Hallo liebe Community,
ich habe gerade ein wenig Angst, dass mein PC infiziert ist!
Hier ein Screenshot des Alarms:


Ist das wirklich ein Virus?
Wenn ja wie entferne ich ihn?

Brauche dringend Hilfe!

Ich lasse momentan mehrere Antiviren Softwares meinen PC durchsuchen..

Lg
Andi

Hallo Andi,

was Avira da meldet, tönt auf den ersten Blick harmlos (Adware).
Aber lass uns das genauer anschauen:


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Danke schonmal!
Hier die beiden Text Dateien:

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-01-2014
Ran by andi_000 at 2014-01-04 19:52:56
Running from C:\Users\andi_000\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe After Effects CS6 (x32 Version: 11 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.6.0.6090 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.6.0.6090 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.202 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Apple Application Support (x32 Version: 2.3 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Arma 2 (x32 Version:  - Bohemia Interactive)
ARMA 2: British Armed Forces - Data cache removal (x32 Version:  - )
Arma 2: British Armed Forces (x32 Version:  - Bohemia Interactive)
Arma 2: DayZ Mod (x32 Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (x32 Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (x32 Version:  - )
ARMA 2: Private Military Company - Data cache removal (x32 Version:  - )
Arma 2: Private Military Company (x32 Version:  - Bohemia Interactive)
Assassin's Creed (x32 Version: 1.02 - Ubisoft)
Assassin's Creed Brotherhood (x32 Version:  - Ubisoft Montreal)
aTube Catcher (x32 Version: 2.9.1416 - DsNET Corp)
Audacity 2.0.3 (x32 Version: 2.0.3 - Audacity Team)
AutoHotkey 1.1.09.04 (Version: 1.1.09.04 - Lexikos)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Bandicam (x32 Version: 1.8.9.371 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (x32 Version:  - Bandisoft.com)
Battlefield 1942™ (x32 Version: 1.6.20.0 - Electronic Arts)
Battlefield 3™ (x32 Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ Beta (x32 Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 2.3.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (x32 Version:  - )
BattlEye Uninstall (x32 Version:  - )
Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blender (Version: 2.67b - Blender Foundation)
Blobby Volley 2 Version 1.0RC3 (x32 Version:  - )
Borderlands 2 (x32 Version:  - Gearbox Software)
Botanicula (x32 Version: 1.0 - Daedalic Entertainment)
Call of Duty: Black Ops II - Multiplayer (x32 Version:  - )
Call of Duty: Black Ops II - Zombies (x32 Version:  - )
Call of Duty: Black Ops II (x32 Version:  - )
Call of Duty: Modern Warfare 2 - Multiplayer (x32 Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Dedicated Server (x32 Version:  - Infinity Ward - Sledgehammer Games)
CamStudio 2.7.2 (Version: 2.7.2 - CamStudio Open Source)
Counter-Strike: Global Offensive (x32 Version:  - Valve)
Crysis 2 Maximum Edition (x32 Version:  - Crytek Studios)
DayZ Commander (x32 Version: 0.92.91 - Dotjosh Studios)
Dojotech Spotify Recorder (x32 Version: 3.3 - Dojotech Software)
Dota 2 (x32 Version:  - Valve )
Draw a Stickman: EPIC (x32 Version:  - Hitcents)
Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20810.00 - Microsoft Corporation)
Erforderliche Komponenten für SSDT  (x32 Version: 11.0.2100.60 - Microsoft Corporation)
ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)
Euro Truck Simulator 2 (x32 Version: 1.5.2 - SCS Software)
FileZilla Client 3.7.1 (x32 Version: 3.7.1 - FileZilla Project)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.27.0 - MAGIX AG)
Fraps (remove only) (x32 Version:  - )
Garry's Mod (x32 Version:  - Garry)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GIMP 2.8.6 (Version: 2.8.6 - The GIMP Team)
Google Chrome (HKCU Version: 31.0.1650.63 - Google Inc.)
Grand Theft Auto IV (x32 Version:  - Rockstar North)
GS Supporter 1.80 (x32 Version:  - Verified Publisher) <==== ATTENTION
Half-Life 2 (x32 Version:  - Valve)
IcoFX 1.6.4 (x32 Version:  - )
Infestation Survivor Stories version 1.0 (x32 Version: 1.0 - OP Productions LLC)
Java 7 Update 25 (x32 Version: 7.0.250 - Oracle)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 25 (x32 Version: 1.7.0.250 - Oracle)
LAME v3.99.3 (for Windows) (x32 Version:  - )
League of Legends (x32 Version: 1.3 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (x32 Version:  - Valve)
LinuxLive USB Creator (x32 Version: 2.8 - Thibaut Lauziere)
LogMeIn Hamachi (x32 Version: 2.2.0.100 - LogMeIn, Inc.)
Loksim3D (Version: 2.8.1 - Loksim3D)
MAGIX Screenshare (x32 Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6 - MAGIX AG)
MAGIX Video deluxe 17 Plus Sonderedition (x32 Version: 10.0.12.2 - MAGIX AG)
MAGIX Video deluxe 17 Plus Sonderedition (x32 Version: 10.0.12.2 - MAGIX AG) Hidden
MAGIX Video deluxe 17 Plus Sonderedition Video Plugins (x32 Version: 1.0.0.0 - MAGIX AG)
ManyCam 3.1.59 (x32 Version: 3.1.59 - ManyCam LLC)
MediaFire Express (x32 Version: 0.15.4.4888 - MediaFire)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709 - Microsoft Corporation)
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Flight (x32 Version:  - )
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.0.30717.9005 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x32 Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (x32 Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727.42 - Microsoft Corporation)
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60 - Microsoft Corporation)
Mirror's Edge (x32 Version:  - DICE)
MorphVOX Pro (x32 Version: 4.4.7 - Screaming Bee)
Mouse Editor (x32 Version: 10.05.0004 - Ihr Firmenname)
MOUSE Editor (x32 Version: 10.05.0004 - Ihr Firmenname) Hidden
MouseFIGHTER (x32 Version: 6.0 - Phonepilot)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 24.0 (x86 de) (x32 Version: 24.0 - Mozilla)
MSI Afterburner 2.3.1 (x32 Version: 2.3.1 - MSI Co., LTD)
Need for Speed™ Most Wanted (x32 Version:  - )
NewBlue Light Rays for Magix (x32 Version: 1.4 - NewBlue)
NewBlue Lightning for Magix (x32 Version: 1.4 - NewBlue)
Notepad++ (x32 Version: 6.4.4 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.7 (Version: 1.7 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.140.952 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 9.3.16 (Version: 9.3.16 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 9.3.16 (Version: 9.3.16 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 9.3.16 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9 - NVIDIA Corporation)
Origin (x32 Version: 9.1.13.85 - Electronic Arts, Inc.)
Pando Media Booster (x32 Version: 2.6.0.9 - Pando Networks Inc.)
PhotoLine 18.0.0.0 (Version: 18.0.0.0 - Computerinsel GmbH)
Pirate Galaxy (HKCU Version: 12345.0.0.0 - Splitscreen Studios GmbH)
PunkBuster Services (x32 Version: 0.991 - Even Balance, Inc.)
QuickTime (x32 Version: 7.73.80.64 - Apple Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Recorder for Spotify Version 2.0 (x32 Version: 2.0 - Manuel)
Resource Hacker Version 3.6.0 (x32 Version:  - )
ROCCAT Power-Grid Version 0.458 (x32 Version: 0.458 - ROCCAT GmbH)
S4 League_EU (x32 Version: 1.00.0000 - )
SHARKOON Skiller (x32 Version: 1.00.0000 - )
SHIELD Streaming (Version: 1.6.34 - NVIDIA Corporation) Hidden
SimCity™ (x32 Version: 1.0.0.0 - Electronic Arts)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SpeedBit Video Accelerator (x32 Version: 3375(build_3056) - SpeedBit Ltd.)
Spotify (HKCU Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Team Fortress 2 (x32 Version:  - Valve)
TeamSpeak 3 Client (Version: 3.0.10.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (x32 Version: 9.0.24951 - TeamViewer)
Terraria (x32 Version:  - Re-Logic)
Torchlight II (x32 Version:  - Runic Games)
Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT)
Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.50727 - Microsoft Corporation)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (x32 Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 Update 3 (KB2707250) (x32 Version: 11.0.60610 - Microsoft Corporation)
VLC media player 2.0.7 (Version: 2.0.7 - VideoLAN)
Webocton - Scriptly 0.8.95.6 (x32 Version: 0.8.95.6 - Webocton)
Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH)
XAMPP (x32 Version: 1.8.3-1 - BitNami)
Xfire 2.0 (x32 Version: 2.0 - Xfire, Inc.)
Xfire Codec (remove only) (x32 Version:  - )
Zerius Vocoder (remove only) (x32 Version:  - )

==================== Restore Points  =========================

16-12-2013 18:01:17 Windows Update
23-12-2013 14:24:04 Windows Modules Installer
28-12-2013 13:19:15 DirectX wurde installiert
29-12-2013 17:50:09 DirectX wurde installiert
03-01-2014 21:14:07 Removed Java 7 Update 45 (64-bit)

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {05A21CCB-76D2-4B23-87FB-9A700A72640A} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-andi@pl32.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\System32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6F7E29A9-293C-4CE4-AED5-9C45D7261975} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001UA => C:\Users\andi_000\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-07] (Google Inc.)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {82D76CC4-CC84-4222-8310-DC8AE30EFF76} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\System32\MRT.exe [2013-12-16] (Microsoft Corporation)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E86239F7-695A-4815-A8A6-BBDD771CD30F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001Core => C:\Users\andi_000\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-07] (Google Inc.)
Task: {EE8F3044-0DF6-4DAA-A5CD-91CA377AFC7C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-04] (AVAST Software)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001Core.job => C:\Users\andi_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001UA.job => C:\Users\andi_000\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2013-02-27 16:15 - 2013-10-24 14:20 - 00302056 _____ () C:\Program Files\TeamSpeak3Client\soundbackends\directsound_win64.dll
2013-02-27 16:15 - 2013-10-24 14:20 - 00320488 _____ () C:\Program Files\TeamSpeak3Client\soundbackends\windowsaudiosession_win64.dll
2013-02-27 16:15 - 2013-10-24 14:20 - 00186344 _____ () C:\Program Files\TeamSpeak3Client\plugins\appscanner_plugin.dll
2013-02-27 16:15 - 2013-10-24 14:20 - 00565224 _____ () C:\Program Files\TeamSpeak3Client\plugins\clientquery_plugin.dll
2013-09-10 14:10 - 2013-10-24 14:20 - 00700904 _____ () C:\Program Files\TeamSpeak3Client\plugins\teamspeak_control_plugin.dll
2013-10-06 08:39 - 2013-10-06 08:39 - 00657016 _____ () C:\Program Files\Common Files\SpeedBit\SBUpdate\sbei64.dll
2014-01-03 16:00 - 2014-01-03 16:00 - 02759168 _____ () C:\Program Files (x86)\GS Supporter\Assistant_x64.dll
2013-11-23 16:09 - 2013-10-31 19:25 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-03 16:00 - 2014-01-03 16:00 - 03041792 _____ () C:\Program Files (x86)\GS Supporter\Assistant.dll
2013-10-06 08:39 - 2013-10-06 08:39 - 00429176 _____ () C:\Program Files\Common Files\SpeedBit\SBUpdate\sbei32.dll
2014-01-03 16:00 - 2014-01-03 16:00 - 00146768 _____ () C:\Program Files (x86)\GS Supporter\AssistantSvc.dll
2013-03-12 17:10 - 2013-11-06 22:48 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-03-15 17:29 - 2013-12-11 20:40 - 01135016 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-03-14 21:19 - 2013-11-06 22:48 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-12-11 09:51 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-12-11 09:51 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-12-11 09:51 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-04-08 13:05 - 2013-04-08 13:05 - 00127488 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_Wheel4D.dll
2013-04-08 13:05 - 2013-04-08 13:05 - 00111616 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_MouseDeviceManager.dll
2013-04-08 13:05 - 2013-04-08 13:05 - 00094208 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_ZoomControl.dll
2013-04-08 13:05 - 2013-04-08 13:05 - 00062976 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_ScrollbarControl.dll
2013-04-08 13:05 - 2013-04-08 13:05 - 00069632 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_AnalyzeGesturesInRight.dll
2013-04-08 13:05 - 2013-04-08 13:05 - 00069632 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_AnalyzeGesturesInOne.dll
2013-04-08 13:05 - 2013-04-08 13:05 - 00043008 _____ () C:\Program Files (x86)\MOUSE Editor\Data\MouseEditor\Forms\OSD_Text\OSD_Text.dll
2013-04-26 14:32 - 2013-11-23 16:25 - 00064000 _____ () C:\Program Files (x86)\Origin\tufao.dll
2013-06-18 21:08 - 2013-06-18 21:08 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-08-27 22:11 - 2013-12-06 17:11 - 36967424 _____ () C:\Users\andi_000\AppData\Roaming\Spotify\Data\libcef.dll
2013-09-23 13:50 - 2013-12-06 17:11 - 00887808 _____ () C:\Users\andi_000\AppData\Roaming\Spotify\Data\libglesv2.dll
2013-09-23 13:50 - 2013-12-06 17:11 - 00109568 _____ () C:\Users\andi_000\AppData\Roaming\Spotify\Data\libegl.dll
2013-10-06 08:39 - 2013-10-06 08:39 - 00513656 _____ () C:\Program Files\Common Files\SpeedBit\SBUpdate\sbfi32.dll
2013-12-12 20:07 - 2013-12-12 20:07 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-04 19:02 - 2013-12-17 09:09 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13121700\algo.dll
2014-01-04 19:04 - 2014-01-03 19:28 - 02152960 _____ () C:\Program Files\AVAST Software\Avast\defs\14010300\algo.dll
2014-01-04 19:02 - 2014-01-04 19:02 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\andi_000\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\andi_000\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/04/2014 07:47:34 PM) (Source: Application Hang) (User: )
Description: Programm wwahost.exe, Version 6.3.9600.16431 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1368

Startzeit: 01cf097cb781809b

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\syswow64\wwahost.exe

Berichts-ID: ac092eb3-7570-11e3-beb5-d43d7e38385d

Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_2.3.0.1008_x86__kzf8qxf38zg5c

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (01/04/2014 07:32:50 PM) (Source: Application Hang) (User: )
Description: Programm wwahost.exe, Version 6.3.9600.16431 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2014

Startzeit: 01cf097a9f082180

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\syswow64\wwahost.exe

Berichts-ID: 9614bd60-756e-11e3-beb5-d43d7e38385d

Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_2.3.0.1008_x86__kzf8qxf38zg5c

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (01/04/2014 03:30:40 PM) (Source: Application Hang) (User: )
Description: Programm blender.exe, Version 2.6.7.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1760

Startzeit: 01cf0958f78df3e9

Endzeit: 19

Anwendungspfad: C:\Program Files\Blender Foundation\Blender\blender.exe

Berichts-ID: c64e8ebb-754c-11e3-beb5-d43d7e38385d

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/04/2014 03:25:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: yct.exe, Version: 3.8.0.1416, Zeitstempel: 0x5195b874
Name des fehlerhaften Moduls: MSVBVM60.DLL, Version: 6.0.98.15, Zeitstempel: 0x49b01fc3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000ca7d1
ID des fehlerhaften Prozesses: 0x168
Startzeit der fehlerhaften Anwendung: 0xyct.exe0
Pfad der fehlerhaften Anwendung: yct.exe1
Pfad des fehlerhaften Moduls: yct.exe2
Berichtskennung: yct.exe3
Vollständiger Name des fehlerhaften Pakets: yct.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: yct.exe5

Error: (01/04/2014 03:25:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: eWorker.exe, Version: 2.0.0.122, Zeitstempel: 0x500d1b2a
Name des fehlerhaften Moduls: MSVBVM60.DLL, Version: 6.0.98.15, Zeitstempel: 0x49b01fc3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000c97bd
ID des fehlerhaften Prozesses: 0xc6c
Startzeit der fehlerhaften Anwendung: 0xeWorker.exe0
Pfad der fehlerhaften Anwendung: eWorker.exe1
Pfad des fehlerhaften Moduls: eWorker.exe2
Berichtskennung: eWorker.exe3
Vollständiger Name des fehlerhaften Pakets: eWorker.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: eWorker.exe5

Error: (01/03/2014 10:14:17 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (01/03/2014 06:22:58 PM) (Source: Application Hang) (User: )
Description: Programm wwahost.exe, Version 6.3.9600.16431 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: f4c

Startzeit: 01cf08a7a96d6fa0

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\syswow64\wwahost.exe

Berichts-ID: a6615b64-749b-11e3-beb5-d43d7e38385d

Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_2.3.0.1008_x86__kzf8qxf38zg5c

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (01/02/2014 05:02:59 PM) (Source: Application Hang) (User: )
Description: Programm 7zFM.exe, Version 9.20.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: d94

Startzeit: 01cf07d40cf1a9f1

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\7-Zip\7zFM.exe

Berichts-ID: 58ad0fa7-73c7-11e3-beb5-d43d7e38385d

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/02/2014 00:01:07 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.3.9600.16384, Zeitstempel: 0x52158827
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16408, Zeitstempel: 0x523d45fa
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000e2fd8
ID des fehlerhaften Prozesses: 0x1e7c
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe0
Pfad der fehlerhaften Anwendung: rundll32.exe1
Pfad des fehlerhaften Moduls: rundll32.exe2
Berichtskennung: rundll32.exe3
Vollständiger Name des fehlerhaften Pakets: rundll32.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: rundll32.exe5

Error: (01/01/2014 07:42:43 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]


System errors:
=============
Error: (01/04/2014 01:27:04 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (01/04/2014 01:24:41 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252.

Error: (01/03/2014 01:34:19 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (01/03/2014 01:31:56 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252.

Error: (01/02/2014 02:22:37 PM) (Source: Ntfs) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "??" wurde eine Beschädigung erkannt.

Die genaue Art der Beschädigung ist unbekannt. Die Dateisystemstrukturen müssen online überprüft werden.

Error: (01/02/2014 02:22:37 PM) (Source: Ntfs) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "??" wurde eine Beschädigung erkannt.

Die genaue Art der Beschädigung ist unbekannt. Die Dateisystemstrukturen müssen online überprüft werden.

Error: (01/02/2014 02:22:37 PM) (Source: Ntfs) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "??" wurde eine Beschädigung erkannt.

Die genaue Art der Beschädigung ist unbekannt. Die Dateisystemstrukturen müssen online überprüft werden.

Error: (01/02/2014 02:22:37 PM) (Source: Ntfs) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "??" wurde eine Beschädigung erkannt.

Die genaue Art der Beschädigung ist unbekannt. Die Dateisystemstrukturen müssen online überprüft werden.

Error: (01/02/2014 02:22:37 PM) (Source: Ntfs) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "??" wurde eine Beschädigung erkannt.

In einer Indexstruktur des Dateisystems wurde eine Beschädigung gefunden. Die Dateireferenznummer ist 0x5000000000005. Der Name der Datei ist "\". Das Attribut des beschädigten Indexes ist ":$I30:$INDEX_ALLOCATION".

Error: (01/02/2014 11:31:44 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


Microsoft Office Sessions:
=========================
Error: (01/04/2014 07:47:34 PM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.16431136801cf097cb781809b4294967295C:\WINDOWS\syswow64\wwahost.exeac092eb3-7570-11e3-beb5-d43d7e38385dMicrosoft.SkypeApp_2.3.0.1008_x86__kzf8qxf38zg5cApp

Error: (01/04/2014 07:32:50 PM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.16431201401cf097a9f0821804294967295C:\WINDOWS\syswow64\wwahost.exe9614bd60-756e-11e3-beb5-d43d7e38385dMicrosoft.SkypeApp_2.3.0.1008_x86__kzf8qxf38zg5cApp

Error: (01/04/2014 03:30:40 PM) (Source: Application Hang)(User: )
Description: blender.exe2.6.7.0176001cf0958f78df3e919C:\Program Files\Blender Foundation\Blender\blender.exec64e8ebb-754c-11e3-beb5-d43d7e38385d

Error: (01/04/2014 03:25:44 PM) (Source: Application Error)(User: )
Description: yct.exe3.8.0.14165195b874MSVBVM60.DLL6.0.98.1549b01fc3c0000005000ca7d116801cf0958d2060d82C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exeC:\WINDOWS\SYSTEM32\MSVBVM60.DLL186094d3-754c-11e3-beb5-d43d7e38385d

Error: (01/04/2014 03:25:42 PM) (Source: Application Error)(User: )
Description: eWorker.exe2.0.0.122500d1b2aMSVBVM60.DLL6.0.98.1549b01fc3c0000005000c97bdc6c01cf0958d820986bC:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\eWorker.exeC:\WINDOWS\SYSTEM32\MSVBVM60.DLL16be0552-754c-11e3-beb5-d43d7e38385d

Error: (01/03/2014 10:14:17 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (01/03/2014 06:22:58 PM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.16431f4c01cf08a7a96d6fa04294967295C:\WINDOWS\syswow64\wwahost.exea6615b64-749b-11e3-beb5-d43d7e38385dMicrosoft.SkypeApp_2.3.0.1008_x86__kzf8qxf38zg5cApp

Error: (01/02/2014 05:02:59 PM) (Source: Application Hang)(User: )
Description: 7zFM.exe9.20.0.0d9401cf07d40cf1a9f14294967295C:\Program Files\7-Zip\7zFM.exe58ad0fa7-73c7-11e3-beb5-d43d7e38385d

Error: (01/02/2014 00:01:07 AM) (Source: Application Error)(User: )
Description: rundll32.exe6.3.9600.1638452158827ntdll.dll6.3.9600.16408523d45fac0000374000e2fd81e7c01cf074559ac437fC:\WINDOWS\SysWOW64\rundll32.exeC:\WINDOWS\SYSTEM32\ntdll.dll98a362d9-7338-11e3-beb5-d43d7e38385d

Error: (01/01/2014 07:42:43 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD initialization failed [6]


CodeIntegrity Errors:
===================================
  Date: 2014-01-03 21:37:28.827
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-01-03 21:37:28.820
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-01-02 22:33:13.236
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-01-02 22:33:13.227
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-01-02 22:13:04.994
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-01-02 22:13:04.987
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-12-30 20:12:58.960
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-12-30 20:12:58.953
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-12-30 16:50:06.999
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-12-30 16:50:06.992
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\MBWrp64.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Percentage of memory in use: 47%
Total physical RAM: 8136.89 MB
Available physical RAM: 4288.61 MB
Total Pagefile: 16328.89 MB
Available Pagefile: 11899.3 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.17 GB) (Free:419.66 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 09C909C8)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

FRST.txt

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by andi_000 (administrator) on ANDI on 04-01-2014 19:49:46
Running from C:\Users\andi_000\Downloads
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Speedbit Ltd.) C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(SPEEDbit) C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe
(Spotify Ltd) C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Game Inc.) C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Spotify Ltd) C:\Users\andi_000\AppData\Roaming\Spotify\spotify.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak3Client\ts3client_win64.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [GamingKeyboard] - C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2349392 2013-10-31] (LogMeIn Inc.)
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\Trayserver.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-04] (AVAST Software)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)
HKCU\...\Run: [OscarEditor] - C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe [2603520 2013-04-08] ()
HKCU\...\Run: [SpeedBitVideoAccelerator] - C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe [1515688 2013-04-28] (SPEEDbit)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4284976 2013-04-30] ()
HKCU\...\Run: [Google Update] - C:\Users\andi_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-05-07] (Google Inc.)
HKCU\...\Run: [MediaFire Tray] - C:\Users\andi_000\AppData\Local\MediaFire Express\mf_systray.exe [2349640 2013-04-04] (MediaFire LLC)
HKCU\...\Run: [ManyCam] - C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe [5411664 2013-07-22] (ManyCam LLC)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-06] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\andi_000\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-06] (Spotify Ltd)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3551576 2013-11-23] (Electronic Arts)
AppInit_DLLs: C:\Program Files (x86)\GS Supporter\Assistant_x64.dll [2759168 2014-01-03] ()
AppInit_DLLs-x32: c:\progra~2\gssupp~1\assist~1.dll [3041792 2014-01-03] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCC3CCE079997CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKCU - DefaultScope {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://go.speedbit.com/search.aspx?site=shdefault&pid=s&shr=d&q={searchTerms}
SearchScopes: HKCU - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://go.speedbit.com/search.aspx?site=shdefault&pid=s&shr=d&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default
FF NetworkProxy: "http", "www-proxy.t-online.de"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\andi_000\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\andi_000\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: YouTube High Definition - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}
FF Extension: Telekom YouTube Turbo - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\info@maltegoetz.de.xpi
FF Extension: Better Battlelog (BBLog) - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi
FF Extension: NoScript - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Easy YouTube Video Downloader - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: Adblock Plus - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "sync" : {
      "dictionary" : false,
      "keep_everything_synced" : false,
      "preferences" : false,
      "priority_preferences" : false,
      "search_engines"
CHR DefaultNewTabURL: 
CHR Plugin: (Shockwave Flash) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Google Update) - C:\Users\andi_000\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Speedbit New Tab) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\palpbfjgianahgbbeodmcohjdmaelbeo\1.0_0
CHR Extension: (Gmail) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [palpbfjgianahgbbeodmcohjdmaelbeo] - C:\Program Files\Common Files\SpeedBit\SBUpdate\SpeedbitNewTab.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-04] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-11-25] ()
R2 e9f32388; C:\WINDOWS\system32\rundll32.exe [52736 2013-08-22] (Microsoft Corporation)
R2 e9f32388; C:\WINDOWS\SysWow64\rundll32.exe [49664 2013-08-22] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWow64\PnkBstrA.exe [76888 2013-11-16] ()
R2 SBUpd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2456696 2013-10-06] (Speedbit Ltd.)
R2 VideoAcceleratorService; C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [281768 2013-04-28] (SPEEDbit)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [78648 2014-01-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2014-01-04] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-04] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1034464 2014-01-04] (AVAST Software)
S1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [422216 2014-01-04] (AVAST Software)
R3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [79672 2014-01-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-04] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-31] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-09-30] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [44544 2013-01-15] (ManyCam LLC)
R3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 SBUpdd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbw.sys [41368 2013-10-06] ()
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-15] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 XFDriver64; C:\Program Files (x86)\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 19:49 - 2014-01-04 19:49 - 00020951 _____ C:\Users\andi_000\Downloads\FRST.txt
2014-01-04 19:49 - 2014-01-04 19:49 - 00000000 ____D C:\FRST
2014-01-04 19:48 - 2014-01-04 19:48 - 01931368 _____ (Farbar) C:\Users\andi_000\Downloads\FRST64.exe
2014-01-04 19:03 - 2014-01-04 19:03 - 00001982 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-04 19:03 - 2014-01-04 19:03 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\AVAST Software
2014-01-04 19:02 - 2014-01-04 19:03 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-01-04 19:02 - 2014-01-04 19:03 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-01-04 19:02 - 2014-01-04 19:02 - 01034464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00422216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-04 19:02 - 2014-01-04 19:02 - 00207904 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00082744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys.1388858583
2014-01-04 19:02 - 2014-01-04 19:02 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-04 19:02 - 2014-01-04 19:02 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-04 19:00 - 2014-01-04 19:01 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-04 18:59 - 2014-01-04 18:59 - 91412976 _____ (AVAST Software) C:\Users\andi_000\Downloads\avast_free_antivirus_setup.exe
2014-01-04 00:49 - 2014-01-04 00:49 - 00124928 ___SH C:\Users\andi_000\Desktop\Thumbs.db
2014-01-03 22:25 - 2014-01-03 22:28 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\.minecraft
2014-01-03 22:15 - 2014-01-03 22:15 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-01-03 22:15 - 2014-01-03 22:15 - 00000000 ____D C:\Program Files\Java
2014-01-03 22:13 - 2014-01-03 22:13 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(2).exe
2014-01-03 17:03 - 2014-01-03 17:03 - 00001174 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-03 16:56 - 2014-01-03 16:56 - 00386383 _____ (hxxp://magiclauncher.com) C:\Users\andi_000\Documents\MagicLauncher_1.2.5.exe
2014-01-03 16:56 - 2014-01-03 16:56 - 00001280 _____ C:\Users\andi_000\Desktop\MagicLauncher.lnk
2014-01-03 16:51 - 2014-01-03 16:51 - 00457335 _____ C:\Users\andi_000\Desktop\OptiFine_1.7.2_HD_U_A7.jar
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\SoftWarehouse
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\Program Files (x86)\GS Supporter
2014-01-03 15:59 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-03 15:46 - 2014-01-03 15:46 - 02528254 _____ () C:\Users\andi_000\Downloads\forge-1.7.2-10.12.0.985-installer-win.exe
2014-01-03 15:43 - 2014-01-03 15:43 - 00140901 _____ C:\Users\andi_000\Downloads\InvTweaks-1.50-1.4.7.zip
2014-01-02 23:34 - 2014-01-02 23:34 - 04090376 _____ C:\Users\andi_000\Desktop\PSC 1.2.1(1).zip
2014-01-02 17:28 - 2014-01-02 17:28 - 02089345 _____ C:\Users\andi_000\Downloads\Font Pack From Rated.zip
2014-01-02 17:04 - 2014-01-02 17:04 - 120232802 _____ C:\Users\andi_000\Downloads\Chain Pack.rar
2014-01-02 17:02 - 2014-01-02 17:02 - 22322246 _____ C:\Users\andi_000\Downloads\Corrupts Chain and Flare 300 Sub Pack(1).rar
2014-01-02 17:01 - 2014-01-02 17:01 - 10285472 _____ C:\Users\andi_000\Downloads\IR4Dz Chain Pack(1).rar
2014-01-02 13:53 - 2014-01-02 14:07 - 336080295 _____ C:\Users\andi_000\Downloads\GFX PACK.rar
2014-01-02 00:02 - 2014-01-02 00:02 - 00004535 _____ C:\Users\andi_000\AppData\Roaming\CamStudio.cfg
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamShapes.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamLayout.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000046 _____ C:\Users\andi_000\AppData\Roaming\Camdata.ini
2014-01-02 00:01 - 2014-01-02 00:01 - 00000861 _____ C:\Users\Public\Desktop\CamStudio.lnk
2014-01-02 00:01 - 2014-01-02 00:01 - 00000096 _____ C:\Users\andi_000\AppData\Roaming\version2.xml
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Users\andi_000\Documents\My CamStudio Temp Files
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Program Files\CamStudio 2.7
2014-01-01 23:59 - 2014-01-01 23:59 - 11613447 _____ (CamStudio Open Source                                       ) C:\Users\andi_000\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe
2014-01-01 21:33 - 2014-01-01 21:33 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel(1).zip
2014-01-01 19:42 - 2014-01-01 19:42 - 00298752 _____ C:\WINDOWS\Minidump\010114-35937-01.dmp
2013-12-30 19:19 - 2013-12-30 20:41 - 00000046 _____ C:\Users\andi_000\Desktop\motd.txt
2013-12-30 01:19 - 2013-12-30 01:20 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(1).exe
2013-12-29 23:43 - 2013-12-30 00:53 - 00000000 ____D C:\Users\andi_000\Desktop\Vanilla Server
2013-12-29 23:42 - 2013-12-29 23:43 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel.zip
2013-12-29 22:31 - 2013-12-29 22:31 - 00002126 _____ C:\Users\Public\Desktop\MorphVOX Pro.lnk
2013-12-29 22:31 - 2013-12-29 22:31 - 00000000 ____D C:\Program Files (x86)\Screaming Bee
2013-12-29 22:29 - 2013-12-29 22:29 - 05930360 _____ C:\Users\andi_000\Downloads\MorphVOXPro4_Install-1.de.exe
2013-12-29 21:58 - 2013-12-29 21:59 - 00000016 _____ C:\Users\andi_000\Desktop\Neues Textdokument.txt
2013-12-29 18:47 - 2013-12-29 18:47 - 00000222 _____ C:\Users\andi_000\Desktop\Draw a Stickman EPIC.url
2013-12-29 13:56 - 2013-12-29 13:56 - 04518970 _____ C:\Users\andi_000\Downloads\mani_admin_plugin_v1_2_22_16_csgo_windows-only.zip
2013-12-28 20:15 - 2013-12-28 20:16 - 00000000 ____D C:\Accountmanager
2013-12-28 20:13 - 2013-12-28 20:13 - 00001700 _____ C:\Users\andi_000\Desktop\Uplay.lnk
2013-12-28 13:50 - 2013-12-28 13:50 - 00000219 _____ C:\Users\andi_000\Desktop\Counter-Strike Global Offensive.url
2013-12-26 02:30 - 2013-12-26 02:30 - 00000219 _____ C:\Users\andi_000\Desktop\Left 4 Dead 2.url
2013-12-26 00:14 - 2013-12-26 00:15 - 40709052 _____ C:\Users\andi_000\Downloads\KotSv14.zip
2013-12-26 00:12 - 2013-12-26 00:12 - 04090376 _____ C:\Users\andi_000\Downloads\PSC 1.2.1.zip
2013-12-25 23:54 - 2013-12-25 23:54 - 04313250 _____ C:\Users\andi_000\Downloads\Asi-Challenge.rar
2013-12-25 23:30 - 2013-12-25 23:31 - 95670968 _____ C:\Users\andi_000\Downloads\The dropper 2 Newton VS Darwin.zip
2013-12-25 22:37 - 2013-12-25 22:37 - 16488822 _____ C:\Users\andi_000\Downloads\Snow___Snowflakes_Brushes_by_redheadstock.zip
2013-12-24 14:50 - 2013-12-24 14:50 - 00019590 _____ C:\Users\andi_000\Downloads\secretlondon_red_present.svg
2013-12-24 13:39 - 2013-12-24 13:45 - 00000000 ____D C:\Noten
2013-12-24 13:27 - 2013-07-22 12:54 - 00001536 _____ C:\Users\andi_000\Desktop\Microsoft Visual Studio - Programmieren.lnk
2013-12-24 13:25 - 2013-12-24 13:25 - 00001511 _____ C:\Users\andi_000\Desktop\Teamspeak.lnk
2013-12-24 13:19 - 2013-12-24 13:19 - 00000221 _____ C:\Users\andi_000\Desktop\Call of Duty Modern Warfare 2.url
2013-12-23 15:24 - 2013-12-23 15:24 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-23 15:23 - 2013-12-23 15:25 - 00000000 ____D C:\Users\andi_000\Documents\Bomberman
2013-12-23 15:23 - 2013-12-23 15:23 - 03822860 _____ C:\Users\andi_000\Downloads\BombermanV096Beta.zip
2013-12-23 15:23 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\New Folder (2)
2013-12-23 11:15 - 2013-12-23 11:15 - 00017159 _____ C:\Users\andi_000\Downloads\money-pot.zip
2013-12-23 11:14 - 2013-12-23 11:14 - 00041772 _____ C:\Users\andi_000\Downloads\money-pot_f
2013-12-22 15:54 - 2013-12-22 15:54 - 02061330 _____ C:\Users\andi_000\Downloads\water_video_games_landscapes_trees_sea_wood_forest_beds_steve_islands_pixels_minecraft_holidays_cine_High
2013-12-21 22:54 - 2013-12-21 22:54 - 00086458 _____ C:\Users\andi_000\Downloads\arista.zip
2013-12-21 22:48 - 2013-12-21 22:48 - 00411255 _____ C:\Users\andi_000\Downloads\snowflakes_brush_39445.zip
2013-12-18 20:24 - 2013-12-30 18:03 - 00000000 ____D C:\Users\andi_000\Documents\Musik für Handy
2013-12-16 13:56 - 2013-11-12 00:41 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-16 13:56 - 2013-11-12 00:40 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-16 13:56 - 2013-11-12 00:27 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-16 13:56 - 2013-11-12 00:24 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-16 13:56 - 2013-11-11 03:48 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-16 13:56 - 2013-11-09 12:55 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-16 13:56 - 2013-11-09 07:37 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2013-12-16 13:56 - 2013-11-09 06:56 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2013-12-16 13:56 - 2013-11-08 11:26 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2013-12-16 13:56 - 2013-11-08 06:23 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2013-12-16 13:56 - 2013-11-08 05:43 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2013-12-16 13:56 - 2013-11-08 05:42 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2013-12-16 13:56 - 2013-11-08 05:28 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-16 13:56 - 2013-11-08 05:26 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-16 13:56 - 2013-11-08 05:16 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2013-12-16 13:56 - 2013-11-08 05:15 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2013-12-16 13:56 - 2013-11-08 05:07 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2013-12-16 13:56 - 2013-11-08 04:41 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-16 13:56 - 2013-11-08 04:14 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-16 13:56 - 2013-11-05 15:19 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2013-12-16 13:56 - 2013-11-05 15:03 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-12-16 13:56 - 2013-11-05 14:57 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-12-16 13:56 - 2013-11-05 14:33 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2013-12-16 13:56 - 2013-11-05 14:32 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2013-12-16 13:56 - 2013-11-04 18:13 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-16 13:56 - 2013-11-04 18:13 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-16 13:56 - 2013-11-04 14:07 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-16 13:56 - 2013-11-04 12:50 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-16 13:56 - 2013-11-04 11:32 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-16 13:56 - 2013-11-04 03:28 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-16 13:56 - 2013-11-04 02:30 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-16 13:56 - 2013-11-01 12:39 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2013-12-16 13:56 - 2013-11-01 07:08 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2013-12-16 13:56 - 2013-11-01 06:57 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2013-12-16 13:56 - 2013-10-31 01:58 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-16 13:56 - 2013-10-31 01:42 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-16 13:56 - 2013-10-31 01:33 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2013-12-16 13:56 - 2013-10-31 01:33 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2013-12-16 13:56 - 2013-10-31 01:33 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2013-12-16 13:56 - 2013-10-31 01:33 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2013-12-16 13:56 - 2013-10-26 02:54 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2013-12-16 13:56 - 2013-10-24 10:31 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2013-12-16 13:56 - 2013-10-24 10:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2013-12-16 13:56 - 2013-10-17 12:21 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2013-12-16 13:56 - 2013-10-17 11:36 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2013-12-16 13:56 - 2013-10-05 15:21 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-16 13:56 - 2013-10-05 15:21 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-16 13:56 - 2013-10-05 13:05 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-16 13:56 - 2013-10-05 13:05 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-13 21:09 - 2013-12-13 21:09 - 03821064 _____ C:\Users\andi_000\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-12-13 15:01 - 2013-12-13 15:03 - 188802726 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.mp4
2013-12-13 14:59 - 2013-12-13 15:00 - 124148696 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.avi
2013-12-12 20:07 - 2013-12-12 20:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 16:50 - 2013-12-12 17:43 - 00000000 ____D C:\Users\andi_000\Documents\Weihnacht
2013-12-11 14:22 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-11 14:22 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-11 14:22 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-11 14:22 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-11 14:22 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-11 14:22 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-11 14:22 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-11 14:22 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-11 14:22 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-11 14:22 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-11 14:22 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-11 14:22 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-11 14:22 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-11 14:22 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2013-12-11 14:22 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2013-12-11 14:22 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-11 14:22 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-11 14:22 - 2013-11-09 07:34 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2013-12-11 14:22 - 2013-11-09 07:34 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2013-12-11 14:22 - 2013-11-09 06:52 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2013-12-11 14:22 - 2013-10-19 09:53 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2013-12-11 14:22 - 2013-10-19 08:14 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2013-12-11 14:22 - 2013-10-15 09:54 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2013-12-11 14:22 - 2013-10-15 09:03 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2013-12-11 14:21 - 2013-11-23 05:34 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 05:13 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 04:32 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-11 14:21 - 2013-11-23 04:10 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2013-12-11 14:21 - 2013-11-08 08:21 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-09 17:15 - 2014-01-03 22:15 - 00000000 ____D C:\ProgramData\Oracle
2013-12-09 17:00 - 2013-12-09 17:00 - 00489619 _____ C:\Users\andi_000\Downloads\InstallZeriusVocoder13.exe
2013-12-09 17:00 - 2013-12-09 17:00 - 00001039 _____ C:\Users\UpdatusUser\Desktop\Zerius Vocoder.lnk
2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Program Files (x86)\VocoderGUI
2013-12-09 16:58 - 2013-12-09 16:58 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64.exe
2013-12-09 16:45 - 2013-12-09 16:47 - 00013780 _____ C:\Users\andi_000\Downloads\server(2).log
2013-12-09 15:24 - 2013-12-09 15:25 - 00043113 _____ C:\Users\andi_000\Downloads\beautiful_es.zip
2013-12-07 21:34 - 2013-12-07 21:34 - 00000000 ____D C:\Users\andi_000\Documents\Fax
2013-12-06 22:04 - 2013-12-06 22:04 - 00369412 _____ C:\Users\andi_000\Downloads\minecraft_rigV2(2).zip
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2013-12-06 15:19 - 2013-12-06 15:20 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-12-06 15:19 - 2013-12-06 15:19 - 00001094 _____ C:\Users\andi_000\Desktop\MSI Afterburner.lnk
2013-12-06 15:19 - 2013-12-06 15:19 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner

==================== One Month Modified Files and Folders =======

2014-01-04 19:49 - 2014-01-04 19:49 - 00020951 _____ C:\Users\andi_000\Downloads\FRST.txt
2014-01-04 19:49 - 2014-01-04 19:49 - 00000000 ____D C:\FRST
2014-01-04 19:49 - 2013-05-07 19:18 - 00001142 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001UA.job
2014-01-04 19:48 - 2014-01-04 19:48 - 01931368 _____ (Farbar) C:\Users\andi_000\Downloads\FRST64.exe
2014-01-04 19:41 - 2013-11-20 11:11 - 00003926 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9F9F4DA0-3CD5-41A7-8828-8410B685E77B}
2014-01-04 19:12 - 2013-03-22 20:00 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\PhotoLine
2014-01-04 19:03 - 2014-01-04 19:03 - 00001982 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-04 19:03 - 2014-01-04 19:03 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\AVAST Software
2014-01-04 19:03 - 2014-01-04 19:02 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-01-04 19:03 - 2014-01-04 19:02 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-01-04 19:02 - 2014-01-04 19:02 - 01034464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00422216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-04 19:02 - 2014-01-04 19:02 - 00207904 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00082744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys.1388858583
2014-01-04 19:02 - 2014-01-04 19:02 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-04 19:02 - 2014-01-04 19:02 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-04 19:01 - 2014-01-04 19:00 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-04 19:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-04 18:59 - 2014-01-04 18:59 - 91412976 _____ (AVAST Software) C:\Users\andi_000\Downloads\avast_free_antivirus_setup.exe
2014-01-04 18:36 - 2013-08-27 22:11 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Spotify
2014-01-04 16:49 - 2013-03-22 19:45 - 00003592 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-423698434-873744686-13932946-1001
2014-01-04 16:39 - 2013-04-02 16:12 - 00000000 ____D C:\Users\andi_000\Documents\0Blender Files
2014-01-04 15:57 - 2013-11-21 19:16 - 00039936 ___SH C:\Users\andi_000\Downloads\Thumbs.db
2014-01-04 15:04 - 2013-03-22 19:48 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\TS3Client
2014-01-04 15:01 - 2013-11-01 10:46 - 00000000 ____D C:\Users\andi_000\Documents\Euro Truck Simulator 2
2014-01-04 14:57 - 2013-11-15 19:29 - 01774092 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-04 13:27 - 2013-04-02 14:55 - 00000000 ____D C:\Users\andi_000\AppData\Local\Adobe
2014-01-04 13:24 - 2013-11-16 10:26 - 00000000 __RDO C:\Users\andi_000\SkyDrive
2014-01-04 13:24 - 2013-04-26 14:29 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-04 13:24 - 2013-03-22 19:47 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-04 00:49 - 2014-01-04 00:49 - 00124928 ___SH C:\Users\andi_000\Desktop\Thumbs.db
2014-01-04 00:49 - 2013-05-07 19:18 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001Core.job
2014-01-03 22:28 - 2014-01-03 22:25 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\.minecraft
2014-01-03 22:21 - 2013-03-30 20:36 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\FileZilla
2014-01-03 22:15 - 2014-01-03 22:15 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-01-03 22:15 - 2014-01-03 22:15 - 00000000 ____D C:\Program Files\Java
2014-01-03 22:15 - 2013-12-09 17:15 - 00000000 ____D C:\ProgramData\Oracle
2014-01-03 22:13 - 2014-01-03 22:13 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(2).exe
2014-01-03 17:03 - 2014-01-03 17:03 - 00001174 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-03 17:03 - 2013-03-26 20:08 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\TeamViewer
2014-01-03 17:03 - 2013-03-26 19:50 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-03 16:56 - 2014-01-03 16:56 - 00386383 _____ (hxxp://magiclauncher.com) C:\Users\andi_000\Documents\MagicLauncher_1.2.5.exe
2014-01-03 16:56 - 2014-01-03 16:56 - 00001280 _____ C:\Users\andi_000\Desktop\MagicLauncher.lnk
2014-01-03 16:51 - 2014-01-03 16:51 - 00457335 _____ C:\Users\andi_000\Desktop\OptiFine_1.7.2_HD_U_A7.jar
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\SoftWarehouse
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\Program Files (x86)\GS Supporter
2014-01-03 16:00 - 2014-01-03 15:59 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-03 15:46 - 2014-01-03 15:46 - 02528254 _____ () C:\Users\andi_000\Downloads\forge-1.7.2-10.12.0.985-installer-win.exe
2014-01-03 15:43 - 2014-01-03 15:43 - 00140901 _____ C:\Users\andi_000\Downloads\InvTweaks-1.50-1.4.7.zip
2014-01-02 23:34 - 2014-01-02 23:34 - 04090376 _____ C:\Users\andi_000\Desktop\PSC 1.2.1(1).zip
2014-01-02 17:28 - 2014-01-02 17:28 - 02089345 _____ C:\Users\andi_000\Downloads\Font Pack From Rated.zip
2014-01-02 17:04 - 2014-01-02 17:04 - 120232802 _____ C:\Users\andi_000\Downloads\Chain Pack.rar
2014-01-02 17:02 - 2014-01-02 17:02 - 22322246 _____ C:\Users\andi_000\Downloads\Corrupts Chain and Flare 300 Sub Pack(1).rar
2014-01-02 17:01 - 2014-01-02 17:01 - 10285472 _____ C:\Users\andi_000\Downloads\IR4Dz Chain Pack(1).rar
2014-01-02 14:07 - 2014-01-02 13:53 - 336080295 _____ C:\Users\andi_000\Downloads\GFX PACK.rar
2014-01-02 13:58 - 2013-07-14 13:02 - 00000000 ____D C:\Users\andi_000\Documents\Visual Studio 2012
2014-01-02 00:03 - 2013-11-15 19:32 - 00000000 ____D C:\Users\andi_000
2014-01-02 00:02 - 2014-01-02 00:02 - 00004535 _____ C:\Users\andi_000\AppData\Roaming\CamStudio.cfg
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamShapes.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamLayout.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000046 _____ C:\Users\andi_000\AppData\Roaming\Camdata.ini
2014-01-02 00:01 - 2014-01-02 00:01 - 00000861 _____ C:\Users\Public\Desktop\CamStudio.lnk
2014-01-02 00:01 - 2014-01-02 00:01 - 00000096 _____ C:\Users\andi_000\AppData\Roaming\version2.xml
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Users\andi_000\Documents\My CamStudio Temp Files
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Program Files\CamStudio 2.7
2014-01-01 23:59 - 2014-01-01 23:59 - 11613447 _____ (CamStudio Open Source                                       ) C:\Users\andi_000\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe
2014-01-01 21:33 - 2014-01-01 21:33 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel(1).zip
2014-01-01 19:42 - 2014-01-01 19:42 - 00298752 _____ C:\WINDOWS\Minidump\010114-35937-01.dmp
2014-01-01 19:42 - 2013-11-16 10:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-01 19:42 - 2013-11-15 19:29 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-01 19:42 - 2013-08-22 15:46 - 00357010 _____ C:\WINDOWS\setupact.log
2014-01-01 19:42 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-01 19:42 - 2013-05-06 13:21 - 731731548 _____ C:\WINDOWS\MEMORY.DMP
2013-12-30 20:41 - 2013-12-30 19:19 - 00000046 _____ C:\Users\andi_000\Desktop\motd.txt
2013-12-30 18:05 - 2013-05-01 13:34 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Audacity
2013-12-30 18:03 - 2013-12-18 20:24 - 00000000 ____D C:\Users\andi_000\Documents\Musik für Handy
2013-12-30 18:02 - 2013-08-27 22:11 - 00000000 ____D C:\Users\andi_000\AppData\Local\Spotify
2013-12-30 14:24 - 2013-09-02 21:43 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Skype
2013-12-30 12:53 - 2013-04-10 14:40 - 00270408 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2013-12-30 12:53 - 2013-03-28 12:55 - 00270408 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2013-12-30 12:23 - 2013-11-19 23:16 - 00284160 ___SH C:\Users\andi_000\Documents\Thumbs.db
2013-12-30 01:20 - 2013-12-30 01:19 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(1).exe
2013-12-30 00:53 - 2013-12-29 23:43 - 00000000 ____D C:\Users\andi_000\Desktop\Vanilla Server
2013-12-29 23:43 - 2013-12-29 23:42 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel.zip
2013-12-29 22:31 - 2013-12-29 22:31 - 00002126 _____ C:\Users\Public\Desktop\MorphVOX Pro.lnk
2013-12-29 22:31 - 2013-12-29 22:31 - 00000000 ____D C:\Program Files (x86)\Screaming Bee
2013-12-29 22:31 - 2013-09-08 21:28 - 00000000 ____D C:\ProgramData\Screaming Bee
2013-12-29 22:29 - 2013-12-29 22:29 - 05930360 _____ C:\Users\andi_000\Downloads\MorphVOXPro4_Install-1.de.exe
2013-12-29 22:03 - 2013-09-30 05:14 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-29 22:03 - 2013-09-30 04:56 - 00764340 _____ C:\WINDOWS\system32\perfh007.dat
2013-12-29 22:03 - 2013-09-30 04:56 - 00159160 _____ C:\WINDOWS\system32\perfc007.dat
2013-12-29 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-12-29 21:59 - 2013-12-29 21:58 - 00000016 _____ C:\Users\andi_000\Desktop\Neues Textdokument.txt
2013-12-29 18:50 - 2013-03-23 09:27 - 00320421 _____ C:\WINDOWS\DirectX.log
2013-12-29 18:47 - 2013-12-29 18:47 - 00000222 _____ C:\Users\andi_000\Desktop\Draw a Stickman EPIC.url
2013-12-29 18:39 - 2013-03-22 20:39 - 06220854 _____ C:\Users\andi_000\Documents\PL-Wallpaper.bmp
2013-12-29 13:56 - 2013-12-29 13:56 - 04518970 _____ C:\Users\andi_000\Downloads\mani_admin_plugin_v1_2_22_16_csgo_windows-only.zip
2013-12-28 23:27 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-12-28 20:16 - 2013-12-28 20:15 - 00000000 ____D C:\Accountmanager
2013-12-28 20:13 - 2013-12-28 20:13 - 00001700 _____ C:\Users\andi_000\Desktop\Uplay.lnk
2013-12-28 19:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-12-28 13:50 - 2013-12-28 13:50 - 00000219 _____ C:\Users\andi_000\Desktop\Counter-Strike Global Offensive.url
2013-12-28 00:27 - 2013-09-02 21:42 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-28 00:27 - 2013-09-02 21:42 - 00000000 ____D C:\ProgramData\Skype
2013-12-26 02:30 - 2013-12-26 02:30 - 00000219 _____ C:\Users\andi_000\Desktop\Left 4 Dead 2.url
2013-12-26 00:15 - 2013-12-26 00:14 - 40709052 _____ C:\Users\andi_000\Downloads\KotSv14.zip
2013-12-26 00:12 - 2013-12-26 00:12 - 04090376 _____ C:\Users\andi_000\Downloads\PSC 1.2.1.zip
2013-12-25 23:54 - 2013-12-25 23:54 - 04313250 _____ C:\Users\andi_000\Downloads\Asi-Challenge.rar
2013-12-25 23:31 - 2013-12-25 23:30 - 95670968 _____ C:\Users\andi_000\Downloads\The dropper 2 Newton VS Darwin.zip
2013-12-25 22:37 - 2013-12-25 22:37 - 16488822 _____ C:\Users\andi_000\Downloads\Snow___Snowflakes_Brushes_by_redheadstock.zip
2013-12-24 14:50 - 2013-12-24 14:50 - 00019590 _____ C:\Users\andi_000\Downloads\secretlondon_red_present.svg
2013-12-24 13:45 - 2013-12-24 13:39 - 00000000 ____D C:\Noten
2013-12-24 13:25 - 2013-12-24 13:25 - 00001511 _____ C:\Users\andi_000\Desktop\Teamspeak.lnk
2013-12-24 13:19 - 2013-12-24 13:19 - 00000221 _____ C:\Users\andi_000\Desktop\Call of Duty Modern Warfare 2.url
2013-12-24 13:14 - 2013-06-18 15:51 - 00002026 _____ C:\Users\andi_000\Desktop\Blender Files.lnk
2013-12-23 21:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-12-23 15:28 - 2013-08-22 15:44 - 05059824 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-23 15:25 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\Bomberman
2013-12-23 15:24 - 2013-12-23 15:24 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-23 15:23 - 2013-12-23 15:23 - 03822860 _____ C:\Users\andi_000\Downloads\BombermanV096Beta.zip
2013-12-23 15:23 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\New Folder (2)
2013-12-23 13:15 - 2013-07-06 11:43 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\vlc
2013-12-23 11:15 - 2013-12-23 11:15 - 00017159 _____ C:\Users\andi_000\Downloads\money-pot.zip
2013-12-23 11:14 - 2013-12-23 11:14 - 00041772 _____ C:\Users\andi_000\Downloads\money-pot_f
2013-12-22 15:54 - 2013-12-22 15:54 - 02061330 _____ C:\Users\andi_000\Downloads\water_video_games_landscapes_trees_sea_wood_forest_beds_steve_islands_pixels_minecraft_holidays_cine_High
2013-12-21 22:54 - 2013-12-21 22:54 - 00086458 _____ C:\Users\andi_000\Downloads\arista.zip
2013-12-21 22:48 - 2013-12-21 22:48 - 00411255 _____ C:\Users\andi_000\Downloads\snowflakes_brush_39445.zip
2013-12-18 14:52 - 2013-11-25 14:16 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2013-12-18 14:52 - 2013-11-23 16:09 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-12-18 14:52 - 2013-11-23 16:09 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-12-16 19:05 - 2013-07-13 17:12 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-16 19:03 - 2013-03-23 21:58 - 90708896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-16 13:49 - 2013-09-29 20:04 - 00102986 _____ C:\WINDOWS\PFRO.log
2013-12-16 13:49 - 2013-08-07 19:32 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-12-16 13:49 - 2013-03-22 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 21:26 - 2013-03-28 12:55 - 00290184 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2013-12-13 21:09 - 2013-12-13 21:09 - 03821064 _____ C:\Users\andi_000\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-12-13 15:03 - 2013-12-13 15:01 - 188802726 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.mp4
2013-12-13 15:00 - 2013-12-13 14:59 - 124148696 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.avi
2013-12-12 20:07 - 2013-12-12 20:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 17:43 - 2013-12-12 16:50 - 00000000 ____D C:\Users\andi_000\Documents\Weihnacht
2013-12-09 20:09 - 2013-03-23 09:43 - 00000000 ____D C:\Fraps
2013-12-09 17:00 - 2013-12-09 17:00 - 00489619 _____ C:\Users\andi_000\Downloads\InstallZeriusVocoder13.exe
2013-12-09 17:00 - 2013-12-09 17:00 - 00001039 _____ C:\Users\UpdatusUser\Desktop\Zerius Vocoder.lnk
2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Program Files (x86)\VocoderGUI
2013-12-09 16:58 - 2013-12-09 16:58 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64.exe
2013-12-09 16:47 - 2013-12-09 16:45 - 00013780 _____ C:\Users\andi_000\Downloads\server(2).log
2013-12-09 16:38 - 2013-03-24 23:46 - 00761375 _____ () C:\Users\andi_000\Documents\FTB_Launcher.exe
2013-12-09 16:38 - 2013-03-24 23:46 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\ftblauncher
2013-12-09 15:25 - 2013-12-09 15:24 - 00043113 _____ C:\Users\andi_000\Downloads\beautiful_es.zip
2013-12-09 15:21 - 2013-04-30 17:06 - 00491823 ____H C:\Users\andi_000\Documents\Browse.plb
2013-12-08 16:52 - 2013-10-23 16:21 - 00000000 ____D C:\Users\andi_000\Documents\Marissa Titelbild
2013-12-08 00:44 - 2013-05-07 19:18 - 00004094 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001UA
2013-12-08 00:44 - 2013-05-07 19:18 - 00003714 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001Core
2013-12-07 21:34 - 2013-12-07 21:34 - 00000000 ____D C:\Users\andi_000\Documents\Fax
2013-12-07 08:29 - 2013-11-30 16:57 - 00000000 ____D C:\Users\andi_000\Documents\SimCity KEy
2013-12-06 22:04 - 2013-12-06 22:04 - 00369412 _____ C:\Users\andi_000\Downloads\minecraft_rigV2(2).zip
2013-12-06 17:46 - 2013-11-15 19:26 - 00000000 ____D C:\Windows.old
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2013-12-06 15:20 - 2013-12-06 15:19 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-12-06 15:19 - 2013-12-06 15:19 - 00001094 _____ C:\Users\andi_000\Desktop\MSI Afterburner.lnk
2013-12-06 15:19 - 2013-12-06 15:19 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner

Files to move or delete:
====================
C:\Users\andi_000\AppData\Roaming\CamLayout.ini
C:\Users\andi_000\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\andi_000\AppData\Local\Temp\avgnt.exe
C:\Users\andi_000\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\andi_000\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\andi_000\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\andi_000\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\andi_000\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\andi_000\AppData\Local\Temp\nvStInst.exe
C:\Users\andi_000\AppData\Local\Temp\sonarinst.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-02 15:23

==================== End Of Log ============================
         

--- --- ---



Da steht ja alles :O
Naja wenns sein muss..

Da steht ja alles :O
Naja wenns sein muss..

Ja da steht viel. Aber was soll man damit anfangen? Weiss ja niemand, wer du bist..

Deinstalliere entweder avast oder Avira. Es sollten nicht zwei AVPs parallel laufen.


Schritt 1

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Hier bitte der Code der Datei: "AdwCleaner[S0].txt"

# AdwCleaner v3.016 - Bericht erstellt am 04/01/2014 um 21:51:27
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 8.1 Pro  (64 bits)
# Benutzername : andi_000 - ANDI
# Gestartet von : C:\Users\andi_000\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\boost_interprocess

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\UpdateStar
Schlüssel Gelöscht : HKCU\Software\WEDLMNGR
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\PIP

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16384


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1697 octets] - [04/01/2014 20:37:55]
AdwCleaner[R1].txt - [1755 octets] - [04/01/2014 21:49:04]
AdwCleaner[S0].txt - [1351 octets] - [04/01/2014 21:51:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1411 octets] ##########
         

Lg
Andi

Hier noch die FRST.txt:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by andi_000 (administrator) on ANDI on 04-01-2014 21:56:52
Running from C:\Users\andi_000\Downloads
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Speedbit Ltd.) C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(SPEEDbit) C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe
(Spotify Ltd) C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Game Inc.) C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [GamingKeyboard] - C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2349392 2013-10-31] (LogMeIn Inc.)
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\Trayserver.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-04] (AVAST Software)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)
HKCU\...\Run: [OscarEditor] - C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe [2603520 2013-04-08] ()
HKCU\...\Run: [SpeedBitVideoAccelerator] - C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe [1515688 2013-04-28] (SPEEDbit)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4284976 2013-04-30] ()
HKCU\...\Run: [Google Update] - C:\Users\andi_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-05-07] (Google Inc.)
HKCU\...\Run: [MediaFire Tray] - C:\Users\andi_000\AppData\Local\MediaFire Express\mf_systray.exe [2349640 2013-04-04] (MediaFire LLC)
HKCU\...\Run: [ManyCam] - C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe [5411664 2013-07-22] (ManyCam LLC)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-06] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\andi_000\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-06] (Spotify Ltd)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3551576 2013-11-23] (Electronic Arts)
AppInit_DLLs: C:\Program Files (x86)\GS Supporter\Assistant_x64.dll [2759168 2014-01-03] ()
AppInit_DLLs-x32: c:\progra~2\gssupp~1\assist~1.dll [3041792 2014-01-03] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCC3CCE079997CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default
FF NetworkProxy: "http", "www-proxy.t-online.de"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\andi_000\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\andi_000\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: YouTube High Definition - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}
FF Extension: Telekom YouTube Turbo - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\info@maltegoetz.de.xpi
FF Extension: Better Battlelog (BBLog) - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi
FF Extension: NoScript - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Easy YouTube Video Downloader - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: Adblock Plus - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "sync" : {
      "dictionary" : false,
      "keep_everything_synced" : false,
      "preferences" : false,
      "priority_preferences" : false,
      "search_engines"
CHR DefaultNewTabURL: 
CHR Plugin: (Shockwave Flash) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Google Update) - C:\Users\andi_000\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Speedbit New Tab) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\palpbfjgianahgbbeodmcohjdmaelbeo\1.0_0
CHR Extension: (Gmail) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [palpbfjgianahgbbeodmcohjdmaelbeo] - C:\Program Files\Common Files\SpeedBit\SBUpdate\SpeedbitNewTab.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-04] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-11-25] ()
R2 e9f32388; C:\WINDOWS\system32\rundll32.exe [52736 2013-08-22] (Microsoft Corporation)
R2 e9f32388; C:\WINDOWS\SysWow64\rundll32.exe [49664 2013-08-22] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWow64\PnkBstrA.exe [76888 2013-11-16] ()
R2 SBUpd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2456696 2013-10-06] (Speedbit Ltd.)
R2 VideoAcceleratorService; C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [281768 2013-04-28] (SPEEDbit)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [78648 2014-01-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2014-01-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-04] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1034464 2014-01-04] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [422216 2014-01-04] (AVAST Software)
R3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [79672 2014-01-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-04] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-31] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-09-30] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [44544 2013-01-15] (ManyCam LLC)
R3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 SBUpdd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbw.sys [41368 2013-10-06] ()
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-15] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 XFDriver64; C:\Program Files (x86)\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 20:41 - 2014-01-04 20:41 - 00000837 _____ C:\Users\andi_000\Desktop\anleitung.txt
2014-01-04 20:37 - 2014-01-04 21:51 - 00000000 ____D C:\AdwCleaner
2014-01-04 20:37 - 2014-01-04 20:37 - 01233962 _____ C:\Users\andi_000\Desktop\adwcleaner.exe
2014-01-04 19:52 - 2014-01-04 19:54 - 00043510 _____ C:\Users\andi_000\Downloads\Addition.txt
2014-01-04 19:49 - 2014-01-04 21:56 - 00019620 _____ C:\Users\andi_000\Downloads\FRST.txt
2014-01-04 19:49 - 2014-01-04 19:49 - 00000000 ____D C:\FRST
2014-01-04 19:48 - 2014-01-04 19:48 - 01931368 _____ (Farbar) C:\Users\andi_000\Downloads\FRST64.exe
2014-01-04 19:03 - 2014-01-04 19:03 - 00001982 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-04 19:03 - 2014-01-04 19:03 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\AVAST Software
2014-01-04 19:02 - 2014-01-04 19:03 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-01-04 19:02 - 2014-01-04 19:03 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-01-04 19:02 - 2014-01-04 19:02 - 01034464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00422216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-04 19:02 - 2014-01-04 19:02 - 00207904 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-04 19:02 - 2014-01-04 19:02 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-04 19:00 - 2014-01-04 19:01 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-04 18:59 - 2014-01-04 18:59 - 91412976 _____ (AVAST Software) C:\Users\andi_000\Downloads\avast_free_antivirus_setup.exe
2014-01-04 00:49 - 2014-01-04 00:49 - 00124928 ___SH C:\Users\andi_000\Desktop\Thumbs.db
2014-01-03 22:25 - 2014-01-03 22:28 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\.minecraft
2014-01-03 22:15 - 2014-01-03 22:15 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-01-03 22:15 - 2014-01-03 22:15 - 00000000 ____D C:\Program Files\Java
2014-01-03 22:13 - 2014-01-03 22:13 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(2).exe
2014-01-03 17:03 - 2014-01-03 17:03 - 00001174 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-03 16:56 - 2014-01-03 16:56 - 00386383 _____ (hxxp://magiclauncher.com) C:\Users\andi_000\Documents\MagicLauncher_1.2.5.exe
2014-01-03 16:56 - 2014-01-03 16:56 - 00001280 _____ C:\Users\andi_000\Desktop\MagicLauncher.lnk
2014-01-03 16:51 - 2014-01-03 16:51 - 00457335 _____ C:\Users\andi_000\Desktop\OptiFine_1.7.2_HD_U_A7.jar
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\SoftWarehouse
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\Program Files (x86)\GS Supporter
2014-01-03 15:59 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-03 15:46 - 2014-01-03 15:46 - 02528254 _____ () C:\Users\andi_000\Downloads\forge-1.7.2-10.12.0.985-installer-win.exe
2014-01-03 15:43 - 2014-01-03 15:43 - 00140901 _____ C:\Users\andi_000\Downloads\InvTweaks-1.50-1.4.7.zip
2014-01-02 23:34 - 2014-01-02 23:34 - 04090376 _____ C:\Users\andi_000\Desktop\PSC 1.2.1(1).zip
2014-01-02 17:28 - 2014-01-02 17:28 - 02089345 _____ C:\Users\andi_000\Downloads\Font Pack From Rated.zip
2014-01-02 17:04 - 2014-01-02 17:04 - 120232802 _____ C:\Users\andi_000\Downloads\Chain Pack.rar
2014-01-02 17:02 - 2014-01-02 17:02 - 22322246 _____ C:\Users\andi_000\Downloads\Corrupts Chain and Flare 300 Sub Pack(1).rar
2014-01-02 17:01 - 2014-01-02 17:01 - 10285472 _____ C:\Users\andi_000\Downloads\IR4Dz Chain Pack(1).rar
2014-01-02 13:53 - 2014-01-02 14:07 - 336080295 _____ C:\Users\andi_000\Downloads\GFX PACK.rar
2014-01-02 00:02 - 2014-01-02 00:02 - 00004535 _____ C:\Users\andi_000\AppData\Roaming\CamStudio.cfg
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamShapes.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamLayout.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000046 _____ C:\Users\andi_000\AppData\Roaming\Camdata.ini
2014-01-02 00:01 - 2014-01-02 00:01 - 00000861 _____ C:\Users\Public\Desktop\CamStudio.lnk
2014-01-02 00:01 - 2014-01-02 00:01 - 00000096 _____ C:\Users\andi_000\AppData\Roaming\version2.xml
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Users\andi_000\Documents\My CamStudio Temp Files
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Program Files\CamStudio 2.7
2014-01-01 23:59 - 2014-01-01 23:59 - 11613447 _____ (CamStudio Open Source                                       ) C:\Users\andi_000\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe
2014-01-01 21:33 - 2014-01-01 21:33 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel(1).zip
2014-01-01 19:42 - 2014-01-01 19:42 - 00298752 _____ C:\WINDOWS\Minidump\010114-35937-01.dmp
2013-12-30 19:19 - 2013-12-30 20:41 - 00000046 _____ C:\Users\andi_000\Desktop\motd.txt
2013-12-30 01:19 - 2013-12-30 01:20 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(1).exe
2013-12-29 23:43 - 2013-12-30 00:53 - 00000000 ____D C:\Users\andi_000\Desktop\Vanilla Server
2013-12-29 23:42 - 2013-12-29 23:43 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel.zip
2013-12-29 22:31 - 2013-12-29 22:31 - 00002126 _____ C:\Users\Public\Desktop\MorphVOX Pro.lnk
2013-12-29 22:31 - 2013-12-29 22:31 - 00000000 ____D C:\Program Files (x86)\Screaming Bee
2013-12-29 22:29 - 2013-12-29 22:29 - 05930360 _____ C:\Users\andi_000\Downloads\MorphVOXPro4_Install-1.de.exe
2013-12-29 21:58 - 2013-12-29 21:59 - 00000016 _____ C:\Users\andi_000\Desktop\Neues Textdokument.txt
2013-12-29 18:47 - 2013-12-29 18:47 - 00000222 _____ C:\Users\andi_000\Desktop\Draw a Stickman EPIC.url
2013-12-29 13:56 - 2013-12-29 13:56 - 04518970 _____ C:\Users\andi_000\Downloads\mani_admin_plugin_v1_2_22_16_csgo_windows-only.zip
2013-12-28 20:15 - 2013-12-28 20:16 - 00000000 ____D C:\Accountmanager
2013-12-28 20:13 - 2013-12-28 20:13 - 00001700 _____ C:\Users\andi_000\Desktop\Uplay.lnk
2013-12-28 13:50 - 2013-12-28 13:50 - 00000219 _____ C:\Users\andi_000\Desktop\Counter-Strike Global Offensive.url
2013-12-26 02:30 - 2013-12-26 02:30 - 00000219 _____ C:\Users\andi_000\Desktop\Left 4 Dead 2.url
2013-12-26 00:14 - 2013-12-26 00:15 - 40709052 _____ C:\Users\andi_000\Downloads\KotSv14.zip
2013-12-26 00:12 - 2013-12-26 00:12 - 04090376 _____ C:\Users\andi_000\Downloads\PSC 1.2.1.zip
2013-12-25 23:54 - 2013-12-25 23:54 - 04313250 _____ C:\Users\andi_000\Downloads\Asi-Challenge.rar
2013-12-25 23:30 - 2013-12-25 23:31 - 95670968 _____ C:\Users\andi_000\Downloads\The dropper 2 Newton VS Darwin.zip
2013-12-25 22:37 - 2013-12-25 22:37 - 16488822 _____ C:\Users\andi_000\Downloads\Snow___Snowflakes_Brushes_by_redheadstock.zip
2013-12-24 14:50 - 2013-12-24 14:50 - 00019590 _____ C:\Users\andi_000\Downloads\secretlondon_red_present.svg
2013-12-24 13:39 - 2013-12-24 13:45 - 00000000 ____D C:\Noten
2013-12-24 13:27 - 2013-07-22 12:54 - 00001536 _____ C:\Users\andi_000\Desktop\Microsoft Visual Studio - Programmieren.lnk
2013-12-24 13:25 - 2013-12-24 13:25 - 00001511 _____ C:\Users\andi_000\Desktop\Teamspeak.lnk
2013-12-24 13:19 - 2013-12-24 13:19 - 00000221 _____ C:\Users\andi_000\Desktop\Call of Duty Modern Warfare 2.url
2013-12-23 15:24 - 2013-12-23 15:24 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-23 15:23 - 2013-12-23 15:25 - 00000000 ____D C:\Users\andi_000\Documents\Bomberman
2013-12-23 15:23 - 2013-12-23 15:23 - 03822860 _____ C:\Users\andi_000\Downloads\BombermanV096Beta.zip
2013-12-23 15:23 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\New Folder (2)
2013-12-23 11:15 - 2013-12-23 11:15 - 00017159 _____ C:\Users\andi_000\Downloads\money-pot.zip
2013-12-23 11:14 - 2013-12-23 11:14 - 00041772 _____ C:\Users\andi_000\Downloads\money-pot_f
2013-12-22 15:54 - 2013-12-22 15:54 - 02061330 _____ C:\Users\andi_000\Downloads\water_video_games_landscapes_trees_sea_wood_forest_beds_steve_islands_pixels_minecraft_holidays_cine_High
2013-12-21 22:54 - 2013-12-21 22:54 - 00086458 _____ C:\Users\andi_000\Downloads\arista.zip
2013-12-21 22:48 - 2013-12-21 22:48 - 00411255 _____ C:\Users\andi_000\Downloads\snowflakes_brush_39445.zip
2013-12-18 20:24 - 2013-12-30 18:03 - 00000000 ____D C:\Users\andi_000\Documents\Musik für Handy
2013-12-16 13:56 - 2013-11-12 00:41 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-16 13:56 - 2013-11-12 00:40 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-16 13:56 - 2013-11-12 00:27 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-16 13:56 - 2013-11-12 00:24 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-16 13:56 - 2013-11-11 03:48 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-16 13:56 - 2013-11-09 12:55 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-16 13:56 - 2013-11-09 07:37 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2013-12-16 13:56 - 2013-11-09 06:56 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2013-12-16 13:56 - 2013-11-08 11:26 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2013-12-16 13:56 - 2013-11-08 06:23 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2013-12-16 13:56 - 2013-11-08 05:43 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2013-12-16 13:56 - 2013-11-08 05:42 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2013-12-16 13:56 - 2013-11-08 05:28 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-16 13:56 - 2013-11-08 05:26 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-16 13:56 - 2013-11-08 05:16 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2013-12-16 13:56 - 2013-11-08 05:15 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2013-12-16 13:56 - 2013-11-08 05:07 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2013-12-16 13:56 - 2013-11-08 04:41 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-16 13:56 - 2013-11-08 04:14 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-16 13:56 - 2013-11-05 15:19 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2013-12-16 13:56 - 2013-11-05 15:03 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-12-16 13:56 - 2013-11-05 14:57 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-12-16 13:56 - 2013-11-05 14:33 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2013-12-16 13:56 - 2013-11-05 14:32 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2013-12-16 13:56 - 2013-11-04 18:13 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-16 13:56 - 2013-11-04 18:13 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-16 13:56 - 2013-11-04 14:07 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-16 13:56 - 2013-11-04 12:50 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-16 13:56 - 2013-11-04 11:32 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-16 13:56 - 2013-11-04 03:28 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-16 13:56 - 2013-11-04 02:30 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-16 13:56 - 2013-11-01 12:39 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2013-12-16 13:56 - 2013-11-01 07:08 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2013-12-16 13:56 - 2013-11-01 06:57 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2013-12-16 13:56 - 2013-10-31 01:58 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-16 13:56 - 2013-10-31 01:42 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-16 13:56 - 2013-10-31 01:33 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2013-12-16 13:56 - 2013-10-31 01:33 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2013-12-16 13:56 - 2013-10-31 01:33 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2013-12-16 13:56 - 2013-10-31 01:33 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2013-12-16 13:56 - 2013-10-26 02:54 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2013-12-16 13:56 - 2013-10-24 10:31 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2013-12-16 13:56 - 2013-10-24 10:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2013-12-16 13:56 - 2013-10-17 12:21 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2013-12-16 13:56 - 2013-10-17 11:36 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2013-12-16 13:56 - 2013-10-05 15:21 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-16 13:56 - 2013-10-05 15:21 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-16 13:56 - 2013-10-05 13:05 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-16 13:56 - 2013-10-05 13:05 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-13 21:09 - 2013-12-13 21:09 - 03821064 _____ C:\Users\andi_000\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-12-13 15:01 - 2013-12-13 15:03 - 188802726 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.mp4
2013-12-13 14:59 - 2013-12-13 15:00 - 124148696 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.avi
2013-12-12 20:07 - 2013-12-12 20:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 16:50 - 2013-12-12 17:43 - 00000000 ____D C:\Users\andi_000\Documents\Weihnacht
2013-12-11 14:22 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-11 14:22 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-11 14:22 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-11 14:22 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-11 14:22 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-11 14:22 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-11 14:22 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-11 14:22 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-11 14:22 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-11 14:22 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-11 14:22 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-11 14:22 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-11 14:22 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-11 14:22 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2013-12-11 14:22 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2013-12-11 14:22 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-11 14:22 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-11 14:22 - 2013-11-09 07:34 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2013-12-11 14:22 - 2013-11-09 07:34 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2013-12-11 14:22 - 2013-11-09 06:52 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2013-12-11 14:22 - 2013-10-19 09:53 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2013-12-11 14:22 - 2013-10-19 08:14 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2013-12-11 14:22 - 2013-10-15 09:54 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2013-12-11 14:22 - 2013-10-15 09:03 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2013-12-11 14:21 - 2013-11-23 05:34 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 05:13 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 04:32 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-11 14:21 - 2013-11-23 04:10 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2013-12-11 14:21 - 2013-11-08 08:21 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-09 17:15 - 2014-01-03 22:15 - 00000000 ____D C:\ProgramData\Oracle
2013-12-09 17:00 - 2013-12-09 17:00 - 00489619 _____ C:\Users\andi_000\Downloads\InstallZeriusVocoder13.exe
2013-12-09 17:00 - 2013-12-09 17:00 - 00001039 _____ C:\Users\UpdatusUser\Desktop\Zerius Vocoder.lnk
2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Program Files (x86)\VocoderGUI
2013-12-09 16:58 - 2013-12-09 16:58 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64.exe
2013-12-09 16:45 - 2013-12-09 16:47 - 00013780 _____ C:\Users\andi_000\Downloads\server(2).log
2013-12-09 15:24 - 2013-12-09 15:25 - 00043113 _____ C:\Users\andi_000\Downloads\beautiful_es.zip
2013-12-07 21:34 - 2013-12-07 21:34 - 00000000 ____D C:\Users\andi_000\Documents\Fax
2013-12-06 22:04 - 2013-12-06 22:04 - 00369412 _____ C:\Users\andi_000\Downloads\minecraft_rigV2(2).zip
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2013-12-06 15:19 - 2013-12-06 15:20 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-12-06 15:19 - 2013-12-06 15:19 - 00001094 _____ C:\Users\andi_000\Desktop\MSI Afterburner.lnk
2013-12-06 15:19 - 2013-12-06 15:19 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner

==================== One Month Modified Files and Folders =======

2014-01-04 21:57 - 2014-01-04 19:49 - 00019620 _____ C:\Users\andi_000\Downloads\FRST.txt
2014-01-04 21:55 - 2013-11-16 10:26 - 00000000 __RDO C:\Users\andi_000\SkyDrive
2014-01-04 21:54 - 2013-04-26 14:29 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-04 21:54 - 2013-03-22 19:47 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-04 21:53 - 2013-11-15 19:29 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-04 21:53 - 2013-08-22 15:46 - 00358290 _____ C:\WINDOWS\setupact.log
2014-01-04 21:53 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-04 21:53 - 2013-08-22 15:44 - 05058768 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-04 21:52 - 2013-09-29 20:04 - 00104158 _____ C:\WINDOWS\PFRO.log
2014-01-04 21:52 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2014-01-04 21:51 - 2014-01-04 20:37 - 00000000 ____D C:\AdwCleaner
2014-01-04 21:49 - 2013-05-07 19:18 - 00001142 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001UA.job
2014-01-04 21:46 - 2013-03-22 20:00 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\PhotoLine
2014-01-04 21:36 - 2013-11-20 11:11 - 00003926 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9F9F4DA0-3CD5-41A7-8828-8410B685E77B}
2014-01-04 21:23 - 2013-04-02 16:12 - 00000000 ____D C:\Users\andi_000\Documents\0Blender Files
2014-01-04 21:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-04 20:54 - 2013-11-15 19:29 - 01777591 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-04 20:43 - 2013-03-22 19:48 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\TS3Client
2014-01-04 20:42 - 2013-08-27 22:11 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Spotify
2014-01-04 20:41 - 2014-01-04 20:41 - 00000837 _____ C:\Users\andi_000\Desktop\anleitung.txt
2014-01-04 20:37 - 2014-01-04 20:37 - 01233962 _____ C:\Users\andi_000\Desktop\adwcleaner.exe
2014-01-04 19:54 - 2014-01-04 19:52 - 00043510 _____ C:\Users\andi_000\Downloads\Addition.txt
2014-01-04 19:49 - 2014-01-04 19:49 - 00000000 ____D C:\FRST
2014-01-04 19:48 - 2014-01-04 19:48 - 01931368 _____ (Farbar) C:\Users\andi_000\Downloads\FRST64.exe
2014-01-04 19:03 - 2014-01-04 19:03 - 00001982 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-04 19:03 - 2014-01-04 19:03 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\AVAST Software
2014-01-04 19:03 - 2014-01-04 19:02 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-01-04 19:03 - 2014-01-04 19:02 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-01-04 19:02 - 2014-01-04 19:02 - 01034464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00422216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-04 19:02 - 2014-01-04 19:02 - 00207904 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-04 19:02 - 2014-01-04 19:02 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-04 19:01 - 2014-01-04 19:00 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-04 18:59 - 2014-01-04 18:59 - 91412976 _____ (AVAST Software) C:\Users\andi_000\Downloads\avast_free_antivirus_setup.exe
2014-01-04 16:49 - 2013-03-22 19:45 - 00003592 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-423698434-873744686-13932946-1001
2014-01-04 15:57 - 2013-11-21 19:16 - 00039936 ___SH C:\Users\andi_000\Downloads\Thumbs.db
2014-01-04 15:01 - 2013-11-01 10:46 - 00000000 ____D C:\Users\andi_000\Documents\Euro Truck Simulator 2
2014-01-04 13:27 - 2013-04-02 14:55 - 00000000 ____D C:\Users\andi_000\AppData\Local\Adobe
2014-01-04 00:49 - 2014-01-04 00:49 - 00124928 ___SH C:\Users\andi_000\Desktop\Thumbs.db
2014-01-04 00:49 - 2013-05-07 19:18 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001Core.job
2014-01-03 22:28 - 2014-01-03 22:25 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\.minecraft
2014-01-03 22:21 - 2013-03-30 20:36 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\FileZilla
2014-01-03 22:15 - 2014-01-03 22:15 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-01-03 22:15 - 2014-01-03 22:15 - 00000000 ____D C:\Program Files\Java
2014-01-03 22:15 - 2013-12-09 17:15 - 00000000 ____D C:\ProgramData\Oracle
2014-01-03 22:13 - 2014-01-03 22:13 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(2).exe
2014-01-03 17:03 - 2014-01-03 17:03 - 00001174 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-03 17:03 - 2013-03-26 20:08 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\TeamViewer
2014-01-03 17:03 - 2013-03-26 19:50 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-03 16:56 - 2014-01-03 16:56 - 00386383 _____ (hxxp://magiclauncher.com) C:\Users\andi_000\Documents\MagicLauncher_1.2.5.exe
2014-01-03 16:56 - 2014-01-03 16:56 - 00001280 _____ C:\Users\andi_000\Desktop\MagicLauncher.lnk
2014-01-03 16:51 - 2014-01-03 16:51 - 00457335 _____ C:\Users\andi_000\Desktop\OptiFine_1.7.2_HD_U_A7.jar
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\SoftWarehouse
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\Program Files (x86)\GS Supporter
2014-01-03 16:00 - 2014-01-03 15:59 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-03 15:46 - 2014-01-03 15:46 - 02528254 _____ () C:\Users\andi_000\Downloads\forge-1.7.2-10.12.0.985-installer-win.exe
2014-01-03 15:43 - 2014-01-03 15:43 - 00140901 _____ C:\Users\andi_000\Downloads\InvTweaks-1.50-1.4.7.zip
2014-01-02 23:34 - 2014-01-02 23:34 - 04090376 _____ C:\Users\andi_000\Desktop\PSC 1.2.1(1).zip
2014-01-02 17:28 - 2014-01-02 17:28 - 02089345 _____ C:\Users\andi_000\Downloads\Font Pack From Rated.zip
2014-01-02 17:04 - 2014-01-02 17:04 - 120232802 _____ C:\Users\andi_000\Downloads\Chain Pack.rar
2014-01-02 17:02 - 2014-01-02 17:02 - 22322246 _____ C:\Users\andi_000\Downloads\Corrupts Chain and Flare 300 Sub Pack(1).rar
2014-01-02 17:01 - 2014-01-02 17:01 - 10285472 _____ C:\Users\andi_000\Downloads\IR4Dz Chain Pack(1).rar
2014-01-02 14:07 - 2014-01-02 13:53 - 336080295 _____ C:\Users\andi_000\Downloads\GFX PACK.rar
2014-01-02 13:58 - 2013-07-14 13:02 - 00000000 ____D C:\Users\andi_000\Documents\Visual Studio 2012
2014-01-02 00:03 - 2013-11-15 19:32 - 00000000 ____D C:\Users\andi_000
2014-01-02 00:02 - 2014-01-02 00:02 - 00004535 _____ C:\Users\andi_000\AppData\Roaming\CamStudio.cfg
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamShapes.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamLayout.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000046 _____ C:\Users\andi_000\AppData\Roaming\Camdata.ini
2014-01-02 00:01 - 2014-01-02 00:01 - 00000861 _____ C:\Users\Public\Desktop\CamStudio.lnk
2014-01-02 00:01 - 2014-01-02 00:01 - 00000096 _____ C:\Users\andi_000\AppData\Roaming\version2.xml
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Users\andi_000\Documents\My CamStudio Temp Files
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Program Files\CamStudio 2.7
2014-01-01 23:59 - 2014-01-01 23:59 - 11613447 _____ (CamStudio Open Source                                       ) C:\Users\andi_000\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe
2014-01-01 21:33 - 2014-01-01 21:33 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel(1).zip
2014-01-01 19:42 - 2014-01-01 19:42 - 00298752 _____ C:\WINDOWS\Minidump\010114-35937-01.dmp
2014-01-01 19:42 - 2013-11-16 10:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-01 19:42 - 2013-05-06 13:21 - 731731548 _____ C:\WINDOWS\MEMORY.DMP
2013-12-30 20:41 - 2013-12-30 19:19 - 00000046 _____ C:\Users\andi_000\Desktop\motd.txt
2013-12-30 18:05 - 2013-05-01 13:34 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Audacity
2013-12-30 18:03 - 2013-12-18 20:24 - 00000000 ____D C:\Users\andi_000\Documents\Musik für Handy
2013-12-30 18:02 - 2013-08-27 22:11 - 00000000 ____D C:\Users\andi_000\AppData\Local\Spotify
2013-12-30 14:24 - 2013-09-02 21:43 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Skype
2013-12-30 12:53 - 2013-04-10 14:40 - 00270408 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2013-12-30 12:53 - 2013-03-28 12:55 - 00270408 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2013-12-30 12:23 - 2013-11-19 23:16 - 00284160 ___SH C:\Users\andi_000\Documents\Thumbs.db
2013-12-30 01:20 - 2013-12-30 01:19 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(1).exe
2013-12-30 00:53 - 2013-12-29 23:43 - 00000000 ____D C:\Users\andi_000\Desktop\Vanilla Server
2013-12-29 23:43 - 2013-12-29 23:42 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel.zip
2013-12-29 22:31 - 2013-12-29 22:31 - 00002126 _____ C:\Users\Public\Desktop\MorphVOX Pro.lnk
2013-12-29 22:31 - 2013-12-29 22:31 - 00000000 ____D C:\Program Files (x86)\Screaming Bee
2013-12-29 22:31 - 2013-09-08 21:28 - 00000000 ____D C:\ProgramData\Screaming Bee
2013-12-29 22:29 - 2013-12-29 22:29 - 05930360 _____ C:\Users\andi_000\Downloads\MorphVOXPro4_Install-1.de.exe
2013-12-29 22:03 - 2013-09-30 05:14 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-29 22:03 - 2013-09-30 04:56 - 00764340 _____ C:\WINDOWS\system32\perfh007.dat
2013-12-29 22:03 - 2013-09-30 04:56 - 00159160 _____ C:\WINDOWS\system32\perfc007.dat
2013-12-29 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-12-29 21:59 - 2013-12-29 21:58 - 00000016 _____ C:\Users\andi_000\Desktop\Neues Textdokument.txt
2013-12-29 18:50 - 2013-03-23 09:27 - 00320421 _____ C:\WINDOWS\DirectX.log
2013-12-29 18:47 - 2013-12-29 18:47 - 00000222 _____ C:\Users\andi_000\Desktop\Draw a Stickman EPIC.url
2013-12-29 18:39 - 2013-03-22 20:39 - 06220854 _____ C:\Users\andi_000\Documents\PL-Wallpaper.bmp
2013-12-29 13:56 - 2013-12-29 13:56 - 04518970 _____ C:\Users\andi_000\Downloads\mani_admin_plugin_v1_2_22_16_csgo_windows-only.zip
2013-12-28 20:16 - 2013-12-28 20:15 - 00000000 ____D C:\Accountmanager
2013-12-28 20:13 - 2013-12-28 20:13 - 00001700 _____ C:\Users\andi_000\Desktop\Uplay.lnk
2013-12-28 19:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-12-28 13:50 - 2013-12-28 13:50 - 00000219 _____ C:\Users\andi_000\Desktop\Counter-Strike Global Offensive.url
2013-12-28 00:27 - 2013-09-02 21:42 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-28 00:27 - 2013-09-02 21:42 - 00000000 ____D C:\ProgramData\Skype
2013-12-26 02:30 - 2013-12-26 02:30 - 00000219 _____ C:\Users\andi_000\Desktop\Left 4 Dead 2.url
2013-12-26 00:15 - 2013-12-26 00:14 - 40709052 _____ C:\Users\andi_000\Downloads\KotSv14.zip
2013-12-26 00:12 - 2013-12-26 00:12 - 04090376 _____ C:\Users\andi_000\Downloads\PSC 1.2.1.zip
2013-12-25 23:54 - 2013-12-25 23:54 - 04313250 _____ C:\Users\andi_000\Downloads\Asi-Challenge.rar
2013-12-25 23:31 - 2013-12-25 23:30 - 95670968 _____ C:\Users\andi_000\Downloads\The dropper 2 Newton VS Darwin.zip
2013-12-25 22:37 - 2013-12-25 22:37 - 16488822 _____ C:\Users\andi_000\Downloads\Snow___Snowflakes_Brushes_by_redheadstock.zip
2013-12-24 14:50 - 2013-12-24 14:50 - 00019590 _____ C:\Users\andi_000\Downloads\secretlondon_red_present.svg
2013-12-24 13:45 - 2013-12-24 13:39 - 00000000 ____D C:\Noten
2013-12-24 13:25 - 2013-12-24 13:25 - 00001511 _____ C:\Users\andi_000\Desktop\Teamspeak.lnk
2013-12-24 13:19 - 2013-12-24 13:19 - 00000221 _____ C:\Users\andi_000\Desktop\Call of Duty Modern Warfare 2.url
2013-12-24 13:14 - 2013-06-18 15:51 - 00002026 _____ C:\Users\andi_000\Desktop\Blender Files.lnk
2013-12-23 21:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-12-23 15:25 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\Bomberman
2013-12-23 15:24 - 2013-12-23 15:24 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-23 15:23 - 2013-12-23 15:23 - 03822860 _____ C:\Users\andi_000\Downloads\BombermanV096Beta.zip
2013-12-23 15:23 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\New Folder (2)
2013-12-23 13:15 - 2013-07-06 11:43 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\vlc
2013-12-23 11:15 - 2013-12-23 11:15 - 00017159 _____ C:\Users\andi_000\Downloads\money-pot.zip
2013-12-23 11:14 - 2013-12-23 11:14 - 00041772 _____ C:\Users\andi_000\Downloads\money-pot_f
2013-12-22 15:54 - 2013-12-22 15:54 - 02061330 _____ C:\Users\andi_000\Downloads\water_video_games_landscapes_trees_sea_wood_forest_beds_steve_islands_pixels_minecraft_holidays_cine_High
2013-12-21 22:54 - 2013-12-21 22:54 - 00086458 _____ C:\Users\andi_000\Downloads\arista.zip
2013-12-21 22:48 - 2013-12-21 22:48 - 00411255 _____ C:\Users\andi_000\Downloads\snowflakes_brush_39445.zip
2013-12-18 14:52 - 2013-11-25 14:16 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2013-12-18 14:52 - 2013-11-23 16:09 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-12-18 14:52 - 2013-11-23 16:09 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-12-16 19:05 - 2013-07-13 17:12 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-16 19:03 - 2013-03-23 21:58 - 90708896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-16 13:49 - 2013-08-07 19:32 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-12-16 13:49 - 2013-03-22 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 21:26 - 2013-03-28 12:55 - 00290184 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2013-12-13 21:09 - 2013-12-13 21:09 - 03821064 _____ C:\Users\andi_000\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-12-13 15:03 - 2013-12-13 15:01 - 188802726 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.mp4
2013-12-13 15:00 - 2013-12-13 14:59 - 124148696 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.avi
2013-12-12 20:07 - 2013-12-12 20:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 17:43 - 2013-12-12 16:50 - 00000000 ____D C:\Users\andi_000\Documents\Weihnacht
2013-12-09 20:09 - 2013-03-23 09:43 - 00000000 ____D C:\Fraps
2013-12-09 17:00 - 2013-12-09 17:00 - 00489619 _____ C:\Users\andi_000\Downloads\InstallZeriusVocoder13.exe
2013-12-09 17:00 - 2013-12-09 17:00 - 00001039 _____ C:\Users\UpdatusUser\Desktop\Zerius Vocoder.lnk
2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Program Files (x86)\VocoderGUI
2013-12-09 16:58 - 2013-12-09 16:58 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64.exe
2013-12-09 16:47 - 2013-12-09 16:45 - 00013780 _____ C:\Users\andi_000\Downloads\server(2).log
2013-12-09 16:38 - 2013-03-24 23:46 - 00761375 _____ () C:\Users\andi_000\Documents\FTB_Launcher.exe
2013-12-09 16:38 - 2013-03-24 23:46 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\ftblauncher
2013-12-09 15:25 - 2013-12-09 15:24 - 00043113 _____ C:\Users\andi_000\Downloads\beautiful_es.zip
2013-12-09 15:21 - 2013-04-30 17:06 - 00491823 ____H C:\Users\andi_000\Documents\Browse.plb
2013-12-08 16:52 - 2013-10-23 16:21 - 00000000 ____D C:\Users\andi_000\Documents\Marissa Titelbild
2013-12-08 00:44 - 2013-05-07 19:18 - 00004094 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001UA
2013-12-08 00:44 - 2013-05-07 19:18 - 00003714 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001Core
2013-12-07 21:34 - 2013-12-07 21:34 - 00000000 ____D C:\Users\andi_000\Documents\Fax
2013-12-07 08:29 - 2013-11-30 16:57 - 00000000 ____D C:\Users\andi_000\Documents\SimCity KEy
2013-12-06 22:04 - 2013-12-06 22:04 - 00369412 _____ C:\Users\andi_000\Downloads\minecraft_rigV2(2).zip
2013-12-06 17:46 - 2013-11-15 19:26 - 00000000 ____D C:\Windows.old
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2013-12-06 15:20 - 2013-12-06 15:19 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-12-06 15:19 - 2013-12-06 15:19 - 00001094 _____ C:\Users\andi_000\Desktop\MSI Afterburner.lnk
2013-12-06 15:19 - 2013-12-06 15:19 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner

Files to move or delete:
====================
C:\Users\andi_000\AppData\Roaming\CamLayout.ini
C:\Users\andi_000\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\andi_000\AppData\Local\Temp\avgnt.exe
C:\Users\andi_000\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\andi_000\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\andi_000\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\andi_000\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\andi_000\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\andi_000\AppData\Local\Temp\nvStInst.exe
C:\Users\andi_000\AppData\Local\Temp\Quarantine.exe
C:\Users\andi_000\AppData\Local\Temp\sonarinst.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-02 15:23

==================== End Of Log ============================
         

--- --- ---

--- --- ---



Tut mir Leid das die Antworten dauerten, aber ich wollte den avast Systemcheck nicht abbrechen.
PS: Der hat gesagt das kein Virus vorhanden ist

Lg
Andi

Hallo Andi,

das ist noch eine Kleinigkeit. Läuft der Rechner sonst normal?


Schritt 1

• Gehe in die Systemsteuerung und öffne Programme und Funktionen.
• Suche und deinstalliere dort der Reihe nach folgende Einträge:

  GS Supporter 1.80
  

• Schliesse das Fenster wieder und führe einen Neustart durch, wenn das gefordert wurde.

Schritt 2

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Hier ist die Logfile:

Avira hat zuerst das Entfernen einer Registry-File verhindert, ich habe dann aber den Registry Schutz rausgenommen, damit Malwarebytes die "verdächtige" Datei entfernen kann.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.04.06

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
andi_000 :: ANDI [Administrator]

04.01.2014 22:10:37
mbam-log-2014-01-04 (22-10-37).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 255985
Laufzeit: 6 Minute(n), 22 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252} (PUP.Optional.GreatSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 6
C:\$Recycle.Bin\S-1-5-21-423698434-873744686-13932946-1001\$RKZWZZG.exe (PUP.Optional.InstalleRex) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\andi_000\Downloads\ManyCamSetup.exe (PUP.Optional.Spigot.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\andi_000\Downloads\resource hacker setup.exe (PUP.Optional.AdBundle) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\andi_000\Downloads\SoftonicDownloader_fuer_morphvox.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\andi_000\Downloads\SoftonicDownloader_fuer_motion-dive-tokyo.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\andi_000\Downloads\wirelesskeyview1.66.zip (PUP.WirelessKeyView) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Lg
Andi

So und hier ist der FRST.txt Log:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by andi_000 (administrator) on ANDI on 04-01-2014 22:24:11
Running from C:\Users\andi_000\Downloads
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Speedbit Ltd.) C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(SPEEDbit) C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Spotify Ltd) C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Game Inc.) C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_fa1dc1539b4180d8\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [GamingKeyboard] - C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2349392 2013-10-31] (LogMeIn Inc.)
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\Trayserver.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-04] (AVAST Software)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)
HKCU\...\Run: [OscarEditor] - C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe [2603520 2013-04-08] ()
HKCU\...\Run: [SpeedBitVideoAccelerator] - C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe [1515688 2013-04-28] (SPEEDbit)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4284976 2013-04-30] ()
HKCU\...\Run: [Google Update] - C:\Users\andi_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-05-07] (Google Inc.)
HKCU\...\Run: [MediaFire Tray] - C:\Users\andi_000\AppData\Local\MediaFire Express\mf_systray.exe [2349640 2013-04-04] (MediaFire LLC)
HKCU\...\Run: [ManyCam] - C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe [5411664 2013-07-22] (ManyCam LLC)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\andi_000\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-06] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\andi_000\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-06] (Spotify Ltd)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3551576 2013-11-23] (Electronic Arts)
AppInit_DLLs:   [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCC3CCE079997CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default
FF NetworkProxy: "http", "www-proxy.t-online.de"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\andi_000\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\andi_000\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: YouTube High Definition - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}
FF Extension: Telekom YouTube Turbo - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\info@maltegoetz.de.xpi
FF Extension: Better Battlelog (BBLog) - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi
FF Extension: NoScript - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Easy YouTube Video Downloader - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: Adblock Plus - C:\Users\andi_000\AppData\Roaming\Mozilla\Firefox\Profiles\0rs1ymyy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "sync" : {
      "dictionary" : false,
      "keep_everything_synced" : false,
      "preferences" : false,
      "priority_preferences" : false,
      "search_engines"
CHR DefaultNewTabURL: 
CHR Plugin: (Shockwave Flash) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\andi_000\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Google Update) - C:\Users\andi_000\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Speedbit New Tab) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\palpbfjgianahgbbeodmcohjdmaelbeo\1.0_0
CHR Extension: (Gmail) - C:\Users\andi_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [palpbfjgianahgbbeodmcohjdmaelbeo] - C:\Program Files\Common Files\SpeedBit\SBUpdate\SpeedbitNewTab.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-04] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-11-25] ()
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWow64\PnkBstrA.exe [76888 2013-11-16] ()
R2 SBUpd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2456696 2013-10-06] (Speedbit Ltd.)
R2 VideoAcceleratorService; C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [281768 2013-04-28] (SPEEDbit)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [78648 2014-01-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2014-01-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-04] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1034464 2014-01-04] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [422216 2014-01-04] (AVAST Software)
R3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [79672 2014-01-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-04] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-31] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-09-30] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [44544 2013-01-15] (ManyCam LLC)
R3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 SBUpdd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbw.sys [41368 2013-10-06] ()
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-15] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 XFDriver64; C:\Program Files (x86)\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 22:10 - 2014-01-04 22:10 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Malwarebytes
2014-01-04 22:09 - 2014-01-04 22:10 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 22:09 - 2014-01-04 22:09 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\andi_000\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 22:09 - 2014-01-04 22:09 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-04 22:09 - 2014-01-04 22:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 22:09 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-01-04 20:41 - 2014-01-04 20:41 - 00000837 _____ C:\Users\andi_000\Desktop\anleitung.txt
2014-01-04 20:37 - 2014-01-04 21:51 - 00000000 ____D C:\AdwCleaner
2014-01-04 20:37 - 2014-01-04 20:37 - 01233962 _____ C:\Users\andi_000\Desktop\adwcleaner.exe
2014-01-04 19:52 - 2014-01-04 19:54 - 00043510 _____ C:\Users\andi_000\Downloads\Addition.txt
2014-01-04 19:49 - 2014-01-04 22:24 - 00019641 _____ C:\Users\andi_000\Downloads\FRST.txt
2014-01-04 19:49 - 2014-01-04 19:49 - 00000000 ____D C:\FRST
2014-01-04 19:48 - 2014-01-04 19:48 - 01931368 _____ (Farbar) C:\Users\andi_000\Downloads\FRST64.exe
2014-01-04 19:03 - 2014-01-04 19:03 - 00001982 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-04 19:03 - 2014-01-04 19:03 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\AVAST Software
2014-01-04 19:02 - 2014-01-04 19:03 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-01-04 19:02 - 2014-01-04 19:03 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-01-04 19:02 - 2014-01-04 19:02 - 01034464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00422216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-04 19:02 - 2014-01-04 19:02 - 00207904 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-04 19:02 - 2014-01-04 19:02 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-04 19:00 - 2014-01-04 19:01 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-04 18:59 - 2014-01-04 18:59 - 91412976 _____ (AVAST Software) C:\Users\andi_000\Downloads\avast_free_antivirus_setup.exe
2014-01-04 00:49 - 2014-01-04 00:49 - 00124928 ___SH C:\Users\andi_000\Desktop\Thumbs.db
2014-01-03 22:25 - 2014-01-03 22:28 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\.minecraft
2014-01-03 22:15 - 2014-01-03 22:15 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-01-03 22:15 - 2014-01-03 22:15 - 00000000 ____D C:\Program Files\Java
2014-01-03 22:13 - 2014-01-03 22:13 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(2).exe
2014-01-03 17:03 - 2014-01-03 17:03 - 00001174 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-03 16:56 - 2014-01-03 16:56 - 00386383 _____ (hxxp://magiclauncher.com) C:\Users\andi_000\Documents\MagicLauncher_1.2.5.exe
2014-01-03 16:56 - 2014-01-03 16:56 - 00001280 _____ C:\Users\andi_000\Desktop\MagicLauncher.lnk
2014-01-03 16:51 - 2014-01-03 16:51 - 00457335 _____ C:\Users\andi_000\Desktop\OptiFine_1.7.2_HD_U_A7.jar
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\SoftWarehouse
2014-01-03 15:59 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-03 15:46 - 2014-01-03 15:46 - 02528254 _____ () C:\Users\andi_000\Downloads\forge-1.7.2-10.12.0.985-installer-win.exe
2014-01-03 15:43 - 2014-01-03 15:43 - 00140901 _____ C:\Users\andi_000\Downloads\InvTweaks-1.50-1.4.7.zip
2014-01-02 23:34 - 2014-01-02 23:34 - 04090376 _____ C:\Users\andi_000\Desktop\PSC 1.2.1(1).zip
2014-01-02 17:28 - 2014-01-02 17:28 - 02089345 _____ C:\Users\andi_000\Downloads\Font Pack From Rated.zip
2014-01-02 17:04 - 2014-01-02 17:04 - 120232802 _____ C:\Users\andi_000\Downloads\Chain Pack.rar
2014-01-02 17:02 - 2014-01-02 17:02 - 22322246 _____ C:\Users\andi_000\Downloads\Corrupts Chain and Flare 300 Sub Pack(1).rar
2014-01-02 17:01 - 2014-01-02 17:01 - 10285472 _____ C:\Users\andi_000\Downloads\IR4Dz Chain Pack(1).rar
2014-01-02 13:53 - 2014-01-02 14:07 - 336080295 _____ C:\Users\andi_000\Downloads\GFX PACK.rar
2014-01-02 00:02 - 2014-01-02 00:02 - 00004535 _____ C:\Users\andi_000\AppData\Roaming\CamStudio.cfg
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamShapes.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamLayout.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000046 _____ C:\Users\andi_000\AppData\Roaming\Camdata.ini
2014-01-02 00:01 - 2014-01-02 00:01 - 00000861 _____ C:\Users\Public\Desktop\CamStudio.lnk
2014-01-02 00:01 - 2014-01-02 00:01 - 00000096 _____ C:\Users\andi_000\AppData\Roaming\version2.xml
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Users\andi_000\Documents\My CamStudio Temp Files
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Program Files\CamStudio 2.7
2014-01-01 23:59 - 2014-01-01 23:59 - 11613447 _____ (CamStudio Open Source                                       ) C:\Users\andi_000\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe
2014-01-01 21:33 - 2014-01-01 21:33 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel(1).zip
2014-01-01 19:42 - 2014-01-01 19:42 - 00298752 _____ C:\WINDOWS\Minidump\010114-35937-01.dmp
2013-12-30 19:19 - 2013-12-30 20:41 - 00000046 _____ C:\Users\andi_000\Desktop\motd.txt
2013-12-30 01:19 - 2013-12-30 01:20 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(1).exe
2013-12-29 23:43 - 2013-12-30 00:53 - 00000000 ____D C:\Users\andi_000\Desktop\Vanilla Server
2013-12-29 23:42 - 2013-12-29 23:43 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel.zip
2013-12-29 22:31 - 2013-12-29 22:31 - 00002126 _____ C:\Users\Public\Desktop\MorphVOX Pro.lnk
2013-12-29 22:31 - 2013-12-29 22:31 - 00000000 ____D C:\Program Files (x86)\Screaming Bee
2013-12-29 22:29 - 2013-12-29 22:29 - 05930360 _____ C:\Users\andi_000\Downloads\MorphVOXPro4_Install-1.de.exe
2013-12-29 21:58 - 2013-12-29 21:59 - 00000016 _____ C:\Users\andi_000\Desktop\Neues Textdokument.txt
2013-12-29 18:47 - 2013-12-29 18:47 - 00000222 _____ C:\Users\andi_000\Desktop\Draw a Stickman EPIC.url
2013-12-29 13:56 - 2013-12-29 13:56 - 04518970 _____ C:\Users\andi_000\Downloads\mani_admin_plugin_v1_2_22_16_csgo_windows-only.zip
2013-12-28 20:15 - 2013-12-28 20:16 - 00000000 ____D C:\Accountmanager
2013-12-28 20:13 - 2013-12-28 20:13 - 00001700 _____ C:\Users\andi_000\Desktop\Uplay.lnk
2013-12-28 13:50 - 2013-12-28 13:50 - 00000219 _____ C:\Users\andi_000\Desktop\Counter-Strike Global Offensive.url
2013-12-26 02:30 - 2013-12-26 02:30 - 00000219 _____ C:\Users\andi_000\Desktop\Left 4 Dead 2.url
2013-12-26 00:14 - 2013-12-26 00:15 - 40709052 _____ C:\Users\andi_000\Downloads\KotSv14.zip
2013-12-26 00:12 - 2013-12-26 00:12 - 04090376 _____ C:\Users\andi_000\Downloads\PSC 1.2.1.zip
2013-12-25 23:54 - 2013-12-25 23:54 - 04313250 _____ C:\Users\andi_000\Downloads\Asi-Challenge.rar
2013-12-25 23:30 - 2013-12-25 23:31 - 95670968 _____ C:\Users\andi_000\Downloads\The dropper 2 Newton VS Darwin.zip
2013-12-25 22:37 - 2013-12-25 22:37 - 16488822 _____ C:\Users\andi_000\Downloads\Snow___Snowflakes_Brushes_by_redheadstock.zip
2013-12-24 14:50 - 2013-12-24 14:50 - 00019590 _____ C:\Users\andi_000\Downloads\secretlondon_red_present.svg
2013-12-24 13:39 - 2013-12-24 13:45 - 00000000 ____D C:\Noten
2013-12-24 13:27 - 2013-07-22 12:54 - 00001536 _____ C:\Users\andi_000\Desktop\Microsoft Visual Studio - Programmieren.lnk
2013-12-24 13:25 - 2013-12-24 13:25 - 00001511 _____ C:\Users\andi_000\Desktop\Teamspeak.lnk
2013-12-24 13:19 - 2013-12-24 13:19 - 00000221 _____ C:\Users\andi_000\Desktop\Call of Duty Modern Warfare 2.url
2013-12-23 15:24 - 2013-12-23 15:24 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-23 15:23 - 2013-12-23 15:25 - 00000000 ____D C:\Users\andi_000\Documents\Bomberman
2013-12-23 15:23 - 2013-12-23 15:23 - 03822860 _____ C:\Users\andi_000\Downloads\BombermanV096Beta.zip
2013-12-23 15:23 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\New Folder (2)
2013-12-23 11:15 - 2013-12-23 11:15 - 00017159 _____ C:\Users\andi_000\Downloads\money-pot.zip
2013-12-23 11:14 - 2013-12-23 11:14 - 00041772 _____ C:\Users\andi_000\Downloads\money-pot_f
2013-12-22 15:54 - 2013-12-22 15:54 - 02061330 _____ C:\Users\andi_000\Downloads\water_video_games_landscapes_trees_sea_wood_forest_beds_steve_islands_pixels_minecraft_holidays_cine_High
2013-12-21 22:54 - 2013-12-21 22:54 - 00086458 _____ C:\Users\andi_000\Downloads\arista.zip
2013-12-21 22:48 - 2013-12-21 22:48 - 00411255 _____ C:\Users\andi_000\Downloads\snowflakes_brush_39445.zip
2013-12-18 20:24 - 2013-12-30 18:03 - 00000000 ____D C:\Users\andi_000\Documents\Musik für Handy
2013-12-16 13:56 - 2013-11-12 00:41 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-16 13:56 - 2013-11-12 00:40 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-16 13:56 - 2013-11-12 00:27 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-16 13:56 - 2013-11-12 00:24 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-16 13:56 - 2013-11-11 03:48 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-16 13:56 - 2013-11-09 12:55 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-16 13:56 - 2013-11-09 07:37 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2013-12-16 13:56 - 2013-11-09 06:56 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2013-12-16 13:56 - 2013-11-08 11:26 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2013-12-16 13:56 - 2013-11-08 06:23 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2013-12-16 13:56 - 2013-11-08 05:43 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2013-12-16 13:56 - 2013-11-08 05:42 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2013-12-16 13:56 - 2013-11-08 05:28 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-16 13:56 - 2013-11-08 05:26 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-16 13:56 - 2013-11-08 05:16 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2013-12-16 13:56 - 2013-11-08 05:15 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2013-12-16 13:56 - 2013-11-08 05:07 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2013-12-16 13:56 - 2013-11-08 04:41 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-16 13:56 - 2013-11-08 04:14 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-16 13:56 - 2013-11-05 15:19 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2013-12-16 13:56 - 2013-11-05 15:03 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-12-16 13:56 - 2013-11-05 14:57 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-12-16 13:56 - 2013-11-05 14:33 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2013-12-16 13:56 - 2013-11-05 14:32 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2013-12-16 13:56 - 2013-11-04 18:13 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-16 13:56 - 2013-11-04 18:13 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-16 13:56 - 2013-11-04 14:07 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-16 13:56 - 2013-11-04 12:50 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-16 13:56 - 2013-11-04 11:32 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-16 13:56 - 2013-11-04 03:28 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-16 13:56 - 2013-11-04 02:30 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-16 13:56 - 2013-11-01 12:39 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2013-12-16 13:56 - 2013-11-01 07:08 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2013-12-16 13:56 - 2013-11-01 06:57 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2013-12-16 13:56 - 2013-10-31 01:58 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-16 13:56 - 2013-10-31 01:42 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-16 13:56 - 2013-10-31 01:33 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2013-12-16 13:56 - 2013-10-31 01:33 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2013-12-16 13:56 - 2013-10-31 01:33 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2013-12-16 13:56 - 2013-10-31 01:33 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2013-12-16 13:56 - 2013-10-26 02:54 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2013-12-16 13:56 - 2013-10-24 10:31 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2013-12-16 13:56 - 2013-10-24 10:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2013-12-16 13:56 - 2013-10-17 12:21 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2013-12-16 13:56 - 2013-10-17 11:36 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2013-12-16 13:56 - 2013-10-05 15:21 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-16 13:56 - 2013-10-05 15:21 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-16 13:56 - 2013-10-05 13:05 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-16 13:56 - 2013-10-05 13:05 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-13 21:09 - 2013-12-13 21:09 - 03821064 _____ C:\Users\andi_000\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-12-13 15:01 - 2013-12-13 15:03 - 188802726 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.mp4
2013-12-13 14:59 - 2013-12-13 15:00 - 124148696 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.avi
2013-12-12 20:07 - 2013-12-12 20:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 16:50 - 2013-12-12 17:43 - 00000000 ____D C:\Users\andi_000\Documents\Weihnacht
2013-12-11 14:22 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-11 14:22 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-11 14:22 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-11 14:22 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-11 14:22 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-11 14:22 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-11 14:22 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-11 14:22 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-11 14:22 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-11 14:22 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-11 14:22 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-11 14:22 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-11 14:22 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-11 14:22 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2013-12-11 14:22 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2013-12-11 14:22 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-11 14:22 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-11 14:22 - 2013-11-09 07:34 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2013-12-11 14:22 - 2013-11-09 07:34 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2013-12-11 14:22 - 2013-11-09 06:52 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2013-12-11 14:22 - 2013-10-19 09:53 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2013-12-11 14:22 - 2013-10-19 08:14 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2013-12-11 14:22 - 2013-10-15 09:54 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2013-12-11 14:22 - 2013-10-15 09:03 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2013-12-11 14:21 - 2013-11-23 05:34 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 05:13 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 04:32 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-11 14:21 - 2013-11-23 04:10 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2013-12-11 14:21 - 2013-11-08 08:21 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-09 17:15 - 2014-01-03 22:15 - 00000000 ____D C:\ProgramData\Oracle
2013-12-09 17:00 - 2013-12-09 17:00 - 00489619 _____ C:\Users\andi_000\Downloads\InstallZeriusVocoder13.exe
2013-12-09 17:00 - 2013-12-09 17:00 - 00001039 _____ C:\Users\UpdatusUser\Desktop\Zerius Vocoder.lnk
2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Program Files (x86)\VocoderGUI
2013-12-09 16:58 - 2013-12-09 16:58 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64.exe
2013-12-09 16:45 - 2013-12-09 16:47 - 00013780 _____ C:\Users\andi_000\Downloads\server(2).log
2013-12-09 15:24 - 2013-12-09 15:25 - 00043113 _____ C:\Users\andi_000\Downloads\beautiful_es.zip
2013-12-07 21:34 - 2013-12-07 21:34 - 00000000 ____D C:\Users\andi_000\Documents\Fax
2013-12-06 22:04 - 2013-12-06 22:04 - 00369412 _____ C:\Users\andi_000\Downloads\minecraft_rigV2(2).zip
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2013-12-06 15:19 - 2013-12-06 15:20 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-12-06 15:19 - 2013-12-06 15:19 - 00001094 _____ C:\Users\andi_000\Desktop\MSI Afterburner.lnk
2013-12-06 15:19 - 2013-12-06 15:19 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner

==================== One Month Modified Files and Folders =======

2014-01-04 22:24 - 2014-01-04 19:49 - 00019641 _____ C:\Users\andi_000\Downloads\FRST.txt
2014-01-04 22:22 - 2013-04-02 14:55 - 00000000 ____D C:\Users\andi_000\AppData\Local\Adobe
2014-01-04 22:21 - 2013-11-16 10:26 - 00000000 __RDO C:\Users\andi_000\SkyDrive
2014-01-04 22:21 - 2013-04-26 14:29 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-04 22:21 - 2013-03-22 19:47 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-04 22:19 - 2013-11-15 19:29 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-04 22:19 - 2013-09-29 20:04 - 00105800 _____ C:\WINDOWS\PFRO.log
2014-01-04 22:19 - 2013-08-22 15:46 - 00360850 _____ C:\WINDOWS\setupact.log
2014-01-04 22:19 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-04 22:18 - 2013-11-15 19:29 - 01813254 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-04 22:13 - 2013-11-20 11:11 - 00003926 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9F9F4DA0-3CD5-41A7-8828-8410B685E77B}
2014-01-04 22:12 - 2013-03-22 19:45 - 00003590 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-423698434-873744686-13932946-1001
2014-01-04 22:10 - 2014-01-04 22:10 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Malwarebytes
2014-01-04 22:10 - 2014-01-04 22:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-04 22:09 - 2014-01-04 22:09 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\andi_000\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-04 22:09 - 2014-01-04 22:09 - 00001117 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-04 22:09 - 2014-01-04 22:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 22:06 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2014-01-04 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-04 21:53 - 2013-08-22 15:44 - 05058768 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-04 21:51 - 2014-01-04 20:37 - 00000000 ____D C:\AdwCleaner
2014-01-04 21:49 - 2013-05-07 19:18 - 00001142 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001UA.job
2014-01-04 21:46 - 2013-03-22 20:00 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\PhotoLine
2014-01-04 21:23 - 2013-04-02 16:12 - 00000000 ____D C:\Users\andi_000\Documents\0Blender Files
2014-01-04 20:43 - 2013-03-22 19:48 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\TS3Client
2014-01-04 20:42 - 2013-08-27 22:11 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Spotify
2014-01-04 20:41 - 2014-01-04 20:41 - 00000837 _____ C:\Users\andi_000\Desktop\anleitung.txt
2014-01-04 20:37 - 2014-01-04 20:37 - 01233962 _____ C:\Users\andi_000\Desktop\adwcleaner.exe
2014-01-04 19:54 - 2014-01-04 19:52 - 00043510 _____ C:\Users\andi_000\Downloads\Addition.txt
2014-01-04 19:49 - 2014-01-04 19:49 - 00000000 ____D C:\FRST
2014-01-04 19:48 - 2014-01-04 19:48 - 01931368 _____ (Farbar) C:\Users\andi_000\Downloads\FRST64.exe
2014-01-04 19:03 - 2014-01-04 19:03 - 00001982 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-04 19:03 - 2014-01-04 19:03 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\AVAST Software
2014-01-04 19:03 - 2014-01-04 19:02 - 00079672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-01-04 19:03 - 2014-01-04 19:02 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-01-04 19:02 - 2014-01-04 19:02 - 01034464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00422216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-04 19:02 - 2014-01-04 19:02 - 00207904 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-04 19:02 - 2014-01-04 19:02 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-04 19:02 - 2014-01-04 19:02 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-04 19:01 - 2014-01-04 19:00 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-04 18:59 - 2014-01-04 18:59 - 91412976 _____ (AVAST Software) C:\Users\andi_000\Downloads\avast_free_antivirus_setup.exe
2014-01-04 15:57 - 2013-11-21 19:16 - 00039936 ___SH C:\Users\andi_000\Downloads\Thumbs.db
2014-01-04 15:01 - 2013-11-01 10:46 - 00000000 ____D C:\Users\andi_000\Documents\Euro Truck Simulator 2
2014-01-04 00:49 - 2014-01-04 00:49 - 00124928 ___SH C:\Users\andi_000\Desktop\Thumbs.db
2014-01-04 00:49 - 2013-05-07 19:18 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001Core.job
2014-01-03 22:28 - 2014-01-03 22:25 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\.minecraft
2014-01-03 22:21 - 2013-03-30 20:36 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\FileZilla
2014-01-03 22:15 - 2014-01-03 22:15 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-03 22:15 - 2014-01-03 22:15 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-01-03 22:15 - 2014-01-03 22:15 - 00000000 ____D C:\Program Files\Java
2014-01-03 22:15 - 2013-12-09 17:15 - 00000000 ____D C:\ProgramData\Oracle
2014-01-03 22:13 - 2014-01-03 22:13 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(2).exe
2014-01-03 17:03 - 2014-01-03 17:03 - 00001174 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-01-03 17:03 - 2013-03-26 20:08 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\TeamViewer
2014-01-03 17:03 - 2013-03-26 19:50 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2014-01-03 16:56 - 2014-01-03 16:56 - 00386383 _____ (hxxp://magiclauncher.com) C:\Users\andi_000\Documents\MagicLauncher_1.2.5.exe
2014-01-03 16:56 - 2014-01-03 16:56 - 00001280 _____ C:\Users\andi_000\Desktop\MagicLauncher.lnk
2014-01-03 16:51 - 2014-01-03 16:51 - 00457335 _____ C:\Users\andi_000\Desktop\OptiFine_1.7.2_HD_U_A7.jar
2014-01-03 16:00 - 2014-01-03 16:00 - 00000000 ____D C:\ProgramData\SoftWarehouse
2014-01-03 16:00 - 2014-01-03 15:59 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-03 15:46 - 2014-01-03 15:46 - 02528254 _____ () C:\Users\andi_000\Downloads\forge-1.7.2-10.12.0.985-installer-win.exe
2014-01-03 15:43 - 2014-01-03 15:43 - 00140901 _____ C:\Users\andi_000\Downloads\InvTweaks-1.50-1.4.7.zip
2014-01-02 23:34 - 2014-01-02 23:34 - 04090376 _____ C:\Users\andi_000\Desktop\PSC 1.2.1(1).zip
2014-01-02 17:28 - 2014-01-02 17:28 - 02089345 _____ C:\Users\andi_000\Downloads\Font Pack From Rated.zip
2014-01-02 17:04 - 2014-01-02 17:04 - 120232802 _____ C:\Users\andi_000\Downloads\Chain Pack.rar
2014-01-02 17:02 - 2014-01-02 17:02 - 22322246 _____ C:\Users\andi_000\Downloads\Corrupts Chain and Flare 300 Sub Pack(1).rar
2014-01-02 17:01 - 2014-01-02 17:01 - 10285472 _____ C:\Users\andi_000\Downloads\IR4Dz Chain Pack(1).rar
2014-01-02 14:07 - 2014-01-02 13:53 - 336080295 _____ C:\Users\andi_000\Downloads\GFX PACK.rar
2014-01-02 13:58 - 2013-07-14 13:02 - 00000000 ____D C:\Users\andi_000\Documents\Visual Studio 2012
2014-01-02 00:03 - 2013-11-15 19:32 - 00000000 ____D C:\Users\andi_000
2014-01-02 00:02 - 2014-01-02 00:02 - 00004535 _____ C:\Users\andi_000\AppData\Roaming\CamStudio.cfg
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamShapes.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000408 _____ C:\Users\andi_000\AppData\Roaming\CamLayout.ini
2014-01-02 00:02 - 2014-01-02 00:02 - 00000046 _____ C:\Users\andi_000\AppData\Roaming\Camdata.ini
2014-01-02 00:01 - 2014-01-02 00:01 - 00000861 _____ C:\Users\Public\Desktop\CamStudio.lnk
2014-01-02 00:01 - 2014-01-02 00:01 - 00000096 _____ C:\Users\andi_000\AppData\Roaming\version2.xml
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Users\andi_000\Documents\My CamStudio Temp Files
2014-01-02 00:01 - 2014-01-02 00:01 - 00000000 ____D C:\Program Files\CamStudio 2.7
2014-01-01 23:59 - 2014-01-01 23:59 - 11613447 _____ (CamStudio Open Source                                       ) C:\Users\andi_000\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe
2014-01-01 21:33 - 2014-01-01 21:33 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel(1).zip
2014-01-01 19:42 - 2014-01-01 19:42 - 00298752 _____ C:\WINDOWS\Minidump\010114-35937-01.dmp
2014-01-01 19:42 - 2013-11-16 10:22 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-01 19:42 - 2013-05-06 13:21 - 731731548 _____ C:\WINDOWS\MEMORY.DMP
2013-12-30 20:41 - 2013-12-30 19:19 - 00000046 _____ C:\Users\andi_000\Desktop\motd.txt
2013-12-30 18:05 - 2013-05-01 13:34 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Audacity
2013-12-30 18:03 - 2013-12-18 20:24 - 00000000 ____D C:\Users\andi_000\Documents\Musik für Handy
2013-12-30 18:02 - 2013-08-27 22:11 - 00000000 ____D C:\Users\andi_000\AppData\Local\Spotify
2013-12-30 14:24 - 2013-09-02 21:43 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Skype
2013-12-30 12:53 - 2013-04-10 14:40 - 00270408 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2013-12-30 12:53 - 2013-03-28 12:55 - 00270408 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2013-12-30 12:23 - 2013-11-19 23:16 - 00284160 ___SH C:\Users\andi_000\Documents\Thumbs.db
2013-12-30 01:20 - 2013-12-30 01:19 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64(1).exe
2013-12-30 00:53 - 2013-12-29 23:43 - 00000000 ____D C:\Users\andi_000\Desktop\Vanilla Server
2013-12-29 23:43 - 2013-12-29 23:42 - 17515548 _____ C:\Users\andi_000\Downloads\Herobrines Return 1.7 by Hypixel.zip
2013-12-29 22:31 - 2013-12-29 22:31 - 00002126 _____ C:\Users\Public\Desktop\MorphVOX Pro.lnk
2013-12-29 22:31 - 2013-12-29 22:31 - 00000000 ____D C:\Program Files (x86)\Screaming Bee
2013-12-29 22:31 - 2013-09-08 21:28 - 00000000 ____D C:\ProgramData\Screaming Bee
2013-12-29 22:29 - 2013-12-29 22:29 - 05930360 _____ C:\Users\andi_000\Downloads\MorphVOXPro4_Install-1.de.exe
2013-12-29 22:03 - 2013-09-30 05:14 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-29 22:03 - 2013-09-30 04:56 - 00764340 _____ C:\WINDOWS\system32\perfh007.dat
2013-12-29 22:03 - 2013-09-30 04:56 - 00159160 _____ C:\WINDOWS\system32\perfc007.dat
2013-12-29 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-12-29 21:59 - 2013-12-29 21:58 - 00000016 _____ C:\Users\andi_000\Desktop\Neues Textdokument.txt
2013-12-29 18:50 - 2013-03-23 09:27 - 00320421 _____ C:\WINDOWS\DirectX.log
2013-12-29 18:47 - 2013-12-29 18:47 - 00000222 _____ C:\Users\andi_000\Desktop\Draw a Stickman EPIC.url
2013-12-29 18:39 - 2013-03-22 20:39 - 06220854 _____ C:\Users\andi_000\Documents\PL-Wallpaper.bmp
2013-12-29 13:56 - 2013-12-29 13:56 - 04518970 _____ C:\Users\andi_000\Downloads\mani_admin_plugin_v1_2_22_16_csgo_windows-only.zip
2013-12-28 20:16 - 2013-12-28 20:15 - 00000000 ____D C:\Accountmanager
2013-12-28 20:13 - 2013-12-28 20:13 - 00001700 _____ C:\Users\andi_000\Desktop\Uplay.lnk
2013-12-28 19:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-12-28 13:50 - 2013-12-28 13:50 - 00000219 _____ C:\Users\andi_000\Desktop\Counter-Strike Global Offensive.url
2013-12-28 00:27 - 2013-09-02 21:42 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-28 00:27 - 2013-09-02 21:42 - 00000000 ____D C:\ProgramData\Skype
2013-12-26 02:30 - 2013-12-26 02:30 - 00000219 _____ C:\Users\andi_000\Desktop\Left 4 Dead 2.url
2013-12-26 00:15 - 2013-12-26 00:14 - 40709052 _____ C:\Users\andi_000\Downloads\KotSv14.zip
2013-12-26 00:12 - 2013-12-26 00:12 - 04090376 _____ C:\Users\andi_000\Downloads\PSC 1.2.1.zip
2013-12-25 23:54 - 2013-12-25 23:54 - 04313250 _____ C:\Users\andi_000\Downloads\Asi-Challenge.rar
2013-12-25 23:31 - 2013-12-25 23:30 - 95670968 _____ C:\Users\andi_000\Downloads\The dropper 2 Newton VS Darwin.zip
2013-12-25 22:37 - 2013-12-25 22:37 - 16488822 _____ C:\Users\andi_000\Downloads\Snow___Snowflakes_Brushes_by_redheadstock.zip
2013-12-24 14:50 - 2013-12-24 14:50 - 00019590 _____ C:\Users\andi_000\Downloads\secretlondon_red_present.svg
2013-12-24 13:45 - 2013-12-24 13:39 - 00000000 ____D C:\Noten
2013-12-24 13:25 - 2013-12-24 13:25 - 00001511 _____ C:\Users\andi_000\Desktop\Teamspeak.lnk
2013-12-24 13:19 - 2013-12-24 13:19 - 00000221 _____ C:\Users\andi_000\Desktop\Call of Duty Modern Warfare 2.url
2013-12-24 13:14 - 2013-06-18 15:51 - 00002026 _____ C:\Users\andi_000\Desktop\Blender Files.lnk
2013-12-23 21:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2013-12-23 15:30 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-12-23 15:25 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\Bomberman
2013-12-23 15:24 - 2013-12-23 15:24 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-23 15:24 - 2013-12-23 15:24 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-23 15:24 - 2013-12-23 15:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-23 15:23 - 2013-12-23 15:23 - 03822860 _____ C:\Users\andi_000\Downloads\BombermanV096Beta.zip
2013-12-23 15:23 - 2013-12-23 15:23 - 00000000 ____D C:\Users\andi_000\Documents\New Folder (2)
2013-12-23 13:15 - 2013-07-06 11:43 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\vlc
2013-12-23 11:15 - 2013-12-23 11:15 - 00017159 _____ C:\Users\andi_000\Downloads\money-pot.zip
2013-12-23 11:14 - 2013-12-23 11:14 - 00041772 _____ C:\Users\andi_000\Downloads\money-pot_f
2013-12-22 15:54 - 2013-12-22 15:54 - 02061330 _____ C:\Users\andi_000\Downloads\water_video_games_landscapes_trees_sea_wood_forest_beds_steve_islands_pixels_minecraft_holidays_cine_High
2013-12-21 22:54 - 2013-12-21 22:54 - 00086458 _____ C:\Users\andi_000\Downloads\arista.zip
2013-12-21 22:48 - 2013-12-21 22:48 - 00411255 _____ C:\Users\andi_000\Downloads\snowflakes_brush_39445.zip
2013-12-18 14:52 - 2013-11-25 14:16 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2013-12-18 14:52 - 2013-11-23 16:09 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-12-18 14:52 - 2013-11-23 16:09 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-12-16 19:05 - 2013-07-13 17:12 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-16 19:03 - 2013-03-23 21:58 - 90708896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-16 13:49 - 2013-08-07 19:32 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-12-16 13:49 - 2013-03-22 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 21:26 - 2013-03-28 12:55 - 00290184 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2013-12-13 21:09 - 2013-12-13 21:09 - 03821064 _____ C:\Users\andi_000\Downloads\battlelog-web-plugins_2.3.2_130.exe
2013-12-13 15:03 - 2013-12-13 15:01 - 188802726 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.mp4
2013-12-13 15:00 - 2013-12-13 14:59 - 124148696 _____ C:\Users\andi_000\Downloads\Bushido - Leben und Tod des Kenneth Glöckler.avi
2013-12-12 20:07 - 2013-12-12 20:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 17:43 - 2013-12-12 16:50 - 00000000 ____D C:\Users\andi_000\Documents\Weihnacht
2013-12-09 20:09 - 2013-03-23 09:43 - 00000000 ____D C:\Fraps
2013-12-09 17:00 - 2013-12-09 17:00 - 00489619 _____ C:\Users\andi_000\Downloads\InstallZeriusVocoder13.exe
2013-12-09 17:00 - 2013-12-09 17:00 - 00001039 _____ C:\Users\UpdatusUser\Desktop\Zerius Vocoder.lnk
2013-12-09 17:00 - 2013-12-09 17:00 - 00000000 ____D C:\Program Files (x86)\VocoderGUI
2013-12-09 16:58 - 2013-12-09 16:58 - 30694824 _____ (Oracle Corporation) C:\Users\andi_000\Downloads\jre-7u45-windows-x64.exe
2013-12-09 16:47 - 2013-12-09 16:45 - 00013780 _____ C:\Users\andi_000\Downloads\server(2).log
2013-12-09 16:38 - 2013-03-24 23:46 - 00761375 _____ () C:\Users\andi_000\Documents\FTB_Launcher.exe
2013-12-09 16:38 - 2013-03-24 23:46 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\ftblauncher
2013-12-09 15:25 - 2013-12-09 15:24 - 00043113 _____ C:\Users\andi_000\Downloads\beautiful_es.zip
2013-12-09 15:21 - 2013-04-30 17:06 - 00491823 ____H C:\Users\andi_000\Documents\Browse.plb
2013-12-08 16:52 - 2013-10-23 16:21 - 00000000 ____D C:\Users\andi_000\Documents\Marissa Titelbild
2013-12-08 00:44 - 2013-05-07 19:18 - 00004094 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001UA
2013-12-08 00:44 - 2013-05-07 19:18 - 00003714 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-423698434-873744686-13932946-1001Core
2013-12-07 21:34 - 2013-12-07 21:34 - 00000000 ____D C:\Users\andi_000\Documents\Fax
2013-12-07 08:29 - 2013-11-30 16:57 - 00000000 ____D C:\Users\andi_000\Documents\SimCity KEy
2013-12-06 22:04 - 2013-12-06 22:04 - 00369412 _____ C:\Users\andi_000\Downloads\minecraft_rigV2(2).zip
2013-12-06 17:46 - 2013-11-15 19:26 - 00000000 ____D C:\Windows.old
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2013-12-06 15:20 - 2013-12-06 15:20 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2013-12-06 15:20 - 2013-12-06 15:19 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2013-12-06 15:19 - 2013-12-06 15:19 - 00001094 _____ C:\Users\andi_000\Desktop\MSI Afterburner.lnk
2013-12-06 15:19 - 2013-12-06 15:19 - 00000000 ____D C:\Users\andi_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner

Files to move or delete:
====================
C:\Users\andi_000\AppData\Roaming\CamLayout.ini
C:\Users\andi_000\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\andi_000\AppData\Local\Temp\avgnt.exe
C:\Users\andi_000\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\andi_000\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\andi_000\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\andi_000\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\andi_000\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\andi_000\AppData\Local\Temp\nvStInst.exe
C:\Users\andi_000\AppData\Local\Temp\Quarantine.exe
C:\Users\andi_000\AppData\Local\Temp\sonarinst.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-02 15:23

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Lg
Andi

Sieht gut aus.


Schritt 1

Dein Flashplayer ist veraltet. Installiere folgendermassen die aktuelle Version:

• Besuche diese Seite von Adobe.
• Entferne gegebenenfalls den Haken bei McAfee Security Scan bzw. Google Chrome.
• Drücke auf Jetzt herunterladen und installiere die neuste Version.

Überprüfe dann mit diesem Plugin-Check (mit dem Firefox hier), ob nun alle deine verwendeten Versionen aktuell sind und update sie anderenfalls.



Cleanup

Zum Schluss werden wir jetzt noch unsere Tools (inklusive der Quarantäne-Ordner) wegräumen, die verseuchten Systemwiederherstellungspunkte löschen und alle Einstellungen wieder herrichten. Auch diese Schritte sind noch wichtig und sollten in der angegebenen Reihenfolge ausgeführt werden.

1. Bei MBAM würd ich dir unbedingt empfehlen, es zu behalten und wöchentlich einen Quick-Scan durchzuführen. Wenn du es nicht weiter verwenden möchtest, kannst du es jetzt normal über die Systemsteuerung deinstallieren.
2. Downloade dir bitte auf jeden Fall DelFix auf deinen Desktop.
   • Schliesse alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • DelFix entfernt u.a. alle von uns verwendeten Programme und löscht sich anschliessend selbst.
3. Wenn jetzt noch etwas übriggeblieben ist, dann kannst du es einfach manuell löschen.

>> OK <<
Wir sind durch, deine Logs sehen für mich im Moment sauber aus.

Ich habe dir nachfolgend ein paar Hinweise und Tipps zusammengestellt, die dazu beitragen sollen, dass du in Zukunft unsere Hilfe nicht mehr brauchen wirst.

Bitte gib mir danach noch eine kurze Rückmeldung, wenn auch von deiner Seite keine Probleme oder Fragen mehr offen sind, damit ich dieses Thema als erledigt betrachten kann.




Epilog: Tipps, Dos & Don'ts

Aktualität von System und Software

Das Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:

• Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
• Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren

Auch die installierte Software sollte immer in der aktuellsten Version vorliegen.
Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.

• Mit diesem kleinen Plugin-Check kannst du regelmässig diese Komponenten auf deren Aktualität überprüfen.
• Achte auch darauf, dass alte, nicht mehr verwendete Versionen deinstalliert sind.
• Optional: Das Programm Secunia Personal Software Inspector kann dich dabei unterstützen, stets die aktuellen Versionen sämtlicher installierter Software zu nutzen.

Sicherheits-Software

Eine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine verseuchte Datei nicht erkennt).
Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.

• Nutze einen Virenscanner mit Hintergrundwächter mit stets aktueller Datenbank. Welches Produkt gewählt wird, spielt keine so entscheidende Rolle. Wenn du ein kommerzielles Programm kaufen möchtest, kann ich dir Emsisoft Anti-Malware empfehlen (die Freeware-Version davon reicht aber nicht, denn die hat keinen Hintergrundwächter). Bevorzugst du ein kostenloses Produkt, dann ist Avast! Free Antivirus eine gute Alternative.
  Betreibe aber keinesfalls zwei Wächter parallel, die würden sich gegenseitig behindern.
• Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.
• Zusätzlich zum Virenscanner kannst du dein System regelmässig mit einem On-Demand Antimalwareprogramm scannen. Empfehlenswert ist die Free-Version von Malwarebytes Anti-Malware. Vor jedem Scan die Datenbank updaten.
• Optional: Das Programm Sandboxie führt Anwendungen in einer isolierten Umgebung ("Sandkasten") aus, so dass keine Änderungen am System vorgenommen werden können. Wenn du deinen Browser darin startest, vermindert sich die Chance, dass beim Surfen eingefangene Malware sich dauerhaft im System festsetzen kann.
• Optional: Das Addon WOT (web of trust) warnt dich vor einer als schädlich gemeldeten Website, bevor sie geladen wird. Für verschiedene Browser erhältlich.

Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt.
Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:

• NoScript verhindert standardmässig das Ausführen von aktiven Inhalten (Java, JavaScript, Flash, ..) für sämtliche Websites. Du kannst selber nach dem Prinzip einer Whitelist festlegen, welchen Seiten du vertrauen und Scripts erlauben willst, auch temporär.
• Adblock Plus blockt die meisten Werbebanner weg. Solche Banner können nebst ihrer störenden Erscheinung auch als Infektionsherde fungieren.

(Un-)Sicheres Verhalten im Internet

Nebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert.

Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.

• Illegale Cracks, Keygens und Serials sind ein ausgesprochen einfacher (und ein beliebter) Weg, um Malware zu verbreiten.
• Bei Dateien aus Peer-to-Peer- und Filesharingprogrammen oder von Filehostern kannst du dir nie sicher sein, ob auch wirklich drin ist, was drauf steht.

Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).

• Surfe mit Vorsicht und lass dich nicht von irgendwie interessant erscheinenden Elementen zu einem vorschnellen Klick verleiten. Lass dich nicht von Popups täuschen, die aussehen wie System- oder Virenmeldungen.
• Sei skeptisch bei unerwarteten E-Mails, insbesondere wenn sie Anhänge enthalten. Auch wenn sie auf den ersten Blick authentisch wirken, persönliche Daten von dir enthalten oder vermeintlich von einem bekannten Absender stammen: Lieber nochmals in Ruhe überdenken oder nachfragen, anstatt einfach mal Links oder ausführbare Anhänge öffnen oder irgendwo deine Daten eingeben.
• Auch in sozialen Netzwerken oder über Instant Messaging Systeme können schädliche Links oder Dateien die Runde machen. Erhältst du von einem deiner Freunde eine Nachricht, die merkwürdig ist oder so sensationell interessant oder skandalös tönt, dass man einfach draufklicken muss, dann hat bei ihm/ihr wahrscheinlich Neugier über Verstand gesiegt und du solltest nicht denselben Fehler machen.
• Lass die Dateiendungen anzeigen, so dass du dich nicht täuschen lässt, wenn eine ausführbare Datei über ein doppelte Dateiendung kaschiert wird, z.B. Nacktfoto.jpg.exe.

Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.

• Lade Software in erster Priorität immer direkt vom Hersteller herunter. Viele Softwareportale (z.B. Softonic) packen noch unnützes Zeug mit in die Installation. Alternativ dazu wähle ein sauberes Portal wie Filepony oder heise.
• Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen fürs Programm irrelevanten Ergänzungen.

Allgemeine Hinweise

Abschliessend noch ein paar grundsätzliche Bemerkungen:

• Dein Benutzerkonto für den alltäglichen Gebrauch sollte nicht über Administratorenrechte verfügen. Nutze ein Konto mit eingeschränkten Rechten (Windows XP) bzw. aktiviere die Benutzerkontensteuerung (UAC) auf der höchsten Stufe (Windows Vista / 7).
• Erstelle regelmässig Backups deiner Daten und Dokumente auf externen Datenträgern, bei wichtigen Dateien mindestens zweifach. Nicht nur ein Malwarebefall kann schmerzhaften Datenverlust nach sich ziehen sondern auch ein gewöhnlicher Festplattendefekt.
• Die Autorun/Autoplay-Funktion stellt ein Risiko dar, denn sie ermöglicht es, dass beispielsweise beim Einstecken eines entsprechend infizierten USB-Sticks der Befall auf den Rechner überspringt. Überlege dir, ob du diese Funktion nicht besser deaktivieren möchtest.
• Wähle deine Passwörter gemäss den gängigen Regeln, um besser gegen Brute-Force- und Wörterbuchattacken gewappnet zu sein. Benutze jedes deiner Passwörter nur einmal und ändere sie regelmässig.
• Der Nutzen von Registry-Cleanern zur Performancesteigerung ist umstritten. Auf jeden Fall lässt sich damit grosser Schaden anrichten, wenn man nicht weiss, was man tut. Wir empfehlen deshalb, die Finger von der Registry zu lassen. Um von Zeit zu Zeit die temporären Dateien zu löschen, genügt TFC.

Wenn du möchtest, kannst du das Forum mit einer kleinen Spende unterstützen.
Es bleibt mir nur noch, dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen.

Ich schau mir das ganze morgen nochmal an, aber ich muss ehrlich sagen DANKE.
VIELEN DANK, dass du dir so viel Mühe gegeben hast einen fremden zu helfen.

Bin jetz echt happy
Ich finds echt richtig cool von dir

Lg
Andi

Freut mich, dass wir helfen konnten.

Falls du dem Forum noch Verbesserungsvorschläge, Kritik oder ein Lob mitgeben möchtest, kannst du das hier tun.

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten.
Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.