|
Plagegeister aller Art und deren Bekämpfung: Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
04.01.2014, 04:40 | #1 |
| Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ Hallo, Seit ca 3 Tagen öffnet sich hin und wieder im Firefox ein neuer Tab mit der URL die im Titel steht. Ich habe hier auf dem Board auch schon ähnliche Probleme gesehen. Meins unterscheidet sich aber, zum Beispiel wie beim User "Pfannkuchen" sind bei mir keine Wörter auf Webseiten grün hervorgehoben oder unterstrichen. Die URL unterscheidet sich auch etwas. 2 Mal erschien jedoch nicht diese Seite, sondern eine Werbung für Star Wars: The old Republic. Ich weiß auch nicht wodurch das ausgelöst wird. Erst dachte ich, es wäre irgendwelche aggro Werbung, die ein neuen Tab öffnet sobald man mit dem Cursor drüber fährt. Ich kann auch lange surfen ohne dass irgendwas passiert. Heute hatte ich es 2 mal bei "surrenderat20" und bei "mmochampion"(Spielseiten). Ich kann auf den Seiten aber auch surfen und es passiert gar nichts. Im nächsten Post poste ich schonmal die FRST-Logs. Danke schonmal für eure Hilfe. FRST-Log FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014 Ran by FakeXero (administrator) on FAKEXERO-PC on 04-01-2014 03:58:37 Running from C:\Users\FakeXero\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Xfire Inc.) C:\Program Files (x86)\Xfire\Xfire.exe () C:\Program Files (x86)\Xfire\xfire64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe () C:\Program Files (x86)\Xfire\xfire64.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\LoLLauncher.exe () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.64\deploy\LolClient.exe (techPowerUp (www.techpowerup.com)) C:\Program Files (x86)\GPU-Z\GPU-Z.exe () C:\Program Files (x86)\CoreTemp\Core Temp.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKCU\...\Run: [DisplayFusion] - C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7892864 2013-09-02] (Binary Fortress Software) HKCU\...\Run: [Google Update] - C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-12] (Google Inc.) MountPoints2: {75fcea1b-18ae-11e3-b22b-806e6f6e6963} - D:\autorun.exe Startup: C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2963BC669DADCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default FF Homepage: https://www.google.de/ FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20((url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*'))%20%7B%20return%20'PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D" FF NetworkProxy: "type", 2 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ProxMate - Proxy on steroids! - C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi Chrome: ======= CHR RestoreOnStartup: "hxxp://www.twitch.tv/directory/following/live" CHR Extension: (Google Docs) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Twitch.tv Europe Lag Fix) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoehmlkhjgaboegkondkciclminpjof\2.0_0 CHR Extension: (Google Wallet) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (Gmail) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-12] (Avira Operations GmbH & Co. KG) S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88424 2013-10-10] (Perfect World Entertainment Inc) R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1315728 2013-09-02] (Binary Fortress Software) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-24] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG) R3 HabuFltr; C:\Windows\System32\drivers\habu.sys [13696 2006-10-26] (Razer (Asia-Pacific) Pte Ltd) R3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-08] (Guillemot Corporation) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] () R3 ALSysIO; \??\C:\Users\FakeXero\AppData\Local\Temp\ALSysIO64.sys [x] R3 GPU-Z; \??\C:\Users\FakeXero\AppData\Local\Temp\GPU-Z.sys [x] S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-04 03:58 - 2014-01-04 03:59 - 00014026 _____ C:\Users\FakeXero\Desktop\FRST.txt 2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST 2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe 2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-04 00:13 - 2014-01-04 00:13 - 23867560 _____ (Mozilla) C:\Users\FakeXero\Downloads\Firefox_Setup_26.0.exe 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2 2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD 2014-01-03 19:09 - 2014-01-03 23:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2 2014-01-03 06:16 - 2014-01-03 19:00 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url 2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url 2013-12-31 16:50 - 2013-12-31 16:55 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4 2013-12-31 16:41 - 2013-12-31 16:48 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4 2013-12-31 16:34 - 2013-12-31 16:41 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4 2013-12-31 15:50 - 2013-12-31 15:59 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4 2013-12-31 15:41 - 2013-12-31 15:50 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4 2013-12-31 15:33 - 2013-12-31 15:41 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4 2013-12-31 15:19 - 2013-12-31 15:27 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4 2013-12-31 14:52 - 2013-12-31 14:56 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4 2013-12-31 14:39 - 2013-12-31 14:43 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4 2013-12-31 14:34 - 2013-12-31 14:37 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4 2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice 2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url 2013-12-26 21:00 - 2013-12-26 23:11 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013] 2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url 2013-12-25 11:00 - 2013-12-26 13:25 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log 2013-12-24 22:51 - 2013-12-24 22:53 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4 2013-12-24 21:56 - 2013-12-24 21:58 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4 2013-12-24 21:46 - 2013-12-24 21:47 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4 2013-12-24 21:40 - 2013-12-24 21:42 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4 2013-12-24 21:37 - 2013-12-24 21:39 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4 2013-12-24 21:35 - 2013-12-24 21:37 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4 2013-12-24 21:31 - 2013-12-24 21:33 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4 2013-12-24 21:29 - 2013-12-24 21:31 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4 2013-12-24 21:27 - 2013-12-24 21:29 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4 2013-12-22 07:51 - 2013-12-22 07:55 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods 2013-12-21 21:09 - 2013-12-22 07:21 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit 2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url 2013-12-20 14:50 - 2013-12-20 14:52 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4 2013-12-20 14:46 - 2013-12-20 14:50 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4 2013-12-20 14:43 - 2013-12-20 14:46 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4 2013-12-20 14:33 - 2013-12-20 14:35 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4 2013-12-20 14:28 - 2013-12-20 14:31 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4 2013-12-20 14:25 - 2013-12-20 14:28 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4 2013-12-17 14:10 - 2013-12-17 14:13 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi 2013-12-17 14:10 - 2013-12-17 14:13 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi 2013-12-17 14:07 - 2013-12-17 14:09 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi 2013-12-17 14:07 - 2013-12-17 14:09 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi 2013-12-17 13:21 - 2013-12-17 13:25 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi 2013-12-17 13:20 - 2013-12-17 13:25 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi 2013-12-17 13:20 - 2013-12-17 13:24 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi 2013-12-17 12:59 - 2013-12-17 13:00 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi 2013-12-17 12:55 - 2013-12-17 12:57 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi 2013-12-16 12:28 - 2013-12-16 12:30 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi 2013-12-16 12:25 - 2013-12-16 12:28 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi 2013-12-16 12:22 - 2013-12-16 12:24 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi 2013-12-16 12:19 - 2013-12-16 12:21 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi 2013-12-16 12:16 - 2013-12-16 12:18 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi 2013-12-16 12:14 - 2013-12-16 12:16 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi 2013-12-16 12:11 - 2013-12-16 12:13 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi 2013-12-16 12:09 - 2013-12-16 12:11 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi 2013-12-16 12:06 - 2013-12-16 12:08 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi 2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV 2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz 2013-12-11 03:01 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 03:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 03:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 03:01 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 03:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 03:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 03:01 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 03:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 03:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 03:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 03:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 03:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 03:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 03:01 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 03:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 03:01 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 03:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 03:01 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 03:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 03:01 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 03:01 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 03:01 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 03:01 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 03:01 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 03:01 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 03:01 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 03:01 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 03:01 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 03:01 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 03:01 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 03:01 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss 2013-12-11 00:40 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 00:40 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 00:40 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 00:35 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 00:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 00:35 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 00:35 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 00:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 00:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 00:35 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 00:35 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 00:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 00:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 00:35 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 00:35 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-10 18:51 - 2013-12-10 18:53 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4 2013-12-10 18:49 - 2013-12-10 18:51 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4 2013-12-10 18:38 - 2013-12-10 18:49 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4 2013-12-10 18:30 - 2013-12-10 18:42 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4 2013-12-10 17:52 - 2013-12-10 17:54 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4 2013-12-10 17:44 - 2013-12-10 17:55 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4 2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-12-10 17:25 - 2013-12-10 17:30 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4 2013-12-10 17:04 - 2013-12-10 17:06 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4 2013-12-10 17:03 - 2013-12-10 20:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium 2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk 2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk 2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios 2013-12-10 01:01 - 2013-12-10 01:07 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe 2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url ==================== One Month Modified Files and Folders ======= 2014-01-04 03:59 - 2014-01-04 03:58 - 00014026 _____ C:\Users\FakeXero\Desktop\FRST.txt 2014-01-04 03:59 - 2013-09-08 21:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\NetSpeedMonitor 2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST 2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe 2014-01-04 03:49 - 2013-09-08 18:52 - 01389738 _____ C:\Windows\WindowsUpdate.log 2014-01-04 03:44 - 2013-11-12 23:28 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA.job 2014-01-04 03:39 - 2013-09-17 21:43 - 00000000 ____D C:\Users\FakeXero\AppData\Local\PMB Files 2014-01-04 02:44 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-04 02:44 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-04 01:07 - 2013-11-26 03:52 - 00000403 _____ C:\Users\FakeXero\Desktop\To Do.txt 2014-01-04 00:34 - 2013-09-17 21:43 - 00000000 ____D C:\ProgramData\PMB Files 2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-04 00:13 - 2014-01-04 00:13 - 23867560 _____ (Mozilla) C:\Users\FakeXero\Downloads\Firefox_Setup_26.0.exe 2014-01-04 00:13 - 2013-09-09 00:30 - 00000000 ____D C:\Program Files (x86)\Steam 2014-01-04 00:13 - 2013-09-08 22:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\TS3Client 2014-01-03 23:07 - 2014-01-03 19:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2 2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD 2014-01-03 19:00 - 2014-01-03 06:16 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url 2014-01-03 10:44 - 2013-11-12 23:28 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core.job 2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url 2014-01-03 06:16 - 2013-09-09 15:00 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url 2014-01-02 18:00 - 2013-09-08 18:52 - 00000000 ____D C:\Users\FakeXero 2014-01-02 17:58 - 2013-09-08 19:44 - 00000000 ____D C:\Windows\Panther 2014-01-02 10:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-02 08:06 - 2013-09-09 10:26 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Xfire 2014-01-01 05:13 - 2013-09-13 14:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\InfiniteCrisis 2014-01-01 05:06 - 2013-09-09 09:14 - 00000000 ____D C:\Program Files (x86)\InfiniteCrisis 2013-12-31 17:27 - 2013-09-09 09:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\vlc 2013-12-31 16:55 - 2013-12-31 16:50 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4 2013-12-31 16:48 - 2013-12-31 16:41 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4 2013-12-31 16:41 - 2013-12-31 16:34 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4 2013-12-31 15:59 - 2013-12-31 15:50 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4 2013-12-31 15:50 - 2013-12-31 15:41 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4 2013-12-31 15:41 - 2013-12-31 15:33 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4 2013-12-31 15:27 - 2013-12-31 15:19 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4 2013-12-31 14:56 - 2013-12-31 14:52 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4 2013-12-31 14:43 - 2013-12-31 14:39 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4 2013-12-31 14:37 - 2013-12-31 14:34 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4 2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice 2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url 2013-12-26 23:11 - 2013-12-26 21:00 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013] 2013-12-26 13:25 - 2013-12-25 11:00 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log 2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url 2013-12-24 22:53 - 2013-12-24 22:51 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4 2013-12-24 21:58 - 2013-12-24 21:56 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4 2013-12-24 21:47 - 2013-12-24 21:46 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4 2013-12-24 21:42 - 2013-12-24 21:40 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4 2013-12-24 21:39 - 2013-12-24 21:37 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4 2013-12-24 21:37 - 2013-12-24 21:35 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4 2013-12-24 21:33 - 2013-12-24 21:31 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4 2013-12-24 21:31 - 2013-12-24 21:29 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4 2013-12-24 21:29 - 2013-12-24 21:27 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4 2013-12-23 22:30 - 2013-12-03 19:12 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Battle.net 2013-12-22 07:55 - 2013-12-22 07:51 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods 2013-12-22 07:21 - 2013-12-21 21:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit 2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url 2013-12-21 12:35 - 2013-12-03 19:15 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2013-12-21 12:24 - 2013-12-03 19:12 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-12-20 14:52 - 2013-12-20 14:50 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4 2013-12-20 14:50 - 2013-12-20 14:46 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4 2013-12-20 14:46 - 2013-12-20 14:43 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4 2013-12-20 14:35 - 2013-12-20 14:33 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4 2013-12-20 14:31 - 2013-12-20 14:28 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4 2013-12-20 14:28 - 2013-12-20 14:25 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4 2013-12-18 17:57 - 2013-09-09 10:26 - 00000000 ____D C:\ProgramData\Xfire 2013-12-17 14:13 - 2013-12-17 14:10 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi 2013-12-17 14:13 - 2013-12-17 14:10 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi 2013-12-17 14:09 - 2013-12-17 14:07 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi 2013-12-17 14:09 - 2013-12-17 14:07 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi 2013-12-17 13:25 - 2013-12-17 13:21 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi 2013-12-17 13:25 - 2013-12-17 13:20 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi 2013-12-17 13:24 - 2013-12-17 13:20 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi 2013-12-17 13:00 - 2013-12-17 12:59 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi 2013-12-17 12:57 - 2013-12-17 12:55 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi 2013-12-16 12:30 - 2013-12-16 12:28 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi 2013-12-16 12:28 - 2013-12-16 12:25 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi 2013-12-16 12:24 - 2013-12-16 12:22 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi 2013-12-16 12:21 - 2013-12-16 12:19 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi 2013-12-16 12:18 - 2013-12-16 12:16 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi 2013-12-16 12:16 - 2013-12-16 12:14 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi 2013-12-16 12:13 - 2013-12-16 12:11 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi 2013-12-16 12:11 - 2013-12-16 12:09 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi 2013-12-16 12:08 - 2013-12-16 12:06 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi 2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV 2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2013-12-12 12:48 - 2013-09-08 21:56 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-12 12:48 - 2013-09-08 21:55 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-12 12:48 - 2013-09-08 21:55 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz 2013-12-11 08:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-11 04:26 - 2009-07-14 18:58 - 00698688 _____ C:\Windows\system32\perfh007.dat 2013-12-11 04:26 - 2009-07-14 18:58 - 00148828 _____ C:\Windows\system32\perfc007.dat 2013-12-11 04:26 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-11 04:19 - 2009-07-14 05:45 - 00293320 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss 2013-12-10 20:35 - 2013-12-10 17:03 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium 2013-12-10 18:53 - 2013-12-10 18:51 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4 2013-12-10 18:51 - 2013-12-10 18:49 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4 2013-12-10 18:49 - 2013-12-10 18:38 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4 2013-12-10 18:42 - 2013-12-10 18:30 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4 2013-12-10 17:55 - 2013-12-10 17:44 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4 2013-12-10 17:54 - 2013-12-10 17:52 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4 2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-12-10 17:30 - 2013-12-10 17:25 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4 2013-12-10 17:06 - 2013-12-10 17:04 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4 2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-10 16:59 - 2013-09-08 21:23 - 01591896 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk 2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk 2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios 2013-12-10 01:07 - 2013-12-10 01:01 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe 2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url 2013-12-06 10:39 - 2013-11-12 23:28 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA 2013-12-06 10:39 - 2013-11-12 23:28 - 00003712 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core 2013-12-05 18:01 - 2013-11-22 02:59 - 00000000 ____D C:\Users\FakeXero\Downloads\ReferatZeugz Some content of TEMP: ==================== C:\Users\FakeXero\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-03 06:58 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Und hier das Addition-Logfile Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-01-2014 Ran by FakeXero at 2014-01-04 04:00:05 Running from C:\Users\FakeXero\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94 - Adobe Systems Incorporated) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated) AION Free-to-Play (x32 Version: - Gameforge) AMD Accelerated Video Transcoding (Version: 12.10.100.30328 - Advanced Micro Devices, Inc.) Hidden AMD Catalyst Install Manager (Version: 8.0.911.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Media Foundation Decoders (Version: 1.0.80328.2204 - Advanced Micro Devices, Inc.) Hidden AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden Arc (x32 Version: 1.0.0.5510 - Perfect World Entertainment) Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) Bastion (x32 Version: - Supergiant Games) Batman: Arkham City GOTY (x32 Version: - Rocksteady Studios) Battle.net (x32 Version: - Blizzard Entertainment) Borderlands 2 (x32 Version: - Gearbox Software) Call of Duty: Black Ops II - Multiplayer (x32 Version: - ) Call of Duty: Black Ops II - Zombies (x32 Version: - ) Call of Duty: Black Ops II (x32 Version: - Treyarch) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center (x32 Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.05 - Piriform) Command and Conquer 4: Tiberian Twilight (x32 Version: - EA Los Angeles) Counter-Strike: Global Offensive (x32 Version: - Valve) Deus Ex: Human Revolution - The Missing Link (x32 Version: - Eidos Montreal) Deus Ex: Human Revolution (x32 Version: - Eidos Montreal) DisplayFusion 5.1 (x32 Version: 5.1.0.0 - Binary Fortress Software) Dota 2 (x32 Version: - Valve) Dragon Age: Origins (x32 Version: 1.04 - Electronic Arts, Inc.) Dual-Core Optimizer (x32 Version: 1.1.4.0169 - AMD) Dust: An Elysian Tail (x32 Version: - Humble Hearts LLC) FTL: Faster Than Light (x32 Version: - Subset Games) Gameforge Live 1.9.0 "Legend" (x32 Version: 1.9.0 - Gameforge) Google Chrome (HKCU Version: 31.0.1650.63 - Google Inc.) Guild Wars 2 (x32 Version: - NCsoft Corporation, Ltd.) Hawken (HKCU Version: - Meteor Entertainment) Hearthstone (x32 Version: - Blizzard Entertainment) InfiniteCrisis (x32 Version: - Turbine, Inc) Infinity Wars (x32 Version: - ) Injustice: Gods Among Us Ultimate Edition (x32 Version: - NetherRealm Studios) Intel(R) Management Engine Components (x32 Version: 8.1.0.1252 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle) League of Legends (x32 Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Left 4 Dead 2 (x32 Version: - Valve) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 RC (Version: 4.5.50861 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 RC (Version: 4.5.50861 - Microsoft Corporation) Hidden Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8 - Mozilla) Natural Selection 2 (x32 Version: - Unknown Worlds Entertainment) NetSpeedMonitor 2.5.4.0 x64 (Version: 2.5.4.0 - Florian Gilles) NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Open Broadcaster Software (x32 Version: - ) OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation) Pando Media Booster (x32 Version: 2.6.0.7 - Pando Networks Inc.) Path of Exile (x32 Version: - Grinding Gear Games) PlanetSide 2 (x32 Version: - Sony Online Entertainment) PS3 Media Server (x32 Version: 1.90.1 - PS3 Media Server) PunkBuster Services (x32 Version: 0.992 - Even Balance, Inc.) Realtek Ethernet Controller Driver (x32 Version: 7.49.927.2011 - Realtek) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6873 - Realtek Semiconductor Corp.) S.K.I.L.L. - Special Force 2 (x32 Version: - ) Star Wars: Knights of the Old Republic (x32 Version: - BioWare) StarCraft II (x32 Version: - Blizzard Entertainment) Steam (x32 Version: 1.0.0.0 - Valve Corporation) Street Fighter X Tekken (x32 Version: - Capcom U.S.A., Inc.) Sword of the Stars: The Pit (x32 Version: - Kerberos Productions) TeamSpeak 3 Client (Version: 3.0.11 - TeamSpeak Systems GmbH) TechPowerUp GPU-Z (x32 Version: - TechPowerUp) TERA (x32 Version: 7 - Gameforge Productions GmbH) The Elder Scrolls V: Skyrim (x32 Version: - Bethesda Game Studios) The Witcher 2: Assassins of Kings Enhanced Edition (x32 Version: - CD Projekt RED) Tomb Raider (x32 Version: - Crystal Dynamics) VLC media player 2.0.7 (Version: 2.0.7 - VideoLAN) Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation) WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH) XCOM: Enemy Unknown (x32 Version: - Firaxis Games) Xfire (x32 Version: - ) ==================== Restore Points ========================= 29-12-2013 06:23:58 Geplanter Prüfpunkt 29-12-2013 10:16:18 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 29-12-2013 10:16:49 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 03-01-2014 18:03:04 DirectX wurde installiert 03-01-2014 18:21:21 DirectX wurde installiert 03-01-2014 18:35:04 DirectX wurde installiert ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {963FB5BC-90F6-46A2-B5B3-BE189B2201E4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core => C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-12] (Google Inc.) Task: {A2FC92C3-A1EC-459C-8FC1-D5FEAE385BFD} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd) Task: {D9C8109E-DD86-403E-9A1C-3B6141015C60} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA => C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-12] (Google Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core.job => C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA.job => C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-09-08 21:55 - 2013-09-08 21:54 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2013-09-08 19:03 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2013-12-06 00:41 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-06 00:41 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-06 00:41 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-06 00:41 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-06 00:41 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-12-06 00:41 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll 2013-08-21 13:18 - 2013-11-06 22:48 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2013-08-28 12:47 - 2013-12-11 20:40 - 01135016 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2013-08-07 10:31 - 2013-11-06 22:48 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll 2013-09-08 21:17 - 2013-09-08 21:17 - 16166280 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll 2013-09-17 21:47 - 2013-12-17 15:39 - 00126816 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\RiotLauncher.dll 2014-01-04 00:14 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/04/2014 00:34:00 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: League of Legends.exe, Version: 3.15.0.260, Zeitstempel: 0x52b20b88 Name des fehlerhaften Moduls: cgD3D9.dll, Version: 3.0.0.16, Zeitstempel: 0x4d55a06f Ausnahmecode: 0xc0000005 Fehleroffset: 0x000b6539 ID des fehlerhaften Prozesses: 0xe80 Startzeit der fehlerhaften Anwendung: 0xLeague of Legends.exe0 Pfad der fehlerhaften Anwendung: League of Legends.exe1 Pfad des fehlerhaften Moduls: League of Legends.exe2 Berichtskennung: League of Legends.exe3 Error: (01/03/2014 01:18:38 AM) (Source: ESENT) (User: ) Description: DllHost (3400) WebCacheLocal: Fehler -1811 beim Öffnen von Protokolldatei C:\Users\FakeXero\AppData\Local\Microsoft\Windows\WebCache\V0100001.log. Error: (01/03/2014 01:02:44 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0 Name des fehlerhaften Moduls: xfire_toucan_46139.dll, Version: 1.0.0.46139, Zeitstempel: 0x514a81a7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00073409 ID des fehlerhaften Prozesses: 0x1324 Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0 Pfad der fehlerhaften Anwendung: LolClient.exe1 Pfad des fehlerhaften Moduls: LolClient.exe2 Berichtskennung: LolClient.exe3 Error: (12/29/2013 04:06:35 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xf18 Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0 Pfad der fehlerhaften Anwendung: wmplayer.exe1 Pfad des fehlerhaften Moduls: wmplayer.exe2 Berichtskennung: wmplayer.exe3 Error: (12/27/2013 02:00:13 PM) (Source: Application Hang) (User: ) Description: Programm Steam.exe, Version 2.4.35.50 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 109c Startzeit: 01cf025243a982cd Endzeit: 299 Anwendungspfad: C:\Program Files (x86)\Steam\Steam.exe Berichts-ID: cc1434ba-6ef6-11e3-992e-50e5492bdf22 Error: (12/25/2013 09:41:20 PM) (Source: Application Hang) (User: ) Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 2330 Startzeit: 01cf01b19efdc894 Endzeit: 2 Anwendungspfad: C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe Berichts-ID: e7281671-6da4-11e3-992e-50e5492bdf22 Error: (12/25/2013 09:46:34 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0 Name des fehlerhaften Moduls: xfire_toucan_46139.dll, Version: 1.0.0.46139, Zeitstempel: 0x514a81a7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00073409 ID des fehlerhaften Prozesses: 0xf14 Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0 Pfad der fehlerhaften Anwendung: LolClient.exe1 Pfad des fehlerhaften Moduls: LolClient.exe2 Berichtskennung: LolClient.exe3 Error: (12/21/2013 08:37:54 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0 Name des fehlerhaften Moduls: xfire_toucan_46139.dll, Version: 1.0.0.46139, Zeitstempel: 0x514a81a7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00073409 ID des fehlerhaften Prozesses: 0xf48 Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0 Pfad der fehlerhaften Anwendung: LolClient.exe1 Pfad des fehlerhaften Moduls: LolClient.exe2 Berichtskennung: LolClient.exe3 Error: (12/20/2013 07:44:46 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0 Name des fehlerhaften Moduls: xfire_toucan_46139.dll, Version: 1.0.0.46139, Zeitstempel: 0x514a81a7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00073409 ID des fehlerhaften Prozesses: 0x1074 Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0 Pfad der fehlerhaften Anwendung: LolClient.exe1 Pfad des fehlerhaften Moduls: LolClient.exe2 Berichtskennung: LolClient.exe3 Error: (12/16/2013 04:23:28 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 31.0.1650.63, Zeitstempel: 0x529e8b45 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000374 Fehleroffset: 0x000ce753 ID des fehlerhaften Prozesses: 0xec8 Startzeit der fehlerhaften Anwendung: 0xchrome.exe0 Pfad der fehlerhaften Anwendung: chrome.exe1 Pfad des fehlerhaften Moduls: chrome.exe2 Berichtskennung: chrome.exe3 System errors: ============= Error: (01/02/2014 08:07:49 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (01/02/2014 08:07:49 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "upnphost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1352 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (01/02/2014 08:07:49 AM) (Source: DCOM) (User: ) Description: 1069upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56} Error: (12/31/2013 06:15:21 PM) (Source: DCOM) (User: ) Description: {3EB3C877-1F16-487C-9050-104DBCD66683} Error: (12/30/2013 10:27:28 AM) (Source: DCOM) (User: ) Description: {3EB3C877-1F16-487C-9050-104DBCD66683} Error: (12/27/2013 01:38:10 AM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (12/25/2013 06:40:26 PM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80004005 Error: (12/25/2013 04:56:50 PM) (Source: DCOM) (User: ) Description: {3EB3C877-1F16-487C-9050-104DBCD66683} Error: (12/23/2013 09:51:29 AM) (Source: DCOM) (User: ) Description: {3EB3C877-1F16-487C-9050-104DBCD66683} Error: (12/21/2013 03:36:12 AM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Microsoft Office Sessions: ========================= Error: (01/04/2014 00:34:00 AM) (Source: Application Error)(User: ) Description: League of Legends.exe3.15.0.26052b20b88cgD3D9.dll3.0.0.164d55a06fc0000005000b6539e8001cf08dc304b5fd5C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.4\deploy\League of Legends.exeC:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.4\deploy\cgD3D9.dll85816878-74cf-11e3-ae95-50e5492bdf22 Error: (01/03/2014 01:18:38 AM) (Source: ESENT)(User: ) Description: DllHost3400WebCacheLocal: C:\Users\FakeXero\AppData\Local\Microsoft\Windows\WebCache\V0100001.log-1811 Error: (01/03/2014 01:02:44 AM) (Source: Application Error)(User: ) Description: LolClient.exe0.0.0.0515663e0xfire_toucan_46139.dll1.0.0.46139514a81a7c000000500073409132401cf07ea15619decC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.63\deploy\LolClient.exeC:\Program Files (x86)\Xfire\xfire_toucan_46139.dll5e47b5fd-740a-11e3-ae95-50e5492bdf22 Error: (12/29/2013 04:06:35 AM) (Source: Application Error)(User: ) Description: wmplayer.exe12.0.7601.175144ce7a485unknown0.0.0.000000000c000000500000000f1801cf0442f52f5762C:\Program Files (x86)\Windows Media Player\wmplayer.exeunknown394a9d78-7036-11e3-992e-50e5492bdf22 Error: (12/27/2013 02:00:13 PM) (Source: Application Hang)(User: ) Description: Steam.exe2.4.35.50109c01cf025243a982cd299C:\Program Files (x86)\Steam\Steam.execc1434ba-6ef6-11e3-992e-50e5492bdf22 Error: (12/25/2013 09:41:20 PM) (Source: Application Hang)(User: ) Description: rads_user_kernel.exe0.0.0.0233001cf01b19efdc8942C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exee7281671-6da4-11e3-992e-50e5492bdf22 Error: (12/25/2013 09:46:34 AM) (Source: Application Error)(User: ) Description: LolClient.exe0.0.0.0515663e0xfire_toucan_46139.dll1.0.0.46139514a81a7c000000500073409f1401cf00e66453ee6fC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.63\deploy\LolClient.exeC:\Program Files (x86)\Xfire\xfire_toucan_46139.dll0e5b4350-6d41-11e3-9550-50e5492bdf22 Error: (12/21/2013 08:37:54 PM) (Source: Application Error)(User: ) Description: LolClient.exe0.0.0.0515663e0xfire_toucan_46139.dll1.0.0.46139514a81a7c000000500073409f4801cefe08993c08ceC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.63\deploy\LolClient.exeC:\Program Files (x86)\Xfire\xfire_toucan_46139.dll6279e4a7-6a77-11e3-a43b-50e5492bdf22 Error: (12/20/2013 07:44:46 PM) (Source: Application Error)(User: ) Description: LolClient.exe0.0.0.0515663e0xfire_toucan_46139.dll1.0.0.46139514a81a7c000000500073409107401cefd7fbdf2ae07C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.63\deploy\LolClient.exeC:\Program Files (x86)\Xfire\xfire_toucan_46139.dllcbbecbf6-69a6-11e3-a43b-50e5492bdf22 Error: (12/16/2013 04:23:28 AM) (Source: Application Error)(User: ) Description: chrome.exe31.0.1650.63529e8b45ntdll.dll6.1.7601.18247521ea8e7c0000374000ce753ec801cef90a43c3c1d0C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dll6dfa9a24-6601-11e3-8650-50e5492bdf22 ==================== Memory info =========================== Percentage of memory in use: 72% Total physical RAM: 4079.43 MB Available physical RAM: 1128.5 MB Total Pagefile: 8157.04 MB Available Pagefile: 3404.15 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.41 GB) (Free:500.73 GB) NTFS Drive d: (DragonAge) (CDROM) (Total:7.74 GB) (Free:0 GB) CDFS Drive e: (Elements) (Fixed) (Total:1863.01 GB) (Free:853.25 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 000005A0) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 0003990F) Partition 1: (Not Active) - (Size=-198627557376) - (Type=07 NTFS) ==================== End Of Log ============================ |
04.01.2014, 08:50 | #2 |
/// the machine /// TB-Ausbilder | Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ hi,
__________________Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
04.01.2014, 19:13 | #3 |
| Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ Nabend,
__________________hier schonmal das " Malwarebytes Anti-Malware "-Log. AdwCleaner läuft gleich durch. Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.04.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 FakeXero :: FAKEXERO-PC [Administrator] 04.01.2014 18:28:36 mbam-log-2014-01-04 (18-28-36).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: Dateisystem | P2P Durchsuchte Objekte: 199964 Laufzeit: 26 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 04/01/2014 um 18:39:01 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : FakeXero - FAKEXERO-PC # Gestartet von : C:\Users\FakeXero\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\OCS ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default\prefs.js ] -\\ Google Chrome v [ Datei : C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [1017 octets] - [04/01/2014 18:36:43] AdwCleaner[S0].txt - [894 octets] - [04/01/2014 18:39:01] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [953 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.9 (01.01.2014:1) OS: Windows 7 Home Premium x64 Ran by FakeXero on 04.01.2014 at 18:49:29,20 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" ~~~ FireFox Emptied folder: C:\Users\FakeXero\AppData\Roaming\mozilla\firefox\profiles\twtjpdg6.default\minidumps [2 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 04.01.2014 at 18:52:40,57 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014 Ran by FakeXero (administrator) on FAKEXERO-PC on 04-01-2014 19:03:23 Running from C:\Users\FakeXero\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKCU\...\Run: [DisplayFusion] - C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7892864 2013-09-02] (Binary Fortress Software) HKCU\...\Run: [Google Update] - C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-12] (Google Inc.) MountPoints2: {75fcea1b-18ae-11e3-b22b-806e6f6e6963} - D:\autorun.exe Startup: C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2963BC669DADCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default FF Homepage: https://www.google.de/ FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*'))%20%7B%20return%20'PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D" FF NetworkProxy: "type", 2 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ProxMate - Proxy on steroids! - C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi Chrome: ======= CHR RestoreOnStartup: "hxxp://www.twitch.tv/directory/following/live" CHR Extension: (Google Docs) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Twitch.tv Europe Lag Fix) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoehmlkhjgaboegkondkciclminpjof\2.0_0 CHR Extension: (Google Wallet) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (Gmail) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-12] (Avira Operations GmbH & Co. KG) S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88424 2013-10-10] (Perfect World Entertainment Inc) R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1315728 2013-09-02] (Binary Fortress Software) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-24] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG) R3 HabuFltr; C:\Windows\System32\drivers\habu.sys [13696 2006-10-26] (Razer (Asia-Pacific) Pte Ltd) R3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-08] (Guillemot Corporation) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] () S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-04 18:56 - 2014-01-04 19:03 - 00012291 _____ C:\Users\FakeXero\Desktop\FRST.txt 2014-01-04 18:52 - 2014-01-04 18:52 - 00000832 _____ C:\Users\FakeXero\Desktop\JRT.txt 2014-01-04 18:49 - 2014-01-04 18:49 - 00000000 ____D C:\Windows\ERUNT 2014-01-04 18:44 - 2014-01-04 18:44 - 01036305 _____ (Thisisu) C:\Users\FakeXero\Desktop\JRT.exe 2014-01-04 18:40 - 2014-01-04 18:40 - 00000580 _____ C:\Windows\PFRO.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000056 _____ C:\Windows\setupact.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000000 _____ C:\Windows\setuperr.log 2014-01-04 18:27 - 2014-01-04 18:39 - 00000000 ____D C:\AdwCleaner 2014-01-04 18:19 - 2014-01-04 18:19 - 01233962 _____ C:\Users\FakeXero\Desktop\adwcleaner.exe 2014-01-04 18:15 - 2014-01-04 18:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Malwarebytes 2014-01-04 18:14 - 2014-01-04 18:14 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-04 18:14 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-04 18:11 - 2014-01-04 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\FakeXero\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST 2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe 2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-04 00:13 - 2014-01-04 00:13 - 23867560 _____ (Mozilla) C:\Users\FakeXero\Downloads\Firefox_Setup_26.0.exe 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2 2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD 2014-01-03 19:09 - 2014-01-03 23:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2 2014-01-03 06:16 - 2014-01-03 19:00 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url 2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url 2013-12-31 16:50 - 2013-12-31 16:55 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4 2013-12-31 16:41 - 2013-12-31 16:48 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4 2013-12-31 16:34 - 2013-12-31 16:41 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4 2013-12-31 15:50 - 2013-12-31 15:59 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4 2013-12-31 15:41 - 2013-12-31 15:50 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4 2013-12-31 15:33 - 2013-12-31 15:41 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4 2013-12-31 15:19 - 2013-12-31 15:27 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4 2013-12-31 14:52 - 2013-12-31 14:56 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4 2013-12-31 14:39 - 2013-12-31 14:43 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4 2013-12-31 14:34 - 2013-12-31 14:37 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4 2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice 2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url 2013-12-26 21:00 - 2013-12-26 23:11 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013] 2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url 2013-12-25 11:00 - 2013-12-26 13:25 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log 2013-12-24 22:51 - 2013-12-24 22:53 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4 2013-12-24 21:56 - 2013-12-24 21:58 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4 2013-12-24 21:46 - 2013-12-24 21:47 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4 2013-12-24 21:40 - 2013-12-24 21:42 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4 2013-12-24 21:37 - 2013-12-24 21:39 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4 2013-12-24 21:35 - 2013-12-24 21:37 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4 2013-12-24 21:31 - 2013-12-24 21:33 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4 2013-12-24 21:29 - 2013-12-24 21:31 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4 2013-12-24 21:27 - 2013-12-24 21:29 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4 2013-12-22 07:51 - 2013-12-22 07:55 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods 2013-12-21 21:09 - 2013-12-22 07:21 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit 2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url 2013-12-20 14:50 - 2013-12-20 14:52 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4 2013-12-20 14:46 - 2013-12-20 14:50 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4 2013-12-20 14:43 - 2013-12-20 14:46 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4 2013-12-20 14:33 - 2013-12-20 14:35 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4 2013-12-20 14:28 - 2013-12-20 14:31 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4 2013-12-20 14:25 - 2013-12-20 14:28 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4 2013-12-17 14:10 - 2013-12-17 14:13 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi 2013-12-17 14:10 - 2013-12-17 14:13 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi 2013-12-17 14:07 - 2013-12-17 14:09 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi 2013-12-17 14:07 - 2013-12-17 14:09 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi 2013-12-17 13:21 - 2013-12-17 13:25 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi 2013-12-17 13:20 - 2013-12-17 13:25 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi 2013-12-17 13:20 - 2013-12-17 13:24 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi 2013-12-17 12:59 - 2013-12-17 13:00 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi 2013-12-17 12:55 - 2013-12-17 12:57 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi 2013-12-16 12:28 - 2013-12-16 12:30 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi 2013-12-16 12:25 - 2013-12-16 12:28 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi 2013-12-16 12:22 - 2013-12-16 12:24 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi 2013-12-16 12:19 - 2013-12-16 12:21 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi 2013-12-16 12:16 - 2013-12-16 12:18 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi 2013-12-16 12:14 - 2013-12-16 12:16 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi 2013-12-16 12:11 - 2013-12-16 12:13 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi 2013-12-16 12:09 - 2013-12-16 12:11 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi 2013-12-16 12:06 - 2013-12-16 12:08 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi 2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV 2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz 2013-12-11 03:01 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 03:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 03:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 03:01 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 03:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 03:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 03:01 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 03:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 03:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 03:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 03:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 03:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 03:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 03:01 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 03:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 03:01 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 03:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 03:01 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 03:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 03:01 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 03:01 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 03:01 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 03:01 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 03:01 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 03:01 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 03:01 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 03:01 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 03:01 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 03:01 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 03:01 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 03:01 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss 2013-12-11 00:40 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 00:40 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 00:40 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 00:35 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 00:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 00:35 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 00:35 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 00:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 00:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 00:35 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 00:35 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 00:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 00:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 00:35 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 00:35 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-10 18:51 - 2013-12-10 18:53 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4 2013-12-10 18:49 - 2013-12-10 18:51 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4 2013-12-10 18:38 - 2013-12-10 18:49 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4 2013-12-10 18:30 - 2013-12-10 18:42 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4 2013-12-10 17:52 - 2013-12-10 17:54 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4 2013-12-10 17:44 - 2013-12-10 17:55 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4 2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-12-10 17:25 - 2013-12-10 17:30 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4 2013-12-10 17:04 - 2013-12-10 17:06 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4 2013-12-10 17:03 - 2013-12-10 20:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium 2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk 2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk 2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios 2013-12-10 01:01 - 2013-12-10 01:07 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe 2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url ==================== One Month Modified Files and Folders ======= 2014-01-04 19:03 - 2014-01-04 18:56 - 00012291 _____ C:\Users\FakeXero\Desktop\FRST.txt 2014-01-04 19:03 - 2013-09-08 21:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\NetSpeedMonitor 2014-01-04 18:52 - 2014-01-04 18:52 - 00000832 _____ C:\Users\FakeXero\Desktop\JRT.txt 2014-01-04 18:49 - 2014-01-04 18:49 - 00000000 ____D C:\Windows\ERUNT 2014-01-04 18:48 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-04 18:48 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-04 18:44 - 2014-01-04 18:44 - 01036305 _____ (Thisisu) C:\Users\FakeXero\Desktop\JRT.exe 2014-01-04 18:44 - 2013-11-12 23:28 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA.job 2014-01-04 18:44 - 2013-09-08 18:52 - 01418675 _____ C:\Windows\WindowsUpdate.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000580 _____ C:\Windows\PFRO.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000056 _____ C:\Windows\setupact.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000000 _____ C:\Windows\setuperr.log 2014-01-04 18:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-04 18:39 - 2014-01-04 18:27 - 00000000 ____D C:\AdwCleaner 2014-01-04 18:35 - 2013-09-09 10:26 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Xfire 2014-01-04 18:19 - 2014-01-04 18:19 - 01233962 _____ C:\Users\FakeXero\Desktop\adwcleaner.exe 2014-01-04 18:15 - 2014-01-04 18:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Malwarebytes 2014-01-04 18:14 - 2014-01-04 18:14 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-04 18:11 - 2014-01-04 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\FakeXero\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-04 10:44 - 2013-11-12 23:28 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core.job 2014-01-04 10:12 - 2013-09-09 00:30 - 00000000 ____D C:\Program Files (x86)\Steam 2014-01-04 10:03 - 2013-09-17 21:43 - 00000000 ____D C:\Users\FakeXero\AppData\Local\PMB Files 2014-01-04 10:03 - 2013-09-17 21:43 - 00000000 ____D C:\ProgramData\PMB Files 2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST 2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe 2014-01-04 01:07 - 2013-11-26 03:52 - 00000403 _____ C:\Users\FakeXero\Desktop\To Do.txt 2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-04 00:13 - 2014-01-04 00:13 - 23867560 _____ (Mozilla) C:\Users\FakeXero\Downloads\Firefox_Setup_26.0.exe 2014-01-04 00:13 - 2013-09-08 22:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\TS3Client 2014-01-03 23:07 - 2014-01-03 19:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2 2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD 2014-01-03 19:00 - 2014-01-03 06:16 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url 2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url 2014-01-03 06:16 - 2013-09-09 15:00 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url 2014-01-02 18:00 - 2013-09-08 18:52 - 00000000 ____D C:\Users\FakeXero 2014-01-02 17:58 - 2013-09-08 19:44 - 00000000 ____D C:\Windows\Panther 2014-01-01 05:13 - 2013-09-13 14:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\InfiniteCrisis 2014-01-01 05:06 - 2013-09-09 09:14 - 00000000 ____D C:\Program Files (x86)\InfiniteCrisis 2013-12-31 17:27 - 2013-09-09 09:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\vlc 2013-12-31 16:55 - 2013-12-31 16:50 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4 2013-12-31 16:48 - 2013-12-31 16:41 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4 2013-12-31 16:41 - 2013-12-31 16:34 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4 2013-12-31 15:59 - 2013-12-31 15:50 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4 2013-12-31 15:50 - 2013-12-31 15:41 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4 2013-12-31 15:41 - 2013-12-31 15:33 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4 2013-12-31 15:27 - 2013-12-31 15:19 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4 2013-12-31 14:56 - 2013-12-31 14:52 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4 2013-12-31 14:43 - 2013-12-31 14:39 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4 2013-12-31 14:37 - 2013-12-31 14:34 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4 2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice 2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url 2013-12-26 23:11 - 2013-12-26 21:00 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013] 2013-12-26 13:25 - 2013-12-25 11:00 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log 2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url 2013-12-24 22:53 - 2013-12-24 22:51 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4 2013-12-24 21:58 - 2013-12-24 21:56 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4 2013-12-24 21:47 - 2013-12-24 21:46 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4 2013-12-24 21:42 - 2013-12-24 21:40 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4 2013-12-24 21:39 - 2013-12-24 21:37 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4 2013-12-24 21:37 - 2013-12-24 21:35 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4 2013-12-24 21:33 - 2013-12-24 21:31 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4 2013-12-24 21:31 - 2013-12-24 21:29 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4 2013-12-24 21:29 - 2013-12-24 21:27 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4 2013-12-23 22:30 - 2013-12-03 19:12 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Battle.net 2013-12-22 07:55 - 2013-12-22 07:51 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods 2013-12-22 07:21 - 2013-12-21 21:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit 2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url 2013-12-21 12:35 - 2013-12-03 19:15 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2013-12-21 12:24 - 2013-12-03 19:12 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-12-20 14:52 - 2013-12-20 14:50 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4 2013-12-20 14:50 - 2013-12-20 14:46 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4 2013-12-20 14:46 - 2013-12-20 14:43 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4 2013-12-20 14:35 - 2013-12-20 14:33 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4 2013-12-20 14:31 - 2013-12-20 14:28 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4 2013-12-20 14:28 - 2013-12-20 14:25 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4 2013-12-18 17:57 - 2013-09-09 10:26 - 00000000 ____D C:\ProgramData\Xfire 2013-12-17 14:13 - 2013-12-17 14:10 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi 2013-12-17 14:13 - 2013-12-17 14:10 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi 2013-12-17 14:09 - 2013-12-17 14:07 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi 2013-12-17 14:09 - 2013-12-17 14:07 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi 2013-12-17 13:25 - 2013-12-17 13:21 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi 2013-12-17 13:25 - 2013-12-17 13:20 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi 2013-12-17 13:24 - 2013-12-17 13:20 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi 2013-12-17 13:00 - 2013-12-17 12:59 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi 2013-12-17 12:57 - 2013-12-17 12:55 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi 2013-12-16 12:30 - 2013-12-16 12:28 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi 2013-12-16 12:28 - 2013-12-16 12:25 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi 2013-12-16 12:24 - 2013-12-16 12:22 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi 2013-12-16 12:21 - 2013-12-16 12:19 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi 2013-12-16 12:18 - 2013-12-16 12:16 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi 2013-12-16 12:16 - 2013-12-16 12:14 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi 2013-12-16 12:13 - 2013-12-16 12:11 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi 2013-12-16 12:11 - 2013-12-16 12:09 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi 2013-12-16 12:08 - 2013-12-16 12:06 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi 2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV 2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2013-12-12 12:48 - 2013-09-08 21:56 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-12 12:48 - 2013-09-08 21:55 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-12 12:48 - 2013-09-08 21:55 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz 2013-12-11 08:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-11 04:26 - 2009-07-14 18:58 - 00698688 _____ C:\Windows\system32\perfh007.dat 2013-12-11 04:26 - 2009-07-14 18:58 - 00148828 _____ C:\Windows\system32\perfc007.dat 2013-12-11 04:26 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-11 04:19 - 2009-07-14 05:45 - 00293320 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss 2013-12-10 20:35 - 2013-12-10 17:03 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium 2013-12-10 18:53 - 2013-12-10 18:51 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4 2013-12-10 18:51 - 2013-12-10 18:49 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4 2013-12-10 18:49 - 2013-12-10 18:38 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4 2013-12-10 18:42 - 2013-12-10 18:30 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4 2013-12-10 17:55 - 2013-12-10 17:44 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4 2013-12-10 17:54 - 2013-12-10 17:52 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4 2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-12-10 17:30 - 2013-12-10 17:25 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4 2013-12-10 17:06 - 2013-12-10 17:04 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4 2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-10 16:59 - 2013-09-08 21:23 - 01591896 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk 2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk 2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios 2013-12-10 01:07 - 2013-12-10 01:01 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe 2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url 2013-12-06 10:39 - 2013-11-12 23:28 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA 2013-12-06 10:39 - 2013-11-12 23:28 - 00003712 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core 2013-12-05 18:01 - 2013-11-22 02:59 - 00000000 ____D C:\Users\FakeXero\Downloads\ReferatZeugz Some content of TEMP: ==================== C:\Users\FakeXero\AppData\Local\Temp\avgnt.exe C:\Users\FakeXero\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-03 06:58 ==================== End Of Log ============================ --- --- --- |
05.01.2014, 16:19 | #4 |
/// the machine /// TB-Ausbilder | Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
05.01.2014, 23:27 | #5 |
| Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ Hayo, hier erstmal das ESET-Log. Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=b634eacb7b5f2e40b4f9857c7c279a2b # engine=16532 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-05 09:40:54 # local_time=2014-01-05 10:40:54 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1799 16775165 100 94 15681 10284475 8457 0 # compatibility_mode=5893 16776574 100 94 10128797 140587904 0 0 # scanned=345816 # found=0 # cleaned=0 # scan_time=5313 Code:
ATTFilter UNSUPPORTED OPERATING SYSTEM! ABORTED! FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014 Ran by FakeXero (administrator) on FAKEXERO-PC on 05-01-2014 23:15:15 Running from C:\Users\FakeXero\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Xfire Inc.) C:\Program Files (x86)\Xfire\Xfire.exe () C:\Program Files (x86)\Xfire\xfire64.exe () C:\Program Files (x86)\Xfire\xfire64.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\FakeXero\AppData\Local\Google\Chrome\Application\chrome.exe () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\LoLLauncher.exe () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.64\deploy\LolClient.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKCU\...\Run: [DisplayFusion] - C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7892864 2013-09-02] (Binary Fortress Software) HKCU\...\Run: [Google Update] - C:\Users\FakeXero\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-12] (Google Inc.) MountPoints2: {75fcea1b-18ae-11e3-b22b-806e6f6e6963} - D:\autorun.exe Startup: C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2963BC669DADCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default FF Homepage: https://www.google.de/ FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*'))%20%7B%20return%20'PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D" FF NetworkProxy: "type", 2 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\FakeXero\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ProxMate - Proxy on steroids! - C:\Users\FakeXero\AppData\Roaming\Mozilla\Firefox\Profiles\twtjpdg6.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi Chrome: ======= CHR RestoreOnStartup: "hxxp://www.twitch.tv/directory/following/live" CHR Extension: (Google Docs) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Twitch.tv Europe Lag Fix) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoehmlkhjgaboegkondkciclminpjof\2.0_0 CHR Extension: (Google Wallet) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (Gmail) - C:\Users\FakeXero\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-12] (Avira Operations GmbH & Co. KG) S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88424 2013-10-10] (Perfect World Entertainment Inc) R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1315728 2013-09-02] (Binary Fortress Software) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-24] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG) R3 HabuFltr; C:\Windows\System32\drivers\habu.sys [13696 2006-10-26] (Razer (Asia-Pacific) Pte Ltd) R3 hxctlflt; C:\Windows\System32\Drivers\hxctlflt.sys [111104 2009-02-08] (Guillemot Corporation) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552384 2009-04-22] () S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-05 23:11 - 2014-01-05 23:11 - 00987410 _____ C:\Users\FakeXero\Desktop\SecurityCheck.exe 2014-01-05 18:42 - 2014-01-05 18:43 - 02347384 _____ (ESET) C:\Users\FakeXero\Desktop\esetsmartinstaller_enu.exe 2014-01-04 18:56 - 2014-01-05 23:15 - 00013484 _____ C:\Users\FakeXero\Desktop\FRST.txt 2014-01-04 18:52 - 2014-01-04 18:52 - 00000832 _____ C:\Users\FakeXero\Desktop\JRT.txt 2014-01-04 18:49 - 2014-01-04 18:49 - 00000000 ____D C:\Windows\ERUNT 2014-01-04 18:44 - 2014-01-04 18:44 - 01036305 _____ (Thisisu) C:\Users\FakeXero\Desktop\JRT.exe 2014-01-04 18:40 - 2014-01-04 18:40 - 00000580 _____ C:\Windows\PFRO.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000056 _____ C:\Windows\setupact.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000000 _____ C:\Windows\setuperr.log 2014-01-04 18:27 - 2014-01-04 18:39 - 00000000 ____D C:\AdwCleaner 2014-01-04 18:19 - 2014-01-04 18:19 - 01233962 _____ C:\Users\FakeXero\Desktop\adwcleaner.exe 2014-01-04 18:15 - 2014-01-04 18:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Malwarebytes 2014-01-04 18:14 - 2014-01-04 18:14 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-04 18:14 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-04 18:11 - 2014-01-04 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\FakeXero\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST 2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe 2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2 2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD 2014-01-03 19:09 - 2014-01-03 23:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2 2014-01-03 06:16 - 2014-01-03 19:00 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url 2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url 2013-12-31 16:50 - 2013-12-31 16:55 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4 2013-12-31 16:41 - 2013-12-31 16:48 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4 2013-12-31 16:34 - 2013-12-31 16:41 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4 2013-12-31 15:50 - 2013-12-31 15:59 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4 2013-12-31 15:41 - 2013-12-31 15:50 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4 2013-12-31 15:33 - 2013-12-31 15:41 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4 2013-12-31 15:19 - 2013-12-31 15:27 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4 2013-12-31 14:52 - 2013-12-31 14:56 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4 2013-12-31 14:39 - 2013-12-31 14:43 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4 2013-12-31 14:34 - 2013-12-31 14:37 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4 2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice 2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url 2013-12-26 21:00 - 2013-12-26 23:11 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013] 2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url 2013-12-25 11:00 - 2013-12-26 13:25 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log 2013-12-24 22:51 - 2013-12-24 22:53 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4 2013-12-24 21:56 - 2013-12-24 21:58 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4 2013-12-24 21:46 - 2013-12-24 21:47 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4 2013-12-24 21:40 - 2013-12-24 21:42 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4 2013-12-24 21:37 - 2013-12-24 21:39 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4 2013-12-24 21:35 - 2013-12-24 21:37 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4 2013-12-24 21:31 - 2013-12-24 21:33 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4 2013-12-24 21:29 - 2013-12-24 21:31 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4 2013-12-24 21:27 - 2013-12-24 21:29 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4 2013-12-22 07:51 - 2013-12-22 07:55 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods 2013-12-21 21:09 - 2013-12-22 07:21 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit 2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url 2013-12-20 14:50 - 2013-12-20 14:52 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4 2013-12-20 14:46 - 2013-12-20 14:50 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4 2013-12-20 14:43 - 2013-12-20 14:46 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4 2013-12-20 14:33 - 2013-12-20 14:35 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4 2013-12-20 14:28 - 2013-12-20 14:31 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4 2013-12-20 14:25 - 2013-12-20 14:28 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4 2013-12-17 14:10 - 2013-12-17 14:13 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi 2013-12-17 14:10 - 2013-12-17 14:13 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi 2013-12-17 14:07 - 2013-12-17 14:09 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi 2013-12-17 14:07 - 2013-12-17 14:09 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi 2013-12-17 13:21 - 2013-12-17 13:25 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi 2013-12-17 13:20 - 2013-12-17 13:25 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi 2013-12-17 13:20 - 2013-12-17 13:24 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi 2013-12-17 12:59 - 2013-12-17 13:00 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi 2013-12-17 12:55 - 2013-12-17 12:57 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi 2013-12-16 12:28 - 2013-12-16 12:30 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi 2013-12-16 12:25 - 2013-12-16 12:28 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi 2013-12-16 12:22 - 2013-12-16 12:24 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi 2013-12-16 12:19 - 2013-12-16 12:21 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi 2013-12-16 12:16 - 2013-12-16 12:18 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi 2013-12-16 12:14 - 2013-12-16 12:16 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi 2013-12-16 12:11 - 2013-12-16 12:13 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi 2013-12-16 12:09 - 2013-12-16 12:11 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi 2013-12-16 12:06 - 2013-12-16 12:08 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi 2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV 2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz 2013-12-11 03:01 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 03:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 03:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 03:01 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 03:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 03:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 03:01 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 03:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 03:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 03:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 03:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 03:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 03:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 03:01 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 03:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 03:01 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 03:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 03:01 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 03:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 03:01 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 03:01 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 03:01 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 03:01 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 03:01 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 03:01 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 03:01 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 03:01 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 03:01 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 03:01 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 03:01 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 03:01 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss 2013-12-11 00:40 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 00:40 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 00:40 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 00:35 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 00:35 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 00:35 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 00:35 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 00:35 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 00:35 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 00:35 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 00:35 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 00:35 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 00:35 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 00:35 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 00:35 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-10 18:51 - 2013-12-10 18:53 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4 2013-12-10 18:49 - 2013-12-10 18:51 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4 2013-12-10 18:38 - 2013-12-10 18:49 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4 2013-12-10 18:30 - 2013-12-10 18:42 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4 2013-12-10 17:52 - 2013-12-10 17:54 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4 2013-12-10 17:44 - 2013-12-10 17:55 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4 2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-12-10 17:25 - 2013-12-10 17:30 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4 2013-12-10 17:04 - 2013-12-10 17:06 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4 2013-12-10 17:03 - 2013-12-10 20:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium 2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk 2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk 2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios 2013-12-10 01:01 - 2013-12-10 01:07 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe 2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url ==================== One Month Modified Files and Folders ======= 2014-01-05 23:15 - 2014-01-04 18:56 - 00013484 _____ C:\Users\FakeXero\Desktop\FRST.txt 2014-01-05 23:15 - 2013-09-08 21:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\NetSpeedMonitor 2014-01-05 23:11 - 2014-01-05 23:11 - 00987410 _____ C:\Users\FakeXero\Desktop\SecurityCheck.exe 2014-01-05 22:44 - 2013-11-12 23:28 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA.job 2014-01-05 22:44 - 2013-09-17 21:43 - 00000000 ____D C:\Users\FakeXero\AppData\Local\PMB Files 2014-01-05 18:43 - 2014-01-05 18:42 - 02347384 _____ (ESET) C:\Users\FakeXero\Desktop\esetsmartinstaller_enu.exe 2014-01-05 10:58 - 2013-11-12 23:28 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core.job 2014-01-05 06:08 - 2013-09-08 18:52 - 01434379 _____ C:\Windows\WindowsUpdate.log 2014-01-05 05:16 - 2013-09-09 00:30 - 00000000 ____D C:\Program Files (x86)\Steam 2014-01-05 04:55 - 2013-09-17 21:43 - 00000000 ____D C:\ProgramData\PMB Files 2014-01-05 02:01 - 2013-09-08 22:07 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\TS3Client 2014-01-04 18:52 - 2014-01-04 18:52 - 00000832 _____ C:\Users\FakeXero\Desktop\JRT.txt 2014-01-04 18:49 - 2014-01-04 18:49 - 00000000 ____D C:\Windows\ERUNT 2014-01-04 18:48 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-04 18:48 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-04 18:44 - 2014-01-04 18:44 - 01036305 _____ (Thisisu) C:\Users\FakeXero\Desktop\JRT.exe 2014-01-04 18:40 - 2014-01-04 18:40 - 00000580 _____ C:\Windows\PFRO.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000056 _____ C:\Windows\setupact.log 2014-01-04 18:40 - 2014-01-04 18:40 - 00000000 _____ C:\Windows\setuperr.log 2014-01-04 18:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-04 18:39 - 2014-01-04 18:27 - 00000000 ____D C:\AdwCleaner 2014-01-04 18:35 - 2013-09-09 10:26 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Xfire 2014-01-04 18:19 - 2014-01-04 18:19 - 01233962 _____ C:\Users\FakeXero\Desktop\adwcleaner.exe 2014-01-04 18:15 - 2014-01-04 18:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Malwarebytes 2014-01-04 18:14 - 2014-01-04 18:14 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-04 18:14 - 2014-01-04 18:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-04 18:11 - 2014-01-04 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\FakeXero\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-04 03:57 - 2014-01-04 03:57 - 00000000 ____D C:\FRST 2014-01-04 03:56 - 2014-01-04 03:56 - 01931368 _____ (Farbar) C:\Users\FakeXero\Desktop\FRST64.exe 2014-01-04 01:07 - 2013-11-26 03:52 - 00000403 _____ C:\Users\FakeXero\Desktop\To Do.txt 2014-01-04 00:15 - 2014-01-04 00:15 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Mozilla 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-04 00:14 - 2014-01-04 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-03 23:07 - 2014-01-03 19:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Natural Selection 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\Documents\Witcher 2 2014-01-03 19:36 - 2014-01-03 19:36 - 00000000 ____D C:\Users\FakeXero\AppData\Local\The Witcher 2 2014-01-03 19:23 - 2014-01-03 19:23 - 00000000 ____D C:\Users\FakeXero\Documents\WB Games 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Downloaded Installations 2014-01-03 19:22 - 2014-01-03 19:22 - 00000000 ____D C:\Program Files (x86)\AMD 2014-01-03 19:00 - 2014-01-03 06:16 - 00000218 _____ C:\Users\FakeXero\Desktop\Natural Selection 2.url 2014-01-03 06:16 - 2014-01-03 06:16 - 00000221 _____ C:\Users\FakeXero\Desktop\The Witcher 2 Assassins of Kings Enhanced Edition.url 2014-01-03 06:16 - 2013-09-09 15:00 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-01-03 06:15 - 2014-01-03 06:15 - 00000222 _____ C:\Users\FakeXero\Desktop\Batman Arkham City GOTY.url 2014-01-03 06:15 - 2014-01-03 06:15 - 00000219 _____ C:\Users\FakeXero\Desktop\Dota 2.url 2014-01-02 18:00 - 2013-09-08 18:52 - 00000000 ____D C:\Users\FakeXero 2014-01-02 17:58 - 2013-09-08 19:44 - 00000000 ____D C:\Windows\Panther 2014-01-01 05:13 - 2013-09-13 14:22 - 00000000 ____D C:\Users\FakeXero\AppData\Local\InfiniteCrisis 2014-01-01 05:06 - 2013-09-09 09:14 - 00000000 ____D C:\Program Files (x86)\InfiniteCrisis 2013-12-31 17:27 - 2013-09-09 09:35 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\vlc 2013-12-31 16:55 - 2013-12-31 16:50 - 187096264 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (10).mp4 2013-12-31 16:48 - 2013-12-31 16:41 - 192528314 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (9).mp4 2013-12-31 16:41 - 2013-12-31 16:34 - 185036738 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (8).mp4 2013-12-31 15:59 - 2013-12-31 15:50 - 187458102 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (7).mp4 2013-12-31 15:50 - 2013-12-31 15:41 - 187205223 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (6).mp4 2013-12-31 15:41 - 2013-12-31 15:33 - 187240635 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (5).mp4 2013-12-31 15:27 - 2013-12-31 15:19 - 185046698 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (4).mp4 2013-12-31 14:56 - 2013-12-31 14:52 - 183236863 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (3).mp4 2013-12-31 14:43 - 2013-12-31 14:39 - 183353896 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (2).mp4 2013-12-31 14:37 - 2013-12-31 14:34 - 187145316 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.30.HDTV Pttt1 (1).mp4 2013-12-29 11:18 - 2013-12-29 11:18 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Injustice 2013-12-29 04:25 - 2013-12-29 04:25 - 00000222 _____ C:\Users\FakeXero\Desktop\Injustice Gods Among Us Ultimate Edition.url 2013-12-26 23:11 - 2013-12-26 21:00 - 00000000 ____D C:\Users\FakeXero\Desktop\Left4Uncut [09.07.2013] 2013-12-26 13:25 - 2013-12-25 11:00 - 00008449 _____ C:\Users\FakeXero\Documents\TombRaider.log 2013-12-26 12:30 - 2013-12-26 12:30 - 00000221 _____ C:\Users\FakeXero\Desktop\Command and Conquer 4 Tiberian Twilight.url 2013-12-24 22:53 - 2013-12-24 22:51 - 166524685 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (9).mp4 2013-12-24 21:58 - 2013-12-24 21:56 - 166149172 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (8).mp4 2013-12-24 21:47 - 2013-12-24 21:46 - 167363967 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (7).mp4 2013-12-24 21:42 - 2013-12-24 21:40 - 164603080 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (6).mp4 2013-12-24 21:39 - 2013-12-24 21:37 - 167099405 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (5).mp4 2013-12-24 21:37 - 2013-12-24 21:35 - 167984012 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (4).mp4 2013-12-24 21:33 - 2013-12-24 21:31 - 170321761 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (3).mp4 2013-12-24 21:31 - 2013-12-24 21:29 - 168523899 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (2).mp4 2013-12-24 21:29 - 2013-12-24 21:27 - 167438041 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.2013.12.23.HDTV Ptt1 (1).mp4 2013-12-23 22:30 - 2013-12-03 19:12 - 00000000 ____D C:\Users\FakeXero\AppData\Local\Battle.net 2013-12-22 07:55 - 2013-12-22 07:51 - 00015128 _____ C:\Users\FakeXero\Desktop\LoLChamps.ods 2013-12-22 07:21 - 2013-12-21 21:09 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Sword of the Stars - The Pit 2013-12-21 20:54 - 2013-12-21 20:54 - 00000222 _____ C:\Users\FakeXero\Desktop\Sword of the Stars The Pit.url 2013-12-21 12:35 - 2013-12-03 19:15 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2013-12-21 12:24 - 2013-12-03 19:12 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-12-20 14:52 - 2013-12-20 14:50 - 183868192 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (6).mp4 2013-12-20 14:50 - 2013-12-20 14:46 - 184158861 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (5).mp4 2013-12-20 14:46 - 2013-12-20 14:43 - 186191406 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (4).mp4 2013-12-20 14:35 - 2013-12-20 14:33 - 169474939 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (3).mp4 2013-12-20 14:31 - 2013-12-20 14:28 - 176575512 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (2).mp4 2013-12-20 14:28 - 2013-12-20 14:25 - 178054790 _____ C:\Users\FakeXero\Downloads\Rulez.T.F.R.2013.12.19.HDTV Ptt1 (1).mp4 2013-12-18 17:57 - 2013-09-09 10:26 - 00000000 ____D C:\ProgramData\Xfire 2013-12-17 14:13 - 2013-12-17 14:10 - 151197078 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (8).avi 2013-12-17 14:13 - 2013-12-17 14:10 - 150336386 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (9).avi 2013-12-17 14:09 - 2013-12-17 14:07 - 151396560 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (6).avi 2013-12-17 14:09 - 2013-12-17 14:07 - 150248150 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (7).avi 2013-12-17 13:25 - 2013-12-17 13:21 - 150560420 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (5).avi 2013-12-17 13:25 - 2013-12-17 13:20 - 151747544 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (3).avi 2013-12-17 13:24 - 2013-12-17 13:20 - 150884876 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (4).avi 2013-12-17 13:00 - 2013-12-17 12:59 - 150539124 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (2).avi 2013-12-17 12:57 - 2013-12-17 12:55 - 150413612 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.12.16.13.HQ Ptt1 (1).avi 2013-12-16 12:30 - 2013-12-16 12:28 - 185592090 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (9).avi 2013-12-16 12:28 - 2013-12-16 12:25 - 185548998 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (8).avi 2013-12-16 12:24 - 2013-12-16 12:22 - 191395424 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (7).avi 2013-12-16 12:21 - 2013-12-16 12:19 - 180541872 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (6).avi 2013-12-16 12:18 - 2013-12-16 12:16 - 187082190 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (5).avi 2013-12-16 12:16 - 2013-12-16 12:14 - 186891360 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (4).avi 2013-12-16 12:13 - 2013-12-16 12:11 - 186284466 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (3).avi 2013-12-16 12:11 - 2013-12-16 12:09 - 185554554 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (2).avi 2013-12-16 12:08 - 2013-12-16 12:06 - 185458436 _____ C:\Users\FakeXero\Downloads\Rulez.CLT..2013.HQ Ptt1 (1).avi 2013-12-16 06:00 - 2013-12-16 06:00 - 00000000 ____D C:\Users\FakeXero\Downloads\LittleV 2013-12-16 05:41 - 2013-12-16 05:41 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2013-12-12 12:48 - 2013-09-08 21:56 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-12 12:48 - 2013-09-08 21:55 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-12 12:48 - 2013-09-08 21:55 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-12 11:40 - 2013-12-12 11:40 - 00000000 ____D C:\Users\FakeXero\Downloads\PCB.Zeugz 2013-12-11 08:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-11 04:26 - 2009-07-14 18:58 - 00698688 _____ C:\Windows\system32\perfh007.dat 2013-12-11 04:26 - 2009-07-14 18:58 - 00148828 _____ C:\Windows\system32\perfc007.dat 2013-12-11 04:26 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-11 04:19 - 2009-07-14 05:45 - 00293320 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 00:47 - 2013-12-11 00:47 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\dvdcss 2013-12-10 20:35 - 2013-12-10 17:03 - 00000000 ____D C:\Users\FakeXero\AppData\Roaming\Awesomium 2013-12-10 18:53 - 2013-12-10 18:51 - 177605473 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (8).mp4 2013-12-10 18:51 - 2013-12-10 18:49 - 171922999 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (7).mp4 2013-12-10 18:49 - 2013-12-10 18:38 - 179078158 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (6).mp4 2013-12-10 18:42 - 2013-12-10 18:30 - 175850535 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (5).mp4 2013-12-10 17:55 - 2013-12-10 17:44 - 176607888 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (3).mp4 2013-12-10 17:54 - 2013-12-10 17:52 - 168445606 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (4).mp4 2013-12-10 17:42 - 2013-12-10 17:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2013-12-10 17:30 - 2013-12-10 17:25 - 177013285 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (2).mp4 2013-12-10 17:06 - 2013-12-10 17:04 - 176065623 _____ C:\Users\FakeXero\Downloads\Rulez.MNR.9th.Dec.2013.HD Ptt1 (1).mp4 2013-12-10 17:02 - 2013-12-10 17:02 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-10 16:59 - 2013-09-08 21:23 - 01591896 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-10 01:09 - 2013-12-10 01:09 - 00002223 _____ C:\Users\FakeXero\AppData\Roaming\Microsoft\Windows\Start Menu\Infinity Wars.lnk 2013-12-10 01:09 - 2013-12-10 01:09 - 00002199 _____ C:\Users\FakeXero\Desktop\Infinity Wars.lnk 2013-12-10 01:08 - 2013-12-10 01:08 - 00000000 ____D C:\Program Files (x86)\Lightmare Studios 2013-12-10 01:07 - 2013-12-10 01:01 - 29011103 _____ C:\Users\FakeXero\Downloads\Infinity_Wars_Windows_Setup.exe 2013-12-07 16:21 - 2013-12-07 16:21 - 00000219 _____ C:\Users\FakeXero\Desktop\Counter-Strike Global Offensive.url 2013-12-06 10:39 - 2013-11-12 23:28 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000UA 2013-12-06 10:39 - 2013-11-12 23:28 - 00003712 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2014571364-2941184955-3617471177-1000Core Some content of TEMP: ==================== C:\Users\FakeXero\AppData\Local\Temp\avgnt.exe C:\Users\FakeXero\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-03 06:58 ==================== End Of Log ============================ --- --- --- --- --- --- Weitere Probleme hatte ich bisher nicht, gesurft habe ich aber auch nicht so viel. Mich interessiert was das wohl war. Kann das irgendein Script gewesen sein, das durch infizierte Werbung in den Firefox Temp Order gekommen is? Wenn ich zB lese, dass das jemand nach nem Besuch auf chip.de hatte... |
06.01.2014, 16:51 | #6 |
/// the machine /// TB-Ausbilder | Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ Möglich, auf jeden Fall war es Adware. Fertig Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ |
07.01.2014, 08:10 | #7 |
| Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ Ist das denn normal, dass der SecurityCheck meint, dass mein OS nicht passt? oO |
07.01.2014, 13:16 | #8 |
/// the machine /// TB-Ausbilder | Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ SecurityCheck ist ne Zicke, warscheinlich wird es nach nem Reboot des Rechners auch irgendwann laufen, kannste ignorieren
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.01.2014, 07:20 | #9 |
| Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ Jo, is ne Zicke.^^ Hier is das Log: Code:
ATTFilter Results of screen317's Security Check version 0.99.78 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 11.8.800.94 Adobe Reader XI Mozilla Firefox (26.0) Mozilla Thunderbird (17.0.8) Google Chrome 31.0.1650.57 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
08.01.2014, 12:29 | #10 |
/// the machine /// TB-Ausbilder | Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Veralteter Browser erkannt: http://www.updating-your-browser.com/Firefox-DE/ |
adblock, aggro, board, branding, browser, cursor, erkannt, firefox, heute, hilfe, lange, league of legends, neuen, neuer, ntdll.dll, plug-in, poste, probleme, refresh, schonmal, sobald, surfe, surfen, tab, tagen, titel, veralteter browser, webseite, webseiten, werbung, wörter, öffnet |