 00000000 ____D C:\Users\Silverlink\Documents\Telltale Games
2013-12-01 16:20 - 2013-12-01 16:20 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Namco
2013-12-01 16:20 - 2012-07-10 17:59 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-12-01 16:20 - 2012-07-10 17:59 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-12-01 13:13 - 2013-12-01 13:13 - 01467128 _____ C:\Users\Silverlink\Downloads\SystemCheck_deDE (1).exe
2013-12-01 11:00 - 2011-11-19 20:11 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-01 11:00 - 2011-11-19 20:11 - 00000000 ____D C:\ProgramData\Skype
2013-11-28 17:21 - 2011-11-11 16:30 - 00001409 _____ C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-28 17:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-28 13:24 - 2013-11-28 13:24 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-28 13:24 - 2013-11-28 13:24 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 13:24 - 2013-11-28 13:24 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 13:24 - 2013-11-28 13:24 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-28 13:24 - 2013-11-28 13:24 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 13:24 - 2013-11-28 13:24 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-28 13:24 - 2013-11-28 13:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-28 13:24 - 2013-11-28 13:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 13:24 - 2013-11-28 13:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
Some content of TEMP:
====================
C:\Users\Silverlink\AppData\Local\Temp\avgnt.exe
C:\Users\Silverlink\AppData\Local\Temp\i4jdel0.exe
C:\Users\Silverlink\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Silverlink\AppData\Local\Temp\sfareca00001.dll
C:\Users\Silverlink\AppData\Local\Temp\x2blapi.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-21 13:31
==================== End Of Log ============================
--- --- --- |
|
27.12.2013, 18:15
| #4 |
| | BOO/TDss.O & Parameter Name: Value Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-12-2013 01
Ran by Silverlink at 2013-12-27 17:55:32
Running from C:\Users\Silverlink\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
µTorrent (HKCU Version: 3.3.1.29812)
7-Zip 4.20 (x32)
Acrobat.com (x32 Version: 0.0.0)
Acrobat.com (x32 Version: 1.1.377)
Adobe After Effects CS5 (x32 Version: 10)
Adobe After Effects CS6 (x32 Version: 11)
Adobe AIR (x32 Version: 3.2.0.2070)
Adobe Download Assistant (x32 Version: 1.0.6)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Adobe Help Manager (x32 Version: 4.0.244)
Adobe Media Player (x32 Version: 1.8)
Adobe Photoshop CS5.1 (x32 Version: 12.1)
Adobe Reader 9 (x32 Version: 9.0.0)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.5.635)
Akamai NetSession Interface (HKCU)
Alliance of Valiant Arms (x32)
AMD Accelerated Video Transcoding (Version: 12.5.100.20928)
AMD APP SDK Runtime (Version: 10.0.1016.4)
AMD Catalyst Install Manager (Version: 8.0.891.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2012.0928.1532.26058)
AMD Media Foundation Decoders (Version: 1.0.70928.1539)
AMD VISION Engine Control Center (x32 Version: 2012.0928.1532.26058)
Apple Application Support (x32 Version: 2.2.2)
Apple Mobile Device Support (Version: 6.0.0.59)
Apple Software Update (x32 Version: 2.1.3.127)
ASIO4ALL (x32 Version: 2.10)
ASRock App Charger v1.0.5
ASRock eXtreme Tuner v0.1.219 (x32)
ASRock InstantBoot v1.29 (x32)
ASUS GPU Tweak (x32 Version: 2.2.8.1)
Audacity 2.0.2 (x32 Version: 2.0.2)
Auslogics Disk Defrag (x32 Version: version 3.3)
Avira Free Antivirus (x32 Version: 14.0.2.286)
AVM FRITZ!WLAN (x32)
Battle.net (x32)
Battlefield 3™ (x32 Version: 1.3.0.0)
Battlefield Heroes (PTE) (HKCU)
Battlefield Heroes (x32)
Bonjour (Version: 3.0.0.10)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32)
Call of Duty: Black Ops II - Multiplayer (x32)
Call of Duty: Black Ops II - Zombies (x32)
Call of Duty: Ghosts - Multiplayer (x32)
CameraHelperMsi (x32 Version: 13.31.1038.0)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0928.1532.26058)
Catalyst Control Center InstallProxy (x32 Version: 2012.0928.1532.26058)
Catalyst Control Center Localization All (x32 Version: 2012.0928.1532.26058)
CCC Help Chinese Standard (x32 Version: 2012.0928.1531.26058)
CCC Help Chinese Traditional (x32 Version: 2012.0928.1531.26058)
CCC Help Czech (x32 Version: 2012.0928.1531.26058)
CCC Help Danish (x32 Version: 2012.0928.1531.26058)
CCC Help Dutch (x32 Version: 2012.0928.1531.26058)
CCC Help English (x32 Version: 2012.0928.1531.26058)
CCC Help Finnish (x32 Version: 2012.0928.1531.26058)
CCC Help French (x32 Version: 2012.0928.1531.26058)
CCC Help German (x32 Version: 2012.0928.1531.26058)
CCC Help Greek (x32 Version: 2012.0928.1531.26058)
CCC Help Hungarian (x32 Version: 2012.0928.1531.26058)
CCC Help Italian (x32 Version: 2012.0928.1531.26058)
CCC Help Japanese (x32 Version: 2012.0928.1531.26058)
CCC Help Korean (x32 Version: 2012.0928.1531.26058)
CCC Help Norwegian (x32 Version: 2012.0928.1531.26058)
CCC Help Polish (x32 Version: 2012.0928.1531.26058)
CCC Help Portuguese (x32 Version: 2012.0928.1531.26058)
CCC Help Russian (x32 Version: 2012.0928.1531.26058)
CCC Help Spanish (x32 Version: 2012.0928.1531.26058)
CCC Help Swedish (x32 Version: 2012.0928.1531.26058)
CCC Help Thai (x32 Version: 2012.0928.1531.26058)
CCC Help Turkish (x32 Version: 2012.0928.1531.26058)
ccc-utility64 (Version: 2012.0928.1532.26058)
CCleaner (Version: 3.15)
CDBurnerXP (x32 Version: 4.4.2.3442)
CFX Path Tools-64 for (x32)
Chantelise (x32)
Cheat Engine 6.2 (x32)
Counter-Strike 1.6 (x32)
Counter-Strike: Global Offensive (x32)
CPUID CPU-Z 1.62
Cthulhu Saves the World (x32)
Cycore FX 1.0.1 for After Effects (x32)
CycoreFX HD 1.6.1 for After Effects (x32)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
DevPro YGO Launcher (x32 Version: 1.8.3)
Dota 2 (x32)
Dungeons of Dredmor (x32)
Dust: An Elysian Tail (x32)
Dxtory 2.0.104 (x32 Version: 2.0.104)
EPSON-Drucker-Software
erLT (x32 Version: 1.20.138.34)
Etron USB3.0 Host Controller (x32 Version: 0.109)
Everio MediaBrowser 4 (x32 Version: 4.00.214)
Forge (x32)
Fraps (remove only) (x32)
Free Video to MP3 Converter version 5.0.24.430 (x32 Version: 5.0.24.430)
Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430)
Freemake Video Converter version 4.0.1 (x32 Version: 4.0.1)
FTL: Faster Than Light (x32)
Garry's Mod (x32)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Chrome (x32 Version: 31.0.1650.63)
Google Earth (x32 Version: 7.1.2.2041)
Google Talk Plugin (x32 Version: 4.9.1.16010)
Google Update Helper (x32 Version: 1.3.22.3)
Grand Theft Auto IV (x32 Version: 1.0.0013.131)
Grand Theft Auto IV (x32 Version: 1.00.0000)
Half Minute Hero: Super Mega Neo Climax Ultimate Boy (x32)
Hearthstone (x32)
Heaven DX11 Benchmark version 3.0 (Version: 3.0)
Hi-Rez Studios Authenticate and Update Service (x32 Version: 3.0.0.0)
HomeTab 4.8 (x32 Version: 4.8)
HTC BMP USB Driver (x32 Version: 1.0.5375)
HTC Driver Installer (x32 Version: 3.0.0.021)
HTC Sync (x32 Version: 3.2.20)
iExplorer 3.2.5.0 (x32)
iTunes (Version: 10.7.0.21)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 6 Update 32 (x32 Version: 6.0.320)
Knights of Pen and Paper (x32)
Lagarith Lossless Codec (1.3.27) (x32)
League of Legends (x32 Version: 1.3)
Left 4 Dead 2 (x32)
Logitech SetPoint 6.32 (Version: 6.32.20)
Logitech Webcam Software (x32 Version: 2.0)
Logitech Webcam Software-Treiberpaket (Version: 12.10.1110)
LWS Facebook (x32 Version: 13.31.1038.0)
LWS Gallery (x32 Version: 13.31.1038.0)
LWS Help_main (x32 Version: 13.31.1044.0)
LWS Launcher (x32 Version: 13.31.1038.0)
LWS Motion Detection (x32 Version: 13.30.1395.0)
LWS Pictures And Video (x32 Version: 13.31.1038.0)
LWS Twitter (x32 Version: 13.30.1346.0)
LWS Video Mask Maker (x32 Version: 13.30.1379.0)
LWS VideoEffects (Version: 13.30.1379.0)
LWS Webcam Software (x32 Version: 13.31.1038.0)
LWS WLM Plugin (x32 Version: 1.30.1201.0)
LWS YouTube Plugin (x32 Version: 13.31.1038.0)
Magic Bullet Looks 64-bit (Version: 1.4.3)
Magic Bullet Looks 64-bit (x32 Version: 1.4.3)
Magicka (x32)
Maxthon 3 (x32 Version: )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Office 2000 Premium (x32 Version: 9.00.2816)
Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Home and Student 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000)
Might & Magic Heroes VI (x32 Version: 1.1.1)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT Redists (x32 Version: 1.0)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Mumble 1.2.3 (x32 Version: 1.2.3)
NETGEAR WNA1100 wireless USB 2.0 adapter (x32 Version: 1.0.0.133)
NVIDIA 3D Vision Controller Driver 306.23 (Version: 306.23)
NVIDIA 3D Vision Driver 311.06 (Version: 311.06)
NVIDIA Control Panel 311.06 (Version: 311.06)
NVIDIA Graphics Driver 311.06 (Version: 311.06)
NVIDIA HD Audio Driver 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
Open Broadcaster Software version 0.452a (x32 Version: 0.452a) <==== ATTENTION
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
Opera 12.00 (x32 Version: 12.00.1467)
osu! (x32 Version: 0.0.0.0)
Palringo (x32)
Path of Exile (x32)
PAYDAY 2 Demo (x32)
PDF Settings CS5 (x32 Version: 10.0)
Plain Sight (x32)
Plus-HD-3.8 (x32 Version: 1.27.153.11) <==== ATTENTION
Pokémon Trading Card Game Online (x32 Version: 1.0.0)
Poker Night 2 (x32)
PunkBuster Services (x32 Version: 0.990)
Puzzle Quest 2 (x32)
QuickTime (x32 Version: 7.72.80.56)
Ragnarok Online 2 (x32)
Rapture3D 2.4.8 Game (x32)
Realm of the Mad God (x32)
Realtek Ethernet Controller Driver (x32 Version: 7.44.421.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482)
Reus (x32 Version: 2.0.0.10)
RGSS-RTP Standard (x32 Version: 1.04)
Rock of Ages (x32)
RockMelt (HKCU Version: 0.16.91.483)
Rogue Legacy Demo version 1.0.3 (x32 Version: 1.0.3)
RollerCoaster Tycoon 3 (x32)
RPG Maker VX (x32 Version: 1.02)
RPG MAKER VX Ace RTP (x32 Version: 1.00)
RPG Maker VX RTP (x32 Version: 1.02)
RPG Maker XP (x32 Version: 1.04)
Safari (x32 Version: 5.34.57.2)
Saints Row: The Third (x32)
SARDU 2.0.6.5 (x32 Version: 2.0.6.5)
Schulkompendium v2.0 - Mathematik (x32 Version: 2.0.0.0)
Scrolls (x32 Version: 1.0.0)
ScrollsTest (x32 Version: 1.0.0)
Sequence (x32)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)
Skype Click to Call (x32 Version: 6.13.13771)
Skype™ 6.11 (x32 Version: 6.11.102)
Smashmuck Champions (x32)
Smite (x32 Version: 0.1.1888.2)
Sniper Elite V2 (x32)
SpeedFan (remove only) (x32)
Spelunky HD 1.0 (x32 Version: 1.0)
Spotify (HKCU Version: 0.9.6.81.gd359a796)
Steam (x32 Version: 1.0.0.0)
SteelSeries Engine (Version: 2.8.171.34768)
Steinberg Cubase 5 (x32 Version: 5.1.0)
Steinberg Drum Loop Expansion 01 (x32 Version: 1.0.0.1)
Steinberg Groove Agent ONE Content (x32 Version: 1.0.0.003)
Steinberg HALionOne (x32 Version: 1.1.0.457)
Steinberg HALionOne Additional Content Set 01 (x32 Version: 1.0.0.001)
Steinberg HALionOne Expression Set (x32 Version: 1.0.1.0)
Steinberg HALionOne GM Drum Set (x32 Version: 1.0.1.457)
Steinberg HALionOne GM Set (x32 Version: 1.0.1.457)
Steinberg HALionOne Pro Set (x32 Version: 1.0.1.457)
Steinberg HALionOne Studio Drum Set (x32 Version: 1.0.1.457)
Steinberg HALionOne Studio Set (x32 Version: 1.0.1.457)
Steinberg LoopMash Content (x32 Version: 1.0.0.005)
Steinberg REVerence Content 01 (x32 Version: 1.0.0.006)
StepMania v5.0 alpha 3 (remove only) (x32 Version: )
Super Monday Night Combat (x32)
swMSM (x32 Version: 12.0.0.1)
Swords and Soldiers HD (x32)
System Requirements Lab CYRI (x32 Version: 5.0.6.0)
Team Fortress 2 (x32)
TeamSpeak 3 Client (x32 Version: 3.0.11.1)
The Binding Of Isaac (x32)
The Elder Scrolls V: Skyrim (x32)
THX TruStudio (x32 Version: 1.00.01)
Torchlight 2 Rapid Respec (x32 Version: 2.04)
Torchlight II (x32)
TrackMania Nations Forever (x32)
Trapcode Particular (Version: 2.1.0)
Trapcode Particular (x32 Version: 2.1.0)
Tropico 3 1.00 (x32 Version: 1.00)
Uber Compute for Keys version 02.00.14 (HKCU Version: 02.00.14)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Vegas Pro 11.0 (x32 Version: 11.0.520)
Ventrilo Client for Windows x64 (Version: 3.0.8.0)
VLC media player 2.0.7 (Version: 2.0.7)
WampServer 2.2 (x32)
WhoCrashed 4.01
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Utils (x32)
WinRAR 4.01 (32-Bit) (x32 Version: 4.01.0)
WinSCP 4.3.8 (x32 Version: 4.3.8)
Wizorb (x32)
World of Warcraft (x32)
Worms Forts Under Siege (x32 Version: 1.00.0001)
XSplit (x32 Version: 1.0.1207.2601)
YTD Video Downloader 4.0 (x32 Version: 4.0)
==================== Restore Points =========================
24-12-2013 11:03:08 Windows Update
27-12-2013 12:36:17 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2012-10-26 16:37 - 00000029 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {018F63AA-A685-4D14-8B10-29D00D953D93} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\HomeTab\ProtectedSearch.exe [2013-10-06] (Simplygen) <==== ATTENTION
Task: {13A5F674-507A-4BE8-B669-13560C0FEC19} - System32\Tasks\{BBC69801-A39B-49C5-B248-4B846ED0A8D9} => C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe [2013-12-16] ()
Task: {235D4372-39B5-47AB-BF3C-49A0A8594460} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-05] (Google Inc.)
Task: {48B168E0-FB00-4855-93ED-FD861B2E48E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-05] (Google Inc.)
Task: {4E63BB6D-2485-4B74-9DD2-892F129AC9E5} - System32\Tasks\{011DD7EA-263D-42FD-91B1-67B94E6C419A} => C:\Users\Silverlink\Desktop\Skyrim\skyrim4gb.exe
Task: {5B270F4A-7F5E-4F7F-B3E3-5844DF86855B} - System32\Tasks\{E5B91C47-7D1C-4601-81AD-C029BB350316} => C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe [2013-12-16] ()
Task: {5EAAFCBA-D418-4180-B618-CB88F46A2EA1} - System32\Tasks\{F0C69FCE-4CFB-4E0C-886F-5DCC31C9E015} => C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe [2013-12-16] ()
Task: {5FA98805-41B1-4080-9FAC-42FD6BCD81FF} - System32\Tasks\{47003C53-3D12-4200-9BC3-97D835FAD916} => C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe [2011-02-10] (Sony DADC Austria AG)
Task: {6C5B3600-E780-4CB8-8FCC-9FF03E15F143} - System32\Tasks\{D934294C-1FD7-4984-8679-83E03EB78514} => C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe [2013-12-16] ()
Task: {6E7548D9-D404-46E4-A7C7-7B53AB84DA89} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-12-18] ()
Task: {720AF128-ABA7-4263-AA77-9D0B2FAA5FC4} - System32\Tasks\{98A5C7F2-6973-49DE-ACEC-2AD05661AF7F} => C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe [2013-12-16] ()
Task: {731632BE-7F3B-4B24-AA3F-BA77F9882926} - System32\Tasks\{021A51DC-C9A7-47A8-A215-262EAF852D41} => C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe [2013-12-16] ()
Task: {78E5DBBD-57AE-4022-898A-481BCCF10E54} - System32\Tasks\{4ED12DC8-A4F4-4267-A9B0-A3CF9FF77833} => C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe [2013-12-16] ()
Task: {84D3A5E6-5FF6-46DE-AAA4-A2662D003487} - System32\Tasks\Browser Updater\Browser Updater => Rundll32.exe "C:\Program Files (x86)\HomeTab\TBUpdater.dll",TBCheckForUpdate
Task: {969E6EBE-8552-472B-9588-E464755D3A76} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-12-18] ()
Task: {982F9940-8BCF-4EC0-91F1-5549611F2314} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon3\Bin\MxUp.exe [2013-03-28] (Maxthon International ltd.)
Task: {9E519506-8086-44E7-B7BA-BE4DBB093879} - System32\Tasks\PC Optimizer Pro64 startups => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION
Task: {9E9167C0-67AB-4BAC-82E3-46C2F65F1282} - System32\Tasks\{B0A70FEF-DA69-4D7A-8FA8-FACDEB940909} => C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe [2011-02-10] (Sony DADC Austria AG)
Task: {9FC14A2B-5979-4C52-80B3-A92EFDA654F8} - System32\Tasks\Asrsetup => E:\ASRSetup.exe
Task: {AC395D1D-8F11-4ED4-AD74-E91AE97E3E02} - System32\Tasks\{32F0924E-011D-49C0-A617-45CC7F505552} => C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe [2013-12-16] ()
Task: {B30F86EC-C99D-4000-ABD3-8BDEF585C130} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core => C:\Users\Silverlink\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-07-22] (RockMelt Inc.)
Task: {B447AFE1-3F50-40AE-85E8-BA980984123F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA => C:\Users\Silverlink\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-11] (Google Inc.)
Task: {B8C1D62C-41E7-45DF-96E1-0A867ABBB683} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core => C:\Users\Silverlink\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-11] (Google Inc.)
Task: {DEDB4A57-2745-4F55-8207-5BA35588C749} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] ()
Task: {E0F72F31-44B5-4CC2-AD48-7686329D7A4A} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA => C:\Users\Silverlink\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-07-22] (RockMelt Inc.)
Task: {ECEAD27D-070E-4286-A92E-78DFA56EBA7C} - System32\Tasks\KMS Activation for Office => C:\Windows\KMSAct.exe
Task: {F9F5317A-E011-4605-95CC-7A9DA67A164D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core.job => C:\Users\Silverlink\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA.job => C:\Users\Silverlink\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PC Optimizer Pro64 startups.job => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core.job => C:\Users\Silverlink\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA.job => C:\Users\Silverlink\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-01-10 06:21 - 2011-05-19 09:58 - 00246784 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-11-05 18:19 - 2013-11-05 18:19 - 00708096 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineLib.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00175104 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DBUtils.dll
2013-12-26 01:23 - 2013-12-26 01:23 - 00089915 _____ () C:\Users\Silverlink\AppData\Local\Temp\10d2ca4a-28d7-4d81-8c1e-dc42bb6c83fc\CliSecureRT64.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00280064 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DriverCommunication.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00139776 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\ISSPlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00148480 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Localization.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00145408 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Utilities.dll
2013-01-10 06:46 - 2013-01-10 06:46 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\x2api.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 09562112 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineWinGui.dll
2013-01-10 06:46 - 2013-01-10 06:46 - 01102336 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\System.Data.SQLite.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00209408 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CustomWPFColorPicker.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00349696 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MousePlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00171008 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\D3MousePlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00173056 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\KKMousePlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00171008 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SRawPlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00307200 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MLGSenseiPlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00154624 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWGoldPlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\GW2MousePlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00169472 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CSGOMousePlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DOTA2MousePlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00157184 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWWirelessPlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CODMousePlugin.dll
2013-11-05 18:19 - 2013-11-05 18:19 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoTMousePlugin.dll
2011-08-12 12:20 - 2011-08-12 12:20 - 01260568 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\UMVPLMute.dll
2011-08-12 12:19 - 2011-08-12 12:19 - 00221208 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\FxPreview.dll
2011-08-12 12:20 - 2011-08-12 12:20 - 01349656 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\MRSystem.dll
2011-08-12 12:20 - 2011-08-12 12:20 - 00135192 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\MapTrackData.dll
2011-08-12 12:20 - 2011-08-12 12:20 - 01323032 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\MMSystem.dll
2011-08-12 12:20 - 2011-08-12 12:20 - 00294424 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\VMSystem.dll
2013-08-08 14:57 - 2013-08-07 14:58 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-03-21 16:27 - 2004-09-09 17:13 - 00364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser 4\pxl_m17n_tool.dll
2011-11-11 21:34 - 2009-08-28 16:50 - 00282624 _____ () C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvcLib.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00103936 _____ () C:\Program Files (x86)\HTC\HTC Sync 3.0\OutputLog.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00516599 _____ () C:\Program Files (x86)\HTC\HTC Sync 3.0\sqlite3.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00094208 _____ () C:\Program Files (x86)\HTC\HTC Sync 3.0\fdHttpd.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00389120 _____ () C:\Program Files (x86)\HTC\HTC Sync 3.0\HtcDetect.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00151552 _____ () C:\Program Files (x86)\HTC\HTC Sync 3.0\htcDisk.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00172032 _____ () C:\Program Files (x86)\HTC\HTC Sync 3.0\htcDetectLegend.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 00559244 _____ () C:\Program Files (x86)\HTC\HTC Sync 3.0\sqlite3.7.dll
2012-04-17 14:05 - 2012-04-17 14:05 - 01515520 _____ () C:\Program Files (x86)\HTC\HTC Sync 3.0\Maps\R66Api.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-11-11 21:34 - 2009-11-20 14:59 - 00360448 _____ () C:\Program Files (x86)\NETGEAR\WNA1100\WifiLib.dll
2013-12-15 19:46 - 2013-11-06 22:48 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-12-15 19:46 - 2013-12-11 20:40 - 01135016 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-12-15 19:46 - 2013-11-06 22:48 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-12-15 19:46 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-12-15 19:46 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-12-15 19:46 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-12-22 20:55 - 2013-12-27 15:33 - 00172032 _____ () C:\Users\Silverlink\AppData\Local\Temp\sfareca00001.dll
2012-06-23 08:46 - 2013-12-27 15:33 - 00192512 _____ () C:\Users\Silverlink\AppData\Local\Temp\sfamcc00001.dll
2013-12-06 11:15 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 11:15 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 11:15 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 11:15 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 11:15 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-06 11:15 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/27/2013 05:22:26 PM) (Source: Google Update) (User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 04:23:41 PM) (Source: Google Update) (User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 03:22:29 PM) (Source: Google Update) (User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 02:23:38 PM) (Source: Google Update) (User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 01:30:25 PM) (Source: Bonjour Service) (User: )
Description: 472: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (12/27/2013 01:30:25 PM) (Source: Bonjour Service) (User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (12/27/2013 02:22:58 AM) (Source: Google Update) (User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 01:23:39 AM) (Source: Google Update) (User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 00:23:08 AM) (Source: Google Update) (User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/26/2013 11:23:00 PM) (Source: Google Update) (User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
System errors:
=============
Error: (12/27/2013 01:33:36 PM) (Source: Service Control Manager) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069
Error: (12/27/2013 01:33:36 PM) (Source: Service Control Manager) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330
To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
Error: (12/27/2013 01:29:50 PM) (Source: Service Control Manager) (User: )
Description: The AODDriver4.2 service failed to start due to the following error:
%%2
Error: (12/26/2013 06:46:39 PM) (Source: Service Control Manager) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069
Error: (12/26/2013 06:46:39 PM) (Source: Service Control Manager) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330
To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
Error: (12/26/2013 06:45:59 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
Error: (12/26/2013 06:42:12 PM) (Source: Service Control Manager) (User: )
Description: The AODDriver4.2 service failed to start due to the following error:
%%2
Error: (12/26/2013 06:41:55 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 18:40:10 on 26.12.2013 was unexpected.
Error: (12/26/2013 06:36:38 PM) (Source: Service Control Manager) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069
Error: (12/26/2013 06:36:38 PM) (Source: Service Control Manager) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330
To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
Microsoft Office Sessions:
=========================
Error: (12/27/2013 05:22:26 PM) (Source: Google Update)(User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 04:23:41 PM) (Source: Google Update)(User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 03:22:29 PM) (Source: Google Update)(User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 02:23:38 PM) (Source: Google Update)(User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 01:30:25 PM) (Source: Bonjour Service)(User: )
Description: 472: ERROR: read_msg errno 0 (The operation completed successfully.)
Error: (12/27/2013 01:30:25 PM) (Source: Bonjour Service)(User: )
Description: ERROR: mDNSPlatformReadTCP - recv: 10053
Error: (12/27/2013 02:22:58 AM) (Source: Google Update)(User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 01:23:39 AM) (Source: Google Update)(User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/27/2013 00:23:08 AM) (Source: Google Update)(User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
Error: (12/26/2013 11:23:00 PM) (Source: Google Update)(User: Darkness)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned
CodeIntegrity Errors:
===================================
Date: 2013-01-11 14:44:04.027
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\SILVER~1\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-01-11 14:44:03.701
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\SILVER~1\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-01-11 14:44:02.733
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-01-11 14:44:02.409
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 47%
Total physical RAM: 8189.24 MB
Available physical RAM: 4339.04 MB
Total Pagefile: 16376.66 MB
Available Pagefile: 11719.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:467.22 GB) (Free:111.35 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:464.29 GB) (Free:263.98 GB) NTFS
Drive e: (29 Jan 2011) (CDROM) (Total:4.37 GB) (Free:2.1 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E7F0E7F0)
Partition 1: (Active) - (Size=467 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=464 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=688 KB) - (Type=17) ATTENTION ===> Suspicious partition bootkit on partition 3
==================== End Of Log ============================
|
|
28.12.2013, 18:00
| #5 |
| /// the machine /// TB-Ausbilder | BOO/TDss.O & Parameter Name: Value hi, Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
30.12.2013, 13:53
| #6 |
| | BOO/TDss.O & Parameter Name: Value mbar-log-2013-12-30 (12-56-55) : Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.07.0.1008
www.malwarebytes.org
Database version: v2013.12.30.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Silverlink :: DARKNESS [administrator]
30.12.2013 12:56:55
mbar-log-2013-12-30 (12-56-55).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Kernel memory modifications detected. Deep Anti-Rootkit Scan engaged.
Objects scanned: 282574
Time elapsed: 27 minute(s), 9 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 2
HKCU\SOFTWARE\CYBER (Backdoor.Trace) -> Delete on reboot.
HKCU\SOFTWARE\VÍTIMA (Backdoor.Trace) -> Delete on reboot.
Registry Values Detected: 3
HKCU\SOFTWARE\CYBER|FirstExecution (Backdoor.Trace) -> Data: 10/02/2012 -- 18:31 -> Delete on reboot.
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN|Policies (Backdoor.Agent.PGen) -> Data: C:\Windows\system32\System\jushed.exe -> Delete on reboot.
HKCU\SOFTWARE\VÍTIMA|FirstExecution (Backdoor.Trace) -> Data: 20/03/2012 -- 18:58 -> Delete on reboot.
Registry Data Items Detected: 5
HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL (Hijack.SearchPage) -> Bad: (hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=) Good: (hxxp://www.google.com) -> Replace on reboot.
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL (Hijack.SearchPage) -> Bad: (hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=) Good: (hxxp://www.google.com) -> Replace on reboot.
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page (Hijack.SearchPage) -> Bad: (hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=) Good: (hxxp://www.google.com) -> Replace on reboot.
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar (Hijack.SearchPage) -> Bad: (hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=) Good: (hxxp://www.google.com) -> Replace on reboot.
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL (Hijack.SearchPage) -> Bad: (hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1381227315088&tguid=66920-6787-1381227315088-642E4AB82FAEC20D95BE4AAD3065C603&st=chrome&q=) Good: (hxxp://www.google.com/) -> Replace on reboot.
Folders Detected: 0
(No malicious items detected)
Files Detected: 2
C:\Users\Silverlink\AppData\Roaming\logs.dat (Bifrose.Trace) -> Delete on reboot.
C:\Windows\SysWOW64\install\server.exe (Trojan.Downloader) -> Delete on reboot.
Physical Sectors Detected: 1
Physical Sector #1953521664 on Drive #0 (Rootkit.Alureon.E.VBR) -> Replace on reboot.
(end)
|
|
31.12.2013, 08:29
| #7 |
| /// the machine /// TB-Ausbilder | BOO/TDss.O & Parameter Name: Value Nochmal scannen, dann bitte ein frisches FRST log. Meldung weg?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
31.12.2013, 14:13
| #8 |
| | BOO/TDss.O & Parameter Name: Value Ja, die Meldungen sind beide nicht mehr existent. Danke sehr FRST : FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01
Ran by Silverlink (administrator) on DARKNESS on 31-12-2013 14:12:29
Running from C:\Users\Silverlink\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Windows\SysWOW64\ASGT.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Spotify Ltd) C:\Users\Silverlink\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Akamai Technologies, Inc.) C:\Users\Silverlink\AppData\Local\Akamai\netsession_win.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser 4\MBCameraMonitor.exe
() C:\Program Files (x86)\NETGEAR\WNA1100\WNA1100.exe
(Akamai Technologies, Inc.) C:\Users\Silverlink\AppData\Local\Akamai\netsession_win.exe
(Windows Net) C:\Users\Silverlink\AppData\Roaming\Windows Net Data\net.exe
() C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Silverlink\Downloads\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2278504 2011-10-14] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [THX TruStudio NB Settings] - C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909824 2011-05-19] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [HTC Sync Loader] - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
HKCU\...\Run: [Google Update] - C:\Users\Silverlink\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-11] (Google Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Silverlink\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-23] (Spotify Ltd)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Silverlink\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-11-05] (SteelSeries ApS)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
MountPoints2: G - G:\pushinst.exe
MountPoints2: {67c8635c-0c78-11e1-9d38-806e6f6e6963} - E:\setup.exe
MountPoints2: {72387d35-0c7b-11e1-99ed-001c4af33633} - G:\pushinst.exe
MountPoints2: {a28e1bef-a20e-11e2-a61a-902b349d2cc0} - F:\setup.exe
HKU\UpdatusUser\...\Run: [Google Update] - C:\Users\Silverlink\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-11] (Google Inc.)
HKU\UpdatusUser\...\Run: [Spotify] - C:\Users\Silverlink\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-23] (Spotify Ltd)
HKU\UpdatusUser\...\Run: [Spotify Web Helper] - C:\Users\Silverlink\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-23] (Spotify Ltd)
HKU\UpdatusUser\...\Run: [ASRockXTU] - [x]
HKU\UpdatusUser\...\Run: [zASRockInstantBoot] - [x]
HKU\UpdatusUser\...\Policies\Explorer\Run: [Policies] - C:\Windows\system32\System\jushed.exe
Startup: C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files\Logitech Gaming Software\EReg\eReg.exe (Leader Technologies/Logitech)
Startup: C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Silverlink\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE030989D6A51CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:newtab
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317740&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP86734E64-8A96-436E-B5DC-521751CB3E02&q={searchTerms}&SSPV=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: No Name - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No File
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {a25e7121-3dd8-41b3-855b-756c5bc45449} - No File
DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.203.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default
FF NewTab: about:home
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Silverlink\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Silverlink\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Silverlink\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Silverlink\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Silverlink\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @us-w1.rockmelt.com/RockMelt Update;version=8 - C:\Users\Silverlink\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll (RockMelt Inc.)
FF SearchPlugin: C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: NetVideoHunter - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\netvideohunter@netvideohunter.com
FF Extension: YouTube Unblocker - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: FireShot - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
FF Extension: ICQ Toolbar - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Live HTTP Headers - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}
FF Extension: HomeTab - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{ad7ef860-f366-4be1-8d12-4363b9356947}
FF Extension: DownloadHelper - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Easy YouTube Video Downloader - C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
Chrome:
=======
CHR HomePage: https://www.google.com/
CHR Extension: (ProxTube) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.6_0
CHR Extension: (Google Docs) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube Options) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdokagampppgbnjfdlkfpphniapiiifn\1.8.150_0
CHR Extension: (YouTube) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Battlefield Heroes) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh\5.0.203.0_1
CHR Extension: (Adblock Plus) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0
CHR Extension: (Google Search) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (AdBlock) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Skype Click to Call) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_0
CHR Extension: (Google Wallet) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR HKLM-x32\...\Chrome\Extension: [bddpogknpjlgfpbboediomaiiaecfajn] - C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-09-28] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] ()
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [356352 2006-12-28] (AVM Berlin)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [102400 2006-04-18] (SEIKO EPSON CORPORATION)
S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2003-04-18] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-08] ()
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [297984 2013-12-31] ()
S3 wampapache; C:\Program Files (x86)\wamp\bin\apache\apache2.2.21\bin\httpd.exe [18432 2011-09-26] (Apache Software Foundation)
S3 wampmysqld; C:\Program Files (x86)\wamp\bin\mysql\mysql5.5.20\bin\mysqld.exe [8176640 2012-01-25] ()
R2 WSWNA1100; C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe [278528 2009-11-27] ()
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-12-15] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2012-01-24] (Turtle Entertainment GmbH)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2006-12-28] (AVM GmbH)
S1 KS0108; C:\Program Files (x86)\LcdStudio\ks0108.sys [3712 2008-03-10] ()
S1 LC7981; C:\Program Files (x86)\LcdStudio\LC7981.sys [5120 2008-03-10] ()
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-12-15] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [34304 2012-01-11] (ManyCam LLC)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2012-02-22] (ManyCam LLC)
S1 n3900; C:\Program Files (x86)\LcdStudio\n3900.sys [3968 2008-03-10] ()
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15168 2012-03-10] ()
S1 SED133x; C:\Program Files (x86)\LcdStudio\SED133x.sys [7424 2008-03-10] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-04-10] (Duplex Secure Ltd.)
S1 T6963C; C:\Program Files (x86)\LcdStudio\T6963c.sys [6400 2008-03-10] ()
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 asl8g84o; C:\Windows\System32\Drivers\asl8g84o.sys [0 ] (Advanced Micro Devices)
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [x]
S3 bnsdusb; system32\DRIVERS\bnsdusb.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 MBfilt; system32\drivers\MBfilt64.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-31 14:12 - 2013-12-31 14:12 - 00024992 _____ C:\Users\Silverlink\Downloads\FRST.txt
2013-12-31 14:04 - 2013-12-31 14:04 - 01931302 _____ (Farbar) C:\Users\Silverlink\Downloads\FRST64 (1).exe
2013-12-31 01:03 - 2013-12-31 01:03 - 00007095 _____ C:\Users\Silverlink\.recently-used.xbel
2013-12-30 16:55 - 2013-12-30 16:55 - 00000222 _____ C:\Users\Silverlink\Desktop\Starbound.url
2013-12-30 14:31 - 2013-12-30 14:32 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2013-12-30 14:28 - 2013-12-30 14:29 - 56601328 _____ (Logitech Inc.) C:\Users\Silverlink\Downloads\LGS_8.51.5_x64_Logitech (1).exe
2013-12-29 00:12 - 2013-12-30 13:52 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-29 00:12 - 2013-12-29 00:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-29 00:11 - 2013-12-30 13:51 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-28 20:31 - 2013-12-28 20:31 - 00000995 _____ C:\Users\Silverlink\Desktop\License.xml
2013-12-28 20:30 - 2013-12-28 20:34 - 00000000 ____D C:\Program Files (x86)\LcdStudio
2013-12-28 20:30 - 2013-12-28 20:30 - 05012258 _____ C:\Users\Silverlink\Downloads\LcdStudio_806_setup.exe
2013-12-28 20:30 - 2013-12-28 20:30 - 00001015 _____ C:\Users\UpdatusUser\Desktop\LcdStudio.lnk
2013-12-28 20:30 - 2013-12-28 20:30 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LcdStudio
2013-12-28 20:23 - 2013-12-28 20:23 - 00354892 _____ C:\Users\Silverlink\Downloads\Simple LCD-Font Installer.zip
2013-12-28 20:06 - 2013-12-28 20:06 - 00838250 _____ C:\Users\Silverlink\Downloads\Skype to Lcd 0.9.zip
2013-12-28 20:06 - 2012-09-23 18:03 - 02049024 _____ C:\Users\Silverlink\Desktop\Skype to Lcd 0.9.exe
2013-12-28 19:58 - 2013-12-29 00:11 - 00000000 ____D C:\Users\Silverlink\Desktop\New folder
2013-12-28 19:58 - 2013-12-28 19:58 - 00557661 _____ C:\Users\Silverlink\Downloads\G15CSS_v1.01 (1).rar
2013-12-28 19:46 - 2013-12-28 19:46 - 00557661 _____ C:\Users\Silverlink\Downloads\G15CSS_v1.01.rar
2013-12-28 18:48 - 2013-12-28 18:48 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Logitech
2013-12-28 18:43 - 2013-12-30 14:32 - 00000888 _____ C:\Windows\LkmdfCoInst.log
2013-12-28 18:41 - 2013-12-28 18:41 - 56601328 _____ (Logitech Inc.) C:\Users\Silverlink\Downloads\LGS_8.51.5_x64_Logitech.exe
2013-12-27 23:25 - 2013-12-27 23:25 - 00000000 ____D C:\Users\Silverlink\AppData\Local\BIT.TRIP RUNNER
2013-12-27 23:24 - 2013-12-27 23:24 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-12-27 23:24 - 2013-12-27 23:24 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-12-27 23:24 - 2013-12-27 23:24 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-12-27 23:24 - 2013-12-27 23:24 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-12-27 23:24 - 2013-12-27 23:24 - 00000221 _____ C:\Users\Silverlink\Desktop\BIT.TRIP RUNNER.url
2013-12-27 17:55 - 2013-12-27 17:56 - 00057318 _____ C:\Users\Silverlink\Desktop\Addition.txt
2013-12-27 17:51 - 2013-12-27 17:56 - 00069124 _____ C:\Users\Silverlink\Desktop\FRST.txt
2013-12-27 17:51 - 2013-12-27 17:51 - 00000000 ____D C:\FRST
2013-12-27 17:50 - 2013-12-27 17:50 - 01930746 _____ (Farbar) C:\Users\Silverlink\Downloads\FRST64.exe
2013-12-26 19:24 - 2013-12-26 19:24 - 03978232 _____ (SteelSeries) C:\Users\Silverlink\Downloads\SSEFix_1.25.4.1.exe
2013-12-26 01:24 - 2013-12-26 01:24 - 00000000 ____D C:\Users\Silverlink\AppData\Local\SteelSeries_ApS
2013-12-26 01:23 - 2013-12-26 01:23 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\SteelSeries
2013-12-26 01:19 - 2013-12-26 01:19 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries
2013-12-26 01:19 - 2013-12-26 01:19 - 00000000 ____D C:\ProgramData\SteelSeries
2013-12-26 01:18 - 2013-12-26 01:18 - 46074088 _____ C:\Users\Silverlink\Downloads\SteelSeriesEngine_2.8.0171.exe
2013-12-26 01:18 - 2013-12-26 01:18 - 00000000 ____D C:\Program Files\SteelSeries
2013-12-23 13:02 - 2013-12-23 14:22 - 00000000 ____D C:\Users\Silverlink\Desktop\NoScope
2013-12-23 11:33 - 2013-12-31 13:21 - 00001473 _____ C:\Windows\setupact.log
2013-12-23 11:33 - 2013-12-23 11:33 - 00000000 _____ C:\Windows\setuperr.log
2013-12-23 11:32 - 2013-12-30 13:32 - 00009852 _____ C:\Windows\PFRO.log
2013-12-18 17:38 - 2013-12-18 17:38 - 00000000 ____D C:\Users\Silverlink\AppData\Local\SoftwareUpdater
2013-12-17 21:31 - 2013-12-17 21:31 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Blizzard
2013-12-17 21:22 - 2013-12-26 00:51 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-12-17 21:22 - 2013-12-17 21:22 - 00001179 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-12-17 21:21 - 2013-12-29 21:23 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Battle.net
2013-12-17 21:21 - 2013-12-20 20:36 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-12-17 21:21 - 2013-12-17 21:31 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Battle.net
2013-12-17 21:19 - 2013-12-17 21:19 - 05933240 _____ (Blizzard Entertainment) C:\Users\Silverlink\Downloads\Hearthstone-Beta-Setup-enGB.exe
2013-12-17 14:54 - 2013-12-17 14:54 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Blizzard Entertainment
2013-12-17 13:55 - 2013-12-17 13:55 - 83293072 _____ (Blizzard Entertainment) C:\Users\Silverlink\Downloads\World-of-Warcraft-Setup-deDE.exe
2013-12-15 13:32 - 2013-12-15 13:32 - 00810938 _____ C:\Users\Silverlink\Downloads\Explosion_01 (1).mp4
2013-12-15 12:56 - 2013-12-15 12:57 - 00002264 _____ C:\Users\Silverlink\Downloads\clock-ticking-3.mp3.sfk
2013-12-14 21:04 - 2013-12-14 21:04 - 00013192 _____ C:\Users\Silverlink\Downloads\GeT RiGhT.cfg
2013-12-13 00:26 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 00:26 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 00:26 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-13 00:26 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-13 00:24 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 00:24 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 00:24 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 00:24 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 00:24 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 00:24 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 00:24 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 00:24 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 00:24 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 00:24 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 00:24 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 00:24 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 00:24 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 00:24 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 00:24 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 00:24 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 00:24 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 00:24 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 00:24 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-13 00:24 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-13 00:24 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 00:24 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 00:24 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 00:24 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-13 00:24 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 00:24 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 00:24 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 00:24 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 00:24 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-13 00:24 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 00:24 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 18:55 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 18:55 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 18:55 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 18:55 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 18:55 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 18:55 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 18:55 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 18:55 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 18:55 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 18:55 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 18:55 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-12 18:53 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 18:53 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 18:53 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 18:53 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 18:53 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 18:53 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 18:53 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 18:53 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-09 19:11 - 2013-12-09 19:11 - 00513536 _____ C:\Users\Silverlink\Downloads\Pagealicious_RocketFuelInstaller.exe
2013-12-08 14:09 - 2013-12-08 14:09 - 00000000 ____D C:\ProgramData\Oracle
2013-12-08 14:08 - 2013-12-08 14:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-08 14:05 - 2013-12-08 14:05 - 00915368 _____ (Oracle Corporation) C:\Users\Silverlink\Downloads\chromeinstall-7u45.exe
2013-12-06 14:07 - 2013-12-06 14:07 - 00102975 _____ C:\Users\Silverlink\Downloads\LOIC-1.0.7.42-binary.zip
2013-12-05 00:43 - 2013-12-05 00:43 - 00012816 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_AuroraCSGO.zip
2013-12-05 00:41 - 2013-12-05 00:41 - 00813260 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_ExFURY.zip
2013-12-05 00:40 - 2013-12-05 00:40 - 04492424 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_CSGO Wallhacked Players v2.rar
2013-12-04 00:08 - 2013-12-04 00:08 - 00023908 _____ C:\Users\Silverlink\Downloads\easy.odt
2013-12-02 10:26 - 2013-12-02 10:26 - 00000000 ____D C:\Users\Silverlink\Documents\Telltale Games
2013-12-01 16:20 - 2013-12-01 16:20 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Namco
2013-12-01 13:13 - 2013-12-01 13:13 - 01467128 _____ C:\Users\Silverlink\Downloads\SystemCheck_deDE (1).exe
==================== One Month Modified Files and Folders =======
2013-12-31 14:12 - 2013-12-31 14:12 - 00024992 _____ C:\Users\Silverlink\Downloads\FRST.txt
2013-12-31 14:11 - 2011-11-19 20:11 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Skype
2013-12-31 14:04 - 2013-12-31 14:04 - 01931302 _____ (Farbar) C:\Users\Silverlink\Downloads\FRST64 (1).exe
2013-12-31 14:04 - 2012-03-13 17:10 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-31 13:42 - 2011-11-11 16:43 - 00001140 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA.job
2013-12-31 13:42 - 2011-11-11 16:43 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core.job
2013-12-31 13:39 - 2012-04-04 13:39 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-31 13:30 - 2009-07-14 05:45 - 00020352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-31 13:30 - 2009-07-14 05:45 - 00020352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-31 13:28 - 2011-11-11 16:29 - 02020478 _____ C:\Windows\WindowsUpdate.log
2013-12-31 13:26 - 2013-10-08 11:26 - 00004190 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-12-31 13:26 - 2013-10-08 11:25 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-12-31 13:23 - 2012-01-17 21:10 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Htc
2013-12-31 13:22 - 2012-05-05 17:13 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-31 13:21 - 2013-12-23 11:33 - 00001473 _____ C:\Windows\setupact.log
2013-12-31 13:21 - 2013-05-11 11:45 - 00000424 _____ C:\Windows\Tasks\PC Optimizer Pro64 startups.job
2013-12-31 13:21 - 2012-12-25 20:32 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-31 13:21 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-31 03:26 - 2012-07-22 12:16 - 00000948 _____ C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA.job
2013-12-31 03:13 - 2012-05-05 17:13 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-31 01:03 - 2013-12-31 01:03 - 00007095 _____ C:\Users\Silverlink\.recently-used.xbel
2013-12-31 01:03 - 2011-11-13 16:49 - 00000000 ____D C:\Users\Silverlink\.gimp-2.6
2013-12-31 01:03 - 2011-11-11 16:29 - 00000000 ____D C:\Users\Silverlink
2013-12-30 23:24 - 2013-01-10 17:36 - 00000000 ____D C:\Users\Silverlink\AppData\Local\CrashDumps
2013-12-30 21:01 - 2012-01-11 17:30 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-12-30 16:55 - 2013-12-30 16:55 - 00000222 _____ C:\Users\Silverlink\Desktop\Starbound.url
2013-12-30 14:32 - 2013-12-30 14:31 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2013-12-30 14:32 - 2013-12-28 18:43 - 00000888 _____ C:\Windows\LkmdfCoInst.log
2013-12-30 14:29 - 2013-12-30 14:28 - 56601328 _____ (Logitech Inc.) C:\Users\Silverlink\Downloads\LGS_8.51.5_x64_Logitech (1).exe
2013-12-30 14:29 - 2011-12-22 20:01 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2013-12-30 13:52 - 2013-12-29 00:12 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-30 13:51 - 2013-12-29 00:11 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-30 13:35 - 2011-11-12 20:19 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Adobe
2013-12-30 13:32 - 2013-12-23 11:32 - 00009852 _____ C:\Windows\PFRO.log
2013-12-30 13:25 - 2005-07-23 19:26 - 00000000 _RSHD C:\Windows\SysWOW64\install
2013-12-30 13:21 - 2012-07-22 12:16 - 00000896 _____ C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core.job
2013-12-29 21:23 - 2013-12-17 21:21 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Battle.net
2013-12-29 00:12 - 2013-12-29 00:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-29 00:11 - 2013-12-28 19:58 - 00000000 ____D C:\Users\Silverlink\Desktop\New folder
2013-12-28 20:46 - 2011-11-21 17:49 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\TS3Client
2013-12-28 20:34 - 2013-12-28 20:30 - 00000000 ____D C:\Program Files (x86)\LcdStudio
2013-12-28 20:34 - 2011-11-13 14:03 - 00000000 ___RD C:\Users\Silverlink\Desktop\Programme
2013-12-28 20:31 - 2013-12-28 20:31 - 00000995 _____ C:\Users\Silverlink\Desktop\License.xml
2013-12-28 20:30 - 2013-12-28 20:30 - 05012258 _____ C:\Users\Silverlink\Downloads\LcdStudio_806_setup.exe
2013-12-28 20:30 - 2013-12-28 20:30 - 00001015 _____ C:\Users\UpdatusUser\Desktop\LcdStudio.lnk
2013-12-28 20:30 - 2013-12-28 20:30 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LcdStudio
2013-12-28 20:23 - 2013-12-28 20:23 - 00354892 _____ C:\Users\Silverlink\Downloads\Simple LCD-Font Installer.zip
2013-12-28 20:06 - 2013-12-28 20:06 - 00838250 _____ C:\Users\Silverlink\Downloads\Skype to Lcd 0.9.zip
2013-12-28 19:58 - 2013-12-28 19:58 - 00557661 _____ C:\Users\Silverlink\Downloads\G15CSS_v1.01 (1).rar
2013-12-28 19:46 - 2013-12-28 19:46 - 00557661 _____ C:\Users\Silverlink\Downloads\G15CSS_v1.01.rar
2013-12-28 18:49 - 2011-11-11 16:30 - 00000000 ___RD C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-28 18:48 - 2013-12-28 18:48 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Logitech
2013-12-28 18:42 - 2011-12-22 20:00 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Logishrd
2013-12-28 18:41 - 2013-12-28 18:41 - 56601328 _____ (Logitech Inc.) C:\Users\Silverlink\Downloads\LGS_8.51.5_x64_Logitech.exe
2013-12-27 23:25 - 2013-12-27 23:25 - 00000000 ____D C:\Users\Silverlink\AppData\Local\BIT.TRIP RUNNER
2013-12-27 23:24 - 2013-12-27 23:24 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-12-27 23:24 - 2013-12-27 23:24 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-12-27 23:24 - 2013-12-27 23:24 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-12-27 23:24 - 2013-12-27 23:24 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-12-27 23:24 - 2013-12-27 23:24 - 00000221 _____ C:\Users\Silverlink\Desktop\BIT.TRIP RUNNER.url
2013-12-27 23:24 - 2012-07-10 17:59 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-12-27 23:24 - 2012-07-10 17:59 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-12-27 23:24 - 2011-12-30 18:35 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-12-27 17:56 - 2013-12-27 17:55 - 00057318 _____ C:\Users\Silverlink\Desktop\Addition.txt
2013-12-27 17:56 - 2013-12-27 17:51 - 00069124 _____ C:\Users\Silverlink\Desktop\FRST.txt
2013-12-27 17:51 - 2013-12-27 17:51 - 00000000 ____D C:\FRST
2013-12-27 17:50 - 2013-12-27 17:50 - 01930746 _____ (Farbar) C:\Users\Silverlink\Downloads\FRST64.exe
2013-12-26 19:24 - 2013-12-26 19:24 - 03978232 _____ (SteelSeries) C:\Users\Silverlink\Downloads\SSEFix_1.25.4.1.exe
2013-12-26 14:36 - 2013-10-08 11:17 - 00000000 ____D C:\Program Files (x86)\Plus-HD-3.8
2013-12-26 01:24 - 2013-12-26 01:24 - 00000000 ____D C:\Users\Silverlink\AppData\Local\SteelSeries_ApS
2013-12-26 01:23 - 2013-12-26 01:23 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\SteelSeries
2013-12-26 01:19 - 2013-12-26 01:19 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SteelSeries
2013-12-26 01:19 - 2013-12-26 01:19 - 00000000 ____D C:\ProgramData\SteelSeries
2013-12-26 01:18 - 2013-12-26 01:18 - 46074088 _____ C:\Users\Silverlink\Downloads\SteelSeriesEngine_2.8.0171.exe
2013-12-26 01:18 - 2013-12-26 01:18 - 00000000 ____D C:\Program Files\SteelSeries
2013-12-26 00:51 - 2013-12-17 21:22 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-12-25 12:30 - 2011-11-13 17:07 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\gtk-2.0
2013-12-24 19:46 - 2011-11-11 18:29 - 00739622 _____ C:\Windows\system32\perfh015.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00713320 _____ C:\Windows\system32\prfh0416.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00690210 _____ C:\Windows\system32\perfh00C.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00683782 _____ C:\Windows\system32\perfh00E.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00607978 _____ C:\Windows\system32\perfh008.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00492860 _____ C:\Windows\system32\perfh014.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00477724 _____ C:\Windows\system32\perfh001.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00176122 _____ C:\Windows\system32\perfc00E.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00160194 _____ C:\Windows\system32\perfc015.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00151600 _____ C:\Windows\system32\prfc0416.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00133886 _____ C:\Windows\system32\perfc00C.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00115822 _____ C:\Windows\system32\perfc008.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00098682 _____ C:\Windows\system32\perfc014.dat
2013-12-24 19:46 - 2011-11-11 18:29 - 00097896 _____ C:\Windows\system32\perfc001.dat
2013-12-24 19:46 - 2011-11-11 17:15 - 00480322 _____ C:\Windows\system32\perfh00B.dat
2013-12-24 19:46 - 2011-11-11 17:15 - 00105320 _____ C:\Windows\system32\perfc00B.dat
2013-12-24 19:46 - 2009-07-14 06:13 - 06709608 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-23 23:05 - 2013-10-03 22:38 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\.minecraft
2013-12-23 20:53 - 2012-12-07 13:58 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Spotify
2013-12-23 17:03 - 2012-12-07 13:58 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Spotify
2013-12-23 14:22 - 2013-12-23 13:02 - 00000000 ____D C:\Users\Silverlink\Desktop\NoScope
2013-12-23 11:33 - 2013-12-23 11:33 - 00000000 _____ C:\Windows\setuperr.log
2013-12-22 16:40 - 2012-06-18 16:00 - 00000000 ____D C:\ProgramData\Origin
2013-12-22 16:40 - 2012-06-18 15:58 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Origin
2013-12-22 16:40 - 2012-06-06 18:53 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-22 16:37 - 2012-06-15 14:54 - 00000000 ____D C:\Users\Silverlink\AppData\Local\LogMeIn Hamachi
2013-12-22 16:34 - 2011-11-22 18:07 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-12-22 16:32 - 2012-03-03 21:17 - 00000000 ____D C:\Program Files (x86)\Free FLV Converter
2013-12-22 16:31 - 2013-06-08 10:38 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2013-12-22 16:31 - 2013-06-08 10:30 - 00000000 ____D C:\Program Files (x86)\FL Studio 10
2013-12-22 16:30 - 2013-04-12 15:50 - 00000000 ____D C:\Program Files (x86)\Vstplugins
2013-12-22 16:29 - 2013-08-19 19:08 - 00000000 ____D C:\AeriaGames
2013-12-22 16:29 - 2012-01-31 14:06 - 00000000 ____D C:\Program Files\EslWire
2013-12-22 16:22 - 2012-06-18 16:01 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-22 16:16 - 2011-12-27 17:58 - 00000000 ____D C:\Program Files (x86)\Cinema 4D R12
2013-12-22 16:11 - 2012-07-20 14:39 - 00000000 ____D C:\Program Files (x86)\Call Graph
2013-12-22 16:10 - 2012-03-28 19:11 - 00000000 ____D C:\Program Files (x86)\Black Tomato Mod
2013-12-22 16:10 - 2011-12-13 16:16 - 00000000 ____D C:\Users\Silverlink\Documents\Battlefield Heroes
2013-12-22 16:06 - 2012-06-06 16:43 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-12-22 16:06 - 2009-07-14 08:46 - 00000000 ____D C:\Windows\ShellNew
2013-12-22 13:25 - 2011-12-11 22:28 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\DAEMON Tools Lite
2013-12-22 13:24 - 2012-02-25 18:09 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\uTorrent
2013-12-22 13:24 - 2011-11-17 15:08 - 00000000 ____D C:\Windows\Minidump
2013-12-22 13:24 - 2011-11-12 01:17 - 00000000 ____D C:\Windows\Panther
2013-12-20 20:36 - 2013-12-17 21:21 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-12-19 16:36 - 2012-06-29 16:51 - 00000000 ____D C:\Users\Silverlink\Documents\RPGVXAce
2013-12-19 16:36 - 2012-06-25 19:12 - 00000000 ____D C:\Users\Silverlink\Documents\RPGXP
2013-12-19 16:36 - 2011-11-11 21:11 - 00000000 ____D C:\Users\Silverlink\Documents\RPGVX
2013-12-19 16:35 - 2011-11-11 20:39 - 00000000 ___RD C:\Users\Silverlink\Desktop\Games
2013-12-18 17:38 - 2013-12-18 17:38 - 00000000 ____D C:\Users\Silverlink\AppData\Local\SoftwareUpdater
2013-12-17 21:31 - 2013-12-17 21:31 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Blizzard
2013-12-17 21:31 - 2013-12-17 21:21 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Battle.net
2013-12-17 21:22 - 2013-12-17 21:22 - 00001179 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-12-17 21:19 - 2013-12-17 21:19 - 05933240 _____ (Blizzard Entertainment) C:\Users\Silverlink\Downloads\Hearthstone-Beta-Setup-enGB.exe
2013-12-17 14:54 - 2013-12-17 14:54 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Blizzard Entertainment
2013-12-17 13:55 - 2013-12-17 13:55 - 83293072 _____ (Blizzard Entertainment) C:\Users\Silverlink\Downloads\World-of-Warcraft-Setup-deDE.exe
2013-12-17 11:56 - 2013-08-08 14:59 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-17 11:56 - 2013-08-08 14:57 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-17 11:56 - 2013-08-08 14:57 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-17 11:48 - 2009-07-14 06:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-16 16:50 - 2012-10-02 15:18 - 00000000 ____D C:\Users\Silverlink\AppData\Roaming\Awesomium
2013-12-15 21:00 - 2013-08-14 22:58 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 19:14 - 2012-05-05 17:13 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-15 18:57 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-15 13:32 - 2013-12-15 13:32 - 00810938 _____ C:\Users\Silverlink\Downloads\Explosion_01 (1).mp4
2013-12-15 12:57 - 2013-12-15 12:56 - 00002264 _____ C:\Users\Silverlink\Downloads\clock-ticking-3.mp3.sfk
2013-12-14 21:04 - 2013-12-14 21:04 - 00013192 _____ C:\Users\Silverlink\Downloads\GeT RiGhT.cfg
2013-12-14 01:20 - 2011-11-11 17:25 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 08:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-13 07:51 - 2009-07-14 05:45 - 05020144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\th-TH
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sr-Latn-CS
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sl-SI
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sk-SK
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ro-RO
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\th-TH
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sl-SI
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sk-SK
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ro-RO
2013-12-13 07:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ar-SA
2013-12-13 00:26 - 2012-02-01 17:56 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 13:39 - 2012-04-04 13:39 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 13:39 - 2012-04-04 13:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 13:39 - 2011-11-14 09:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-09 19:11 - 2013-12-09 19:11 - 00513536 _____ C:\Users\Silverlink\Downloads\Pagealicious_RocketFuelInstaller.exe
2013-12-08 14:09 - 2013-12-08 14:09 - 00000000 ____D C:\ProgramData\Oracle
2013-12-08 14:08 - 2013-12-08 14:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-08 14:08 - 2012-09-05 14:26 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-08 14:08 - 2012-09-05 14:25 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-08 14:08 - 2012-09-05 14:25 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-08 14:05 - 2013-12-08 14:05 - 00915368 _____ (Oracle Corporation) C:\Users\Silverlink\Downloads\chromeinstall-7u45.exe
2013-12-06 14:07 - 2013-12-06 14:07 - 00102975 _____ C:\Users\Silverlink\Downloads\LOIC-1.0.7.42-binary.zip
2013-12-05 23:08 - 2012-05-05 17:13 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-05 23:08 - 2012-05-05 17:13 - 00003862 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-05 00:43 - 2013-12-05 00:43 - 00012816 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_AuroraCSGO.zip
2013-12-05 00:41 - 2013-12-05 00:41 - 00813260 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_ExFURY.zip
2013-12-05 00:40 - 2013-12-05 00:40 - 04492424 _____ C:\Users\Silverlink\Downloads\[www.OldSchoolHack.de]_CSGO Wallhacked Players v2.rar
2013-12-04 16:51 - 2012-10-10 12:54 - 00000002 _____ C:\Windows\system32\HRUPPROG.TXT
2013-12-04 00:08 - 2013-12-04 00:08 - 00023908 _____ C:\Users\Silverlink\Downloads\easy.odt
2013-12-03 13:37 - 2011-11-11 16:43 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000UA
2013-12-03 13:37 - 2011-11-11 16:43 - 00003724 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-456170774-212283225-42997956-1000Core
2013-12-02 10:26 - 2013-12-02 10:26 - 00000000 ____D C:\Users\Silverlink\Documents\Telltale Games
2013-12-01 16:20 - 2013-12-01 16:20 - 00000000 ____D C:\Users\Silverlink\AppData\Local\Namco
2013-12-01 13:13 - 2013-12-01 13:13 - 01467128 _____ C:\Users\Silverlink\Downloads\SystemCheck_deDE (1).exe
2013-12-01 11:00 - 2011-11-19 20:11 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-01 11:00 - 2011-11-19 20:11 - 00000000 ____D C:\ProgramData\Skype
Some content of TEMP:
====================
C:\Users\Silverlink\AppData\Local\Temp\avgnt.exe
C:\Users\Silverlink\AppData\Local\Temp\i4jdel0.exe
C:\Users\Silverlink\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Silverlink\AppData\Local\Temp\sfareca00001.dll
C:\Users\Silverlink\AppData\Local\Temp\x2blapi.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-31 13:42
==================== End Of Log ============================
|
|
01.01.2014, 13:08
| #9 |
| /// the machine /// TB-Ausbilder | BOO/TDss.O & Parameter Name: Value Gut. Da ist aber noch mehr Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.01.2014, 17:45
| #10 |
| | BOO/TDss.O & Parameter Name: Value Anti-Malware Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2014.01.05.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Silverlink :: DARKNESS [administrator] 05.01.2014 17:26:24 mbam-log-2014-01-05 (17-26-24).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 254132 Time elapsed: 11 minute(s), 24 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 8 HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully. HKCR\CLSID\{3c98be86-cf79-4484-a2b2-dfe1ee126592} (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. HKCR\TypeLib\{2690da64-4be2-4afa-b159-af0e41f23b6e} (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. HKCR\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687} (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{327b0f8c-49d9-466c-a8ab-0c30310a3ad0}_is1 (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 8 C:\Program Files (x86)\HomeTab (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\chrome (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\chrome (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\components (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\plugins (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeTab (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8 (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. Files Detected: 45 C:\Users\Silverlink\AppData\Roaming\HomeTab\HomeTab.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Windows\Launcher.exe (PUP.Optional.Simplytech) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\Microsoft.Win32.TaskScheduler.xml (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\cinshlpr.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\hometab_icon.ico (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\InstallHelper.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\Interop.IWshRuntimeLibrary.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\Microsoft.Win32.TaskScheduler.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\ProtectedSearch.exe (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\ProtectedSearch.ico (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\STInst64.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\STInst64.exe (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\System.Data.SQLite.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\TaskSchedulerCreator.exe (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\TBUpdater.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\ToolbarUninstall.exe (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\unins000.dat (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\unins000.exe (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\chrome.manifest (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\install.js (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\install.rdf (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\pop.htm (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\chrome\HomeTab_6787.jar (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\components\wtb_complete.js (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\HomeTab\support@HomeTab.com\plugins\npwiddit.dll (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeTab\Protected Search Settings.lnk (PUP.Optional.HomeTab.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\39030.crx (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\39030.xpi (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\background.html (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Installer.log (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bg.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil.dll (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil64.dll (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil64.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-chromeinstaller.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-firefoxinstaller.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-helper.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8.ico (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\Uninstall.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. C:\Program Files (x86)\Plus-HD-3.8\utils.exe (PUP.Optional.PlusHD.A) -> Quarantined and deleted successfully. (end) Adware AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.016 - Report created 05/01/2014 at 17:47:40
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Silverlink - DARKNESS
# Running from : C:\Users\Silverlink\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : SystemStoreService
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\DeviceVM
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\Program Files (x86)\1ClickDownload
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Program Files (x86)\SoftwareUpdater
Folder Deleted : C:\Users\Silverlink\AppData\Local\Software_Updater
Folder Deleted : C:\Users\Silverlink\AppData\Local\SoftwareUpdater
Folder Deleted : C:\Users\Silverlink\AppData\LocalLow\HomeTab
Folder Deleted : C:\Users\Silverlink\AppData\LocalLow\SimplyTech
Folder Deleted : C:\Users\Silverlink\AppData\Roaming\DeviceVM
Folder Deleted : C:\Users\Silverlink\AppData\Roaming\HomeTab
Folder Deleted : C:\Users\Silverlink\AppData\Roaming\iSafe
Folder Deleted : C:\Users\Silverlink\AppData\Roaming\Windows Net Data
Folder Deleted : C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{800B5000-A755-47E1-992B-48A1C1357F07}
Folder Deleted : C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\Extensions\{ad7ef860-f366-4be1-8d12-4363b9356947}
File Deleted : C:\Users\Silverlink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
File Deleted : C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\searchplugins\conduit-search.xml
File Deleted : C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Deleted : C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage-journal
File Deleted : C:\Windows\System32\Tasks\Browser Updater
File Deleted : C:\Windows\System32\Tasks\ProtectedSearch
File Deleted : C:\Windows\System32\Tasks\Software Updater Ui
File Deleted : C:\Windows\System32\Tasks\Software Updater
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchProtectINT_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GOGPACKREUS_is1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
[#] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A25E7121-3DD8-41B3-855B-756C5BC45449}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A25E7121-3DD8-41B3-855B-756C5BC45449}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Ciuvo
Key Deleted : HKCU\Software\OCS
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\SearchProtectINT
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\PIP
Key Deleted : [x64] HKLM\SOFTWARE\systweak
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16428
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]
-\\ Mozilla Firefox v24.0 (de)
[ File : C:\Users\Silverlink\AppData\Roaming\Mozilla\Firefox\Profiles\rlpful62.default\prefs.js ]
Line Deleted : user_pref("icqtoolbar.skip_default_search", "yes");
-\\ Google Chrome v31.0.1650.63
[ File : C:\Users\Silverlink\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [7841 octets] - [05/01/2014 17:46:25]
AdwCleaner[S0].txt - [6645 octets] - [05/01/2014 17:47:40]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6705 octets] ##########
Junkware removal Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 7 Ultimate x64
Ran by Silverlink on 05.01.2014 at 18:18:50,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\plus-hd-3.8
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\Silverlink\AppData\Roaming\mozilla\firefox\profiles\rlpful62.default\minidumps [20 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.01.2014 at 18:26:23,80
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Geändert von DontBePotato (05.01.2014 um 18:27 Uhr) |
|
06.01.2014, 16:12
| #11 |
| /// the machine /// TB-Ausbilder | BOO/TDss.O & Parameter Name: ValueESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu BOO/TDss.O & Parameter Name: Value |
| backdoor.agent.pgen, backdoor.trace, bifrose.trace, boo tdss.o masterboot value out, boo/tdss.o, erscheint, fehlermeldung, folgende, hijack.searchpage, meldung, passieren, programm, pup.optional.hometab.a, pup.optional.iminent.a, pup.optional.plushd.a, pup.optional.simplytech, trojan.downloader, ultimate, unendlich, weiterhelfen |
Linear-Darstellung
