|
Log-Analyse und Auswertung: Win7 , 64 bit -- (Firefox) Nation-zoom Befall.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.01.2014, 13:32 | #1 |
| Win7 , 64 bit -- (Firefox) Nation-zoom Befall. Grüße Ich hab mir im Netz die schädliche Seite Nation-zoom eingefangen und auch zu spät recherchiert, das SpyHunter nicht hilft, sondern eher das ganze noch verschlimmert. Natürlich prompt ausgeführt und ..naja :-/ Ob sich neben diesem Plagegeist noch andre Schadsoftware auf dem Rechner befindet WEISS ich nicht, vermute es aber wild. MalwareBytes habe ich mir geholt, aber noch nicht aus finanziellen Gründen registrieren können (falls das von Relevanz ist aktuell). GData scheint mit diesen Problemen offenkundig überfordert und reagiert nicht, obwohl up to Date und registriert. AVG Antivirus.. da weiss ich nicht, ob sich eine Vollregistrierung lohnt. Allgemein bin ich unschlüssig und unwissend, was für ein AntiVir Programm wirklich zuverlässig ist. Andre Antiviren-log´s finde ich aktuell leider nicht. Die habe ich verpennt zu saven. Nun weiss ich nicht, inwieweit mein komplettes System nun verseucht ist, ob ich mein Rechner neu installen muss oder ob ich mit euch zusammen das Problem beseitigen kann. Letzteres wäre mir superlieb. Anbei die mir vorliegenden logfiles. PS: ich habe im Vorfeld soweit ich Kenntniss hatte und Alarm geschlagen wurde, manuell Sachen entfernt, aber als es unübersichtlich wurde, die Finger von gelassen. ___________________ Additional Log Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-01-2014 01 Ran by Boronian at 2014-01-09 11:41:54 Running from C:\Users\Boronian\Downloads\Antiviren zeug Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG AntiVirus 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AV: G Data TotalProtection 2014 (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AS: G Data TotalProtection 2014 (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: AVG AntiVirus 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated) AION Free-To-Play (x32 Version: 2.70.0000 - Gameforge) AION Free-To-Play (x32 Version: 2.70.0000 - Gameforge) Hidden AVG 2014 (Version: 14.0.3658 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4259 - AVG Technologies) Hidden AVG 2014 (Version: 2014.0.4259 - AVG Technologies) AVG PC TuneUp 2014 (de-DE) (x32 Version: 14.0.1001.229 - AVG) Hidden AVG PC TuneUp 2014 (x32 Version: 14.0.1001.229 - AVG) AVG PC TuneUp 2014 (x32 Version: 14.0.1001.229 - AVG) Hidden Bejeweled 3 (x32 Version: - PopCap Games) Bejeweled Blitz (x32 Version: - PopCap Games) Blacklight: Retribution (x32 Version: - ) Diablo III (x32 Version: 1.0.8.16603 - Blizzard Entertainment) Download Updater (AOL LLC) (x32 Version: - ) Dragon Age II (x32 Version: 1.04 - Electronic Arts, Inc.) Dungeon Siege III (x32 Version: - Obsidian Entertainment) Dungeons & Dragons Online ®: Eberron Unlimited ™ v01.17.01.801 (x32 Version: 01.17.01.8018 - Atari, Inc.) EA Shared Game Component: Activation (x32 Version: 2.2.0 - Electronic Arts) Hidden EA Shared Game Component: Activation (x32 Version: 2.2.0.62 - Electronic Arts) ESO Survey Live version 1.3.0 (x32 Version: 1.3.0 - Immersyve, Inc.) FINAL FANTASY XIV - A Realm Reborn (x32 Version: 1.0.0000 - SQUARE ENIX CO., LTD.) FoxyDeal (x32 Version: 1.1.0 - R&E Media GmbH) G Data TotalProtection 2014 (x32 Version: 24.0.3.4 - G Data Software AG) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Glyph Deluxe (x32 Version: 1.0.0 - Zylom Games) Glyph(TM) (x32 Version: - ) Guild Wars 2 (x32 Version: - ) HTC BMP USB Driver (x32 Version: 1.0.5375 - HTC) ICQ 8.2 (build 6901) (HKCU Version: 8.2.6901.0 - ICQ) ICQ7M (x32 Version: 7.8 - ICQ) IPTInstaller (x32 Version: 4.0.8 - HTC) Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation) Legend of Grimrock (x32 Version: - ) Logitech G15 Keyboard Software 1.04 (Version: 1.04.153 - Logitech) Logitech Gaming Software (Version: 8.35.18 - Logitech Inc.) Hidden Logitech Gaming Software 8.35 (Version: 8.35.18 - Logitech Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.109 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.109 - LogMeIn, Inc.) Hidden Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Mars: War Logs (x32 Version: - Spiders) Mass Effect 2 (x32 Version: 1.2.1604.0 - Electronic Arts) Mass Effect™ 3 (x32 Version: 1.05.0.0 - Electronic Arts) McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.) Microsoft .NET Framework 1.1 (x32 Version: - ) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 2.3.145.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 2.3.145.0 - Microsoft Corporation) Hidden Mozilla Firefox 20.0.1 (x86 de) (x32 Version: 20.0.1 - Mozilla) Mozilla Firefox 26.0 (x86 de) (HKCU Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 20.0.1 - Mozilla) MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation) Neverwinter (x32 Version: - Cryptic Studios) Neverwinter Nude Mods v1.0.0 version 1.0.0 (x32 Version: 1.0.0 - ) NVIDIA 3D Vision Controller-Treiber 332.21 (Version: 332.21 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 332.21 (Version: 332.21 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 332.21 (Version: 332.21 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.30.1 (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation) Oblivion (x32 Version: 1.2.0416 - Bethesda Softworks) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation) Orcs Must Die! 2 (x32 Version: - ) Path of Exile (x32 Version: 0.10.1.22906 - Grinding Gear Games) POSTAL 2 Complete (x32 Version: - Running With Scissors) PunkBuster Services (x32 Version: 0.992 - Even Balance, Inc.) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6526 - Realtek Semiconductor Corp.) Runes of Magic (x32 Version: 4.0.8.2498 - Frogster Online Gaming GmbH) SecondLifeViewer (remove only) (x32 Version: - ) SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) Spotify (HKCU Version: 0.9.6.81.gd359a796 - Spotify AB) Spybot - Search & Destroy (x32 Version: 2.1.19 - Safer-Networking Ltd.) SpyHunter (Version: 4.16.5.4290 - Enigma Software Group USA, LLC) Star Trek Online (x32 Version: - Cryptic Studios) Star Wars: The Old Republic (x32 Version: 1.00 - Electronic Arts, Inc.) Steam (x32 Version: 1.0.0.0 - Valve Corporation) TeamSpeak 3 Client (x32 Version: 3.0.13.1 - TeamSpeak Systems GmbH) TeamViewer 8 (x32 Version: 8.0.17396 - TeamViewer) The Elder Scrolls Online Beta (x32 Version: 0.3.4 - ) The Secret World (x32 Version: - Funcom) The Secret World (x32 Version: 1.0.0 - Funcom) The Witcher (x32 Version: 1.00.0000 - CD Projekt Red) The Witcher 2 (x32 Version: 1.00.0000 - CD Projekt Red) Total Commander 64-bit (Remove or Repair) (Version: 8.01 - Ghisler Software GmbH) Updater (x32 Version: 2.6.53 - Creative Island Media, LLC) Venetica (x32 Version: - dtp) Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.0.8 (Version: 2.0.8 - VideoLAN) World of Tanks v.0.7.4 (x32 Version: - Wargaming.net) Worms Armageddon (x32 Version: - ) XCOM: Enemy Unknown (x32 Version: - ) YTD YouTube Downloader & Converter 3.6 (x32 Version: - GreenTree Applications SRL) ==================== Restore Points ========================= 08-01-2014 04:33:32 DirectX wurde installiert 08-01-2014 11:28:41 Installed SpyHunter 09-01-2014 09:57:34 Removed SpyHunter ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0D308582-3A1B-4E65-B8D7-0FAD9D145DD2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {2FCD3C80-ADAA-4799-84B4-364E1DFADD1F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {3B041025-A430-414F-A0A8-BA408E3F4CF0} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated) Task: {46F78B5D-793D-4CC2-9A8C-F09534F02CE0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {54A57C28-CB9F-4D96-B1A9-D62C57DB58E5} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation) Task: {5C5D4174-5E1F-4D13-80BC-EFCB722B7850} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION Task: {5E5AE4B7-255C-41D5-8C0F-5DE0A0B26C46} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation) Task: {63F9EA3B-11C3-484C-952E-09B14F288B31} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe [2013-09-04] (Microsoft) Task: {66D9AF18-362B-4F64-8455-6A7E43ACDD8B} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {B6F50192-5FAC-4B1A-AEB5-A67FE24B9BE1} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-09-04] (Microsoft Corporation) Task: {CD2AF45E-85A3-4D5E-93DD-5E56FAADA110} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe [2013-10-18] (Enigma Software Group USA, LLC.) Task: {D7319112-4885-449D-AC15-421E1A7CD197} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe [2013-10-30] (AVG) Task: {F1E19543-6B19-4B6E-892C-0FD66615FA03} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {F3154458-A573-458B-B69E-58F3C2494B16} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-09-04] (Microsoft Corporation) Task: {FBCA6C82-A0EB-4A25-99A7-C65E5A23A5E9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-07-28 16:02 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-07-28 16:02 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-07-28 16:02 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-07-28 16:02 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-07-28 16:02 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-01-08 05:14 - 2013-12-12 23:19 - 00142848 _____ () E:\Steam\libavresample-1.dll 2014-01-08 05:14 - 2013-11-05 02:12 - 00890592 _____ () E:\Steam\libavutil-52.dll 2013-03-12 17:10 - 2013-12-12 23:04 - 00716800 _____ () E:\Steam\SDL2.dll 2012-05-06 03:33 - 2014-01-07 22:00 - 01138088 _____ () E:\Steam\bin\chromehtml.DLL 2012-05-06 03:33 - 2013-12-12 23:04 - 20625832 _____ () E:\Steam\bin\libcef.dll 2012-05-06 03:33 - 2013-06-15 00:49 - 01100800 _____ () E:\Steam\bin\avcodec-53.dll 2012-05-06 03:33 - 2013-06-15 00:49 - 00124416 _____ () E:\Steam\bin\avutil-51.dll 2012-05-06 03:33 - 2013-06-15 00:49 - 00192000 _____ () E:\Steam\bin\avformat-53.dll 2013-12-12 19:00 - 2013-12-12 19:00 - 03559024 _____ () D:\Programe\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/09/2014 02:11:38 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.13238.730, Zeitstempel: 0x521b2984 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00038e19 ID des fehlerhaften Prozesses: 0x84c Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0 Pfad der fehlerhaften Anwendung: AVKProxy.exe1 Pfad des fehlerhaften Moduls: AVKProxy.exe2 Berichtskennung: AVKProxy.exe3 Error: (01/08/2014 11:00:46 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: SLVoice.exe, Version: 4.5.9.17865, Zeitstempel: 0x505b00f4 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000264 Fehleroffset: 0x000a2525 ID des fehlerhaften Prozesses: 0xce4 Startzeit der fehlerhaften Anwendung: 0xSLVoice.exe0 Pfad der fehlerhaften Anwendung: SLVoice.exe1 Pfad des fehlerhaften Moduls: SLVoice.exe2 Berichtskennung: SLVoice.exe3 Error: (01/08/2014 11:25:30 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"2" in Zeile Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762". Definition: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (01/07/2014 10:05:42 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (01/07/2014 10:05:42 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (01/06/2014 05:46:17 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: AVKProxy.exe, Version: 1.5.13238.730, Zeitstempel: 0x521b2984 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000374 Fehleroffset: 0x000ce753 ID des fehlerhaften Prozesses: 0x7f0 Startzeit der fehlerhaften Anwendung: 0xAVKProxy.exe0 Pfad der fehlerhaften Anwendung: AVKProxy.exe1 Pfad des fehlerhaften Moduls: AVKProxy.exe2 Berichtskennung: AVKProxy.exe3 Error: (01/06/2014 03:19:01 PM) (Source: NVIDIA OpenGL Driver) (User: ) Description: The NVIDIA OpenGL driver lost connection with the display driver due to exceeding the Windows Time-Out limit and is unable to continue. The application must close. Error code: 7 Visit hxxp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=3007 for more information. Error: (01/06/2014 03:18:52 PM) (Source: NVIDIA OpenGL Driver) (User: ) Description: The NVIDIA OpenGL driver lost connection with the display driver due to exceeding the Windows Time-Out limit and is unable to continue. The application must close. Error code: 7 Visit hxxp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=3007 for more information. Error: (01/05/2014 08:30:19 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"2" in Zeile Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762". Definition: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (01/05/2014 08:03:17 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: SLVoice.exe, Version: 4.5.9.17865, Zeitstempel: 0x505b00f4 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000264 Fehleroffset: 0x000a2525 ID des fehlerhaften Prozesses: 0x2088 Startzeit der fehlerhaften Anwendung: 0xSLVoice.exe0 Pfad der fehlerhaften Anwendung: SLVoice.exe1 Pfad des fehlerhaften Moduls: SLVoice.exe2 Berichtskennung: SLVoice.exe3 System errors: ============= Error: (01/09/2014 10:33:03 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/09/2014 10:33:03 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht. Error: (01/09/2014 10:32:15 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "atksgt" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (01/09/2014 10:32:15 AM) (Source: Application Popup) (User: ) Description: Treiber atksgt.sys konnte nicht geladen werden. Error: (01/09/2014 04:54:10 AM) (Source: DCOM) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (01/09/2014 02:12:42 AM) (Source: Service Control Manager) (User: ) Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "G Data AntiVirus Proxy" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: %%1056 Error: (01/09/2014 02:11:42 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "G Data AntiVirus Proxy" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error: (01/08/2014 05:15:08 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/08/2014 05:15:08 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (01/07/2014 09:58:07 PM) (Source: DCOM) (User: ) Description: {7D1933CB-86F6-4A98-8628-01BE94C9A575} Microsoft Office Sessions: ========================= Error: (01/09/2014 02:11:38 AM) (Source: Application Error)(User: ) Description: AVKProxy.exe1.5.13238.730521b2984ntdll.dll6.1.7601.18247521ea8e7c000000500038e1984c01cf0beae121c37bC:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exeC:\Windows\SysWOW64\ntdll.dllfcf88901-78ca-11e3-af6d-001fd02dccd8 Error: (01/08/2014 11:00:46 PM) (Source: Application Error)(User: ) Description: SLVoice.exe4.5.9.17865505b00f4ntdll.dll6.1.7601.18247521ea8e7c0000264000a2525ce401cf0ca5b1e806f3E:\Second Life\SLVoice.exeC:\Windows\SysWOW64\ntdll.dll52d788cb-78b0-11e3-af6d-001fd02dccd8 Error: (01/08/2014 11:25:30 AM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"E:\Aion F2P\bin64\SendLogClient.exeE:\Aion F2P\bin64\Microsoft.VC80.MFC.MANIFEST11 Error: (01/07/2014 10:05:42 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Downloads\SoftonicDownloader_fuer_bejeweled-blitz.exe Error: (01/07/2014 10:05:42 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Downloads\SoftonicDownloader_fuer_aol-instant-messenger.exe Error: (01/06/2014 05:46:17 PM) (Source: Application Error)(User: ) Description: AVKProxy.exe1.5.13238.730521b2984ntdll.dll6.1.7601.18247521ea8e7c0000374000ce7537f001cf0ae1d36b0b21C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exeC:\Windows\SysWOW64\ntdll.dll0f66112f-76f2-11e3-94be-001fd02dccd8 Error: (01/06/2014 03:19:01 PM) (Source: NVIDIA OpenGL Driver)(User: ) Description: The NVIDIA OpenGL driver lost connection with the display driver due to exceeding the Windows Time-Out limit and is unable to continue. The application must close. Error code: 7 Visit hxxp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=3007 for more information. Error: (01/06/2014 03:18:52 PM) (Source: NVIDIA OpenGL Driver)(User: ) Description: The NVIDIA OpenGL driver lost connection with the display driver due to exceeding the Windows Time-Out limit and is unable to continue. The application must close. Error code: 7 Visit hxxp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=3007 for more information. Error: (01/05/2014 08:30:19 AM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"E:\Aion F2P\bin64\SendLogClient.exeE:\Aion F2P\bin64\Microsoft.VC80.MFC.MANIFEST11 Error: (01/05/2014 08:03:17 AM) (Source: Application Error)(User: ) Description: SLVoice.exe4.5.9.17865505b00f4ntdll.dll6.1.7601.18247521ea8e7c0000264000a2525208801cf09d089703635E:\Second Life\SecondLifeViewer\SLVoice.exeC:\Windows\SysWOW64\ntdll.dll738ed72f-75d7-11e3-949a-001fd02dccd8 ==================== Memory info =========================== Percentage of memory in use: 52% Total physical RAM: 4094.49 MB Available physical RAM: 1924.8 MB Total Pagefile: 8187.16 MB Available Pagefile: 5160.41 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:97.66 GB) (Free:21.49 GB) NTFS Drive d: () (Fixed) (Total:322.95 GB) (Free:272.53 GB) NTFS Drive e: () (Fixed) (Total:976.56 GB) (Free:246.84 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: DC2EBA0D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=323 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=977 GB) - (Type=07 NTFS) ==================== End Of Log ============================ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01 Ran by Boronian (administrator) on BORONIAN-PC on 09-01-2014 11:41:05 Running from C:\Users\Boronian\Downloads\Antiviren zeug Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) D:\Programe\GData\AVK\AVKWCtlx64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) D:\Programe\GData\AVK\AVKService.exe (G Data Software AG) D:\Programe\GData\AVKBackup\AVKBackupService.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamgui.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (G Data Software) D:\Programe\GData\TSNxG\TSNxGService.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2.exe (LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2-ui.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (G Data Software AG) D:\Programe\GData\Firewall\GDFwSvcx64.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Spotify Ltd) C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AvkBap64.exe (G Data Software AG) D:\Programe\GData\Firewall\GDFirewallTray.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (G Data Software AG) D:\Programe\GData\AVKTray\AVKTray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe (Valve Corporation) E:\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Mozilla Corporation) D:\Programe\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [790552 2007-04-26] (Logitech Inc.) HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe [1793048 2007-04-26] (Logitech Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [GDFirewallTray] - D:\Programe\GData\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG) HKLM-x32\...\Run: [G Data AntiVirus Tray] - D:\Programe\GData\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - E:\Hamachi Server Client\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation) HKCU\...\Run: [ICQ] - C:\Users\Boronian\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-02] (ICQ) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-26] (Spotify Ltd) MountPoints2: {1f795429-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {1f7954c2-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {e34c18a5-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {e34c22ea-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe Startup: C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lollipop.lnk ShortcutTarget: lollipop.lnk -> C:\Users\Boronian\AppData\Local\Lollipop\Lollipop.exe (No File) ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA10BD39CBBD7CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388773095&from=amt&uid=ST31500341AS_9VS3KZMPXXXX9VS3KZMP&q={searchTerms} SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - {05D862FD-4E4A-47EF-A6CA-8342AA21DB4D} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\..\Interfaces\{CA2430EE-77B2-48D8-B22D-1A6C66CE6AA5}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.8 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File FF Extension: Adblock Plus - C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff FF HKCU\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi FF StartMenuInternet: FIREFOX.EXE - firefox.exe ==================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG) R2 AVKService; D:\Programe\GData\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG) R2 AVKWCtl; D:\Programe\GData\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG) R2 GDBackupSvc; D:\Programe\GData\AVKBackup\AVKBackupService.exe [1947768 2013-08-21] (G Data Software AG) R3 GDFwSvc; D:\Programe\GData\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG) S3 GDTunerSvc; D:\Programe\GData\AVKTuner\AVKTunerService.exe [1711568 2013-02-25] (G Data Software AG) R2 Hamachi2Svc; E:\Hamachi Server Client\hamachi-2.exe [2210640 2013-11-29] (LogMeIn Inc.) R2 MBAMScheduler; D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-07-09] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.) S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation) R2 TSNxGService; D:\Programe\GData\TSNxG\TSNxGService.exe [257512 2013-02-25] (G Data Software) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099000 2013-10-30] (AVG) R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG) ==================== Drivers (Whitelisted) ==================== S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2013-12-01] () R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] () S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] () R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-30] (G Data Software AG) R3 gddcd; C:\Windows\system32\drivers\gddcd64.sys [79704 2013-10-23] (G Data Software AG) R1 gddcv; C:\Windows\system32\drivers\gddcv64.sys [59736 2013-10-23] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-30] (G Data Software AG) S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon64.sys [31608 2012-01-20] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2013-09-30] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-10-23] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-01-03] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-30] (G Data Software AG) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2013-12-01] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [98760 2013-10-23] (G Data Software) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-09 11:40 - 2014-01-09 11:40 - 00000000 ____D C:\FRST 2014-01-09 11:38 - 2014-01-09 11:41 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug 2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log 2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable 2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe 2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten 2014-01-08 12:29 - 2014-01-08 12:29 - 00003344 _____ C:\Windows\System32\Tasks\SpyHunter4Startup 2014-01-08 12:29 - 2014-01-08 12:29 - 00002260 _____ C:\Users\Boronian\Desktop\SpyHunter.lnk 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\sh4ldr 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat 2014-01-08 12:29 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys 2014-01-08 12:28 - 2014-01-08 12:29 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live 2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk 2014-01-07 22:15 - 2014-01-08 11:56 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-07 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-07 19:01 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-01-07 19:01 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-01-07 19:01 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-01-07 19:01 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-01-07 19:01 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA 2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db 2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0 2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18 2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\ProgramData\RHelpers 2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\Program Files (x86)\AmiExt 2014-01-03 19:20 - 2014-01-05 03:16 - 00000000 ____D C:\Users\Boronian\AppData\Local\Mobogenie 2014-01-03 19:20 - 2014-01-05 03:15 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext 2014-01-03 19:20 - 2014-01-04 19:09 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt 2014-01-03 19:20 - 2014-01-04 19:08 - 00000000 ____D C:\ProgramData\Updater 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\Documents\Mobogenie 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android 2014-01-03 19:18 - 2014-01-07 20:49 - 00000000 ____D C:\ProgramData\WPM 2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe 2014-01-03 13:57 - 2014-01-05 13:25 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm 2014-01-03 13:57 - 2014-01-03 14:00 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm 2014-01-03 13:47 - 2014-01-03 13:48 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe 2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk 2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop 2014-01-03 10:58 - 2014-01-07 20:40 - 00000000 ____D C:\Users\Boronian\AppData\Local\SwvUpdater 2014-01-03 10:58 - 2014-01-03 10:58 - 00003086 _____ C:\Windows\System32\Tasks\GoforFilesUpdate 2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\GoforFiles 2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal 2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-01-02 10:13 - 2014-01-09 10:32 - 00002343 _____ C:\Windows\setupact.log 2014-01-02 10:13 - 2014-01-07 20:49 - 00037784 _____ C:\Windows\PFRO.log 2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log 2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-01-02 04:15 - 2013-10-30 11:27 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll 2014-01-02 04:15 - 2013-10-30 11:27 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll 2014-01-02 04:14 - 2013-10-30 11:27 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe 2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG 2014-01-02 04:13 - 2013-10-30 11:27 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll 2014-01-02 04:13 - 2013-10-30 11:27 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll 2014-01-02 04:09 - 2014-01-02 04:39 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-02 04:09 - 2014-01-02 04:16 - 00000000 ____D C:\ProgramData\AVG 2014-01-02 04:05 - 2014-01-02 04:06 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe 2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM 2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe 2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014 2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute 2014-01-02 03:49 - 2014-01-02 03:50 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software 2014-01-02 03:48 - 2014-01-02 04:12 - 00000000 ____D C:\Program Files (x86)\AVG 2014-01-02 03:46 - 2014-01-09 10:37 - 00000000 ____D C:\ProgramData\MFAData 2014-01-02 03:46 - 2014-01-02 04:05 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014 2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe 2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData 2014-01-01 13:46 - 2014-01-01 13:47 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe 2014-01-01 13:37 - 2014-01-09 02:05 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife 2014-01-01 13:37 - 2014-01-01 13:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife 2013-12-27 04:04 - 2013-12-27 04:02 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt 2013-12-26 11:16 - 2014-01-01 12:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify 2013-12-26 11:16 - 2013-12-30 21:38 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify 2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk 2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2013-12-23 17:21 - 2013-12-23 18:31 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf 2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2013-12-23 01:43 - 2013-11-23 20:26 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433193.dll 2013-12-23 01:43 - 2013-11-23 20:26 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433193.dll 2013-12-22 08:00 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2 2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2 2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk 2013-12-21 08:44 - 2013-12-21 08:45 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt 2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google 2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-17 17:20 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-17 17:20 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle 2013-12-11 20:43 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 20:43 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 20:43 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 20:43 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 20:43 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 20:43 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 20:43 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 20:43 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 20:43 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 20:43 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 20:43 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 20:43 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 20:43 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 20:43 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 20:43 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 20:43 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 20:43 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 20:43 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 20:43 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 20:43 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 20:43 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 20:43 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 20:43 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 20:43 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 20:43 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 20:43 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 20:43 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 20:42 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 20:42 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 20:42 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 20:42 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 02:10 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 02:10 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 02:10 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-11 02:10 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-11 02:09 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-11 02:04 - 2013-12-11 02:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-11 02:04 - 2013-12-11 02:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-11 02:04 - 2013-12-11 02:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-11 02:04 - 2013-12-11 02:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-11 02:04 - 2013-12-11 02:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-11 01:14 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 01:14 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 01:14 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 01:14 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 01:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 01:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 01:14 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 01:14 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 01:14 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 01:14 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 01:14 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 01:14 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 01:14 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 01:14 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 01:14 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 01:14 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 01:14 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 01:14 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 01:14 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys ==================== One Month Modified Files and Folders ======= 2014-01-09 11:41 - 2014-01-09 11:38 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug 2014-01-09 11:40 - 2014-01-09 11:40 - 00000000 ____D C:\FRST 2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log 2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable 2014-01-09 11:36 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian 2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe 2014-01-09 11:33 - 2012-01-20 23:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Skype 2014-01-09 11:09 - 2012-11-07 17:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-09 10:58 - 2012-09-02 12:57 - 00000000 ____D C:\Windows\system32\appmgmt 2014-01-09 10:42 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-09 10:42 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-09 10:38 - 2012-01-20 18:55 - 02002934 _____ C:\Windows\WindowsUpdate.log 2014-01-09 10:37 - 2014-01-02 03:46 - 00000000 ____D C:\ProgramData\MFAData 2014-01-09 10:35 - 2013-06-05 23:33 - 00000000 ____D C:\Users\Boronian\AppData\Local\LogMeIn Hamachi 2014-01-09 10:34 - 2012-01-20 18:56 - 00001421 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-09 10:32 - 2014-01-02 10:13 - 00002343 _____ C:\Windows\setupact.log 2014-01-09 10:32 - 2012-01-20 23:37 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-09 10:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-09 02:05 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife 2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google 2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-08 19:33 - 2012-10-21 12:59 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F8FB1A55-F516-4C27-87C4-A40A3EFF1E4F} 2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten 2014-01-08 12:29 - 2014-01-08 12:29 - 00003344 _____ C:\Windows\System32\Tasks\SpyHunter4Startup 2014-01-08 12:29 - 2014-01-08 12:29 - 00002260 _____ C:\Users\Boronian\Desktop\SpyHunter.lnk 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\sh4ldr 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat 2014-01-08 12:29 - 2014-01-08 12:28 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-08 11:56 - 2014-01-07 22:15 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk 2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live 2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk 2014-01-07 21:53 - 2013-11-08 21:37 - 00000759 _____ C:\Users\Boronian\Desktop\abo´s.txt 2014-01-07 20:49 - 2014-01-03 19:18 - 00000000 ____D C:\ProgramData\WPM 2014-01-07 20:49 - 2014-01-02 10:13 - 00037784 _____ C:\Windows\PFRO.log 2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\RHelpers 2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\Program Files (x86)\AmiExt 2014-01-07 20:40 - 2014-01-03 10:58 - 00000000 ____D C:\Users\Boronian\AppData\Local\SwvUpdater 2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-07 19:08 - 2012-01-20 23:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA 2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db 2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0 2014-01-05 13:25 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm 2014-01-05 03:16 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\Mobogenie 2014-01-05 03:15 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext 2014-01-05 01:03 - 2013-06-07 18:26 - 00000000 __SHD C:\#GDATA.Trash.Store# 2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18 2014-01-04 19:09 - 2014-01-03 19:20 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt 2014-01-04 19:08 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\Updater 2014-01-04 18:18 - 2013-07-15 18:27 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\Documents\Mobogenie 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android 2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe 2014-01-03 14:00 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm 2014-01-03 13:48 - 2014-01-03 13:47 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe 2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk 2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop 2014-01-03 10:59 - 2012-01-20 18:56 - 00000000 ___RD C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-03 10:58 - 2014-01-03 10:58 - 00003086 _____ C:\Windows\System32\Tasks\GoforFilesUpdate 2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\GoforFiles 2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal 2014-01-03 10:57 - 2012-03-24 14:46 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-01-03 10:19 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian\AppData\Local\VirtualStore 2014-01-03 10:08 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log 2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-01-02 04:39 - 2014-01-02 04:09 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-02 04:39 - 2012-07-26 22:26 - 00000000 ____D C:\ProgramData\DriverGenius 2014-01-02 04:39 - 2012-01-20 23:27 - 00000000 ____D C:\Users\Boronian\AppData\Local\Downloaded Installations 2014-01-02 04:32 - 2012-01-20 18:47 - 00000000 ____D C:\Windows\Panther 2014-01-02 04:16 - 2014-01-02 04:09 - 00000000 ____D C:\ProgramData\AVG 2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG 2014-01-02 04:12 - 2014-01-02 03:48 - 00000000 ____D C:\Program Files (x86)\AVG 2014-01-02 04:06 - 2014-01-02 04:05 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe 2014-01-02 04:05 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014 2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM 2014-01-02 03:52 - 2012-01-20 23:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQ 2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe 2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014 2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute 2014-01-02 03:50 - 2014-01-02 03:49 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software 2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe 2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData 2014-01-01 13:54 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife 2014-01-01 13:47 - 2014-01-01 13:46 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe 2014-01-01 12:43 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify 2013-12-30 21:38 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify 2013-12-27 04:02 - 2013-12-27 04:04 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt 2013-12-26 11:52 - 2012-04-29 09:39 - 00000000 ____D C:\Program Files (x86)\Gameforge 2013-12-26 11:48 - 2009-07-14 18:58 - 00709908 _____ C:\Windows\system32\perfh007.dat 2013-12-26 11:48 - 2009-07-14 18:58 - 00154344 _____ C:\Windows\system32\perfc007.dat 2013-12-26 11:48 - 2009-07-14 06:13 - 01649524 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk 2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-24 00:04 - 2012-04-22 05:06 - 01622868 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-23 19:18 - 2012-01-20 19:22 - 00065160 _____ C:\Users\Boronian\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-23 18:34 - 2009-07-14 05:45 - 00299664 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-23 18:31 - 2013-12-23 17:21 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf 2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2013-12-22 13:55 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2 2013-12-22 13:45 - 2012-11-29 20:30 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-12-22 13:45 - 2012-01-20 23:43 - 00000000 ____D C:\ProgramData\Skype 2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2 2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk 2013-12-22 07:33 - 2012-01-20 23:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-22 07:28 - 2013-12-02 01:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2013-12-21 08:59 - 2012-06-22 11:31 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\U3 2013-12-21 08:45 - 2013-12-21 08:44 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt 2013-12-19 21:33 - 2014-01-07 19:01 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-12-19 21:33 - 2014-01-07 19:01 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-12-19 21:33 - 2013-05-24 03:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-12-19 21:33 - 2013-05-24 03:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-12-19 21:33 - 2012-01-20 23:36 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-12-19 21:33 - 2012-01-20 23:36 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2013-12-19 19:53 - 2012-01-20 23:37 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-12-19 19:53 - 2012-01-20 23:37 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-12-19 18:34 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-12-19 06:01 - 2012-10-19 14:59 - 03539040 _____ C:\Windows\system32\nvcoproc.bin 2013-12-14 17:58 - 2013-08-15 01:01 - 00000000 ____D C:\Windows\system32\MRT 2013-12-14 17:56 - 2012-01-21 00:44 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-14 17:49 - 2012-04-24 18:17 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TS3Client 2013-12-14 01:15 - 2013-11-19 23:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA Corporation 2013-12-14 01:15 - 2013-05-24 03:39 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA 2013-12-14 01:15 - 2012-01-20 23:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-14 01:14 - 2012-01-20 23:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-12 21:35 - 2012-02-24 19:37 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle 2013-12-11 19:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-11 02:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-11 02:09 - 2012-11-07 17:52 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-11 02:09 - 2012-04-02 16:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 02:09 - 2012-01-20 23:25 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 02:04 - 2013-12-11 02:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-11 02:04 - 2013-12-11 02:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-11 02:04 - 2013-12-11 02:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-11 02:04 - 2013-12-11 02:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-11 02:04 - 2013-12-11 02:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-10 03:13 - 2013-10-30 00:41 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-12-10 03:13 - 2013-10-30 00:41 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll Some content of TEMP: ==================== C:\Users\Boronian\AppData\Local\Temp\htmlayout.dll C:\Users\Boronian\AppData\Local\Temp\nv3DVStreaming.dll C:\Users\Boronian\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Boronian\AppData\Local\Temp\nvStereoApiI.dll C:\Users\Boronian\AppData\Local\Temp\nvStInst.exe C:\Users\Boronian\AppData\Local\Temp\SHSetup.exe C:\Users\Boronian\AppData\Local\Temp\toolbar3011458.exe C:\Users\Boronian\AppData\Local\Temp\toolbar3061488.exe C:\Users\Boronian\AppData\Local\Temp\uninstall21498232.exe C:\Users\Boronian\AppData\Local\Temp\uninstall21498248.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-02 11:39 ==================== End Of Log ============================ GMER LOG GMER Logfile: Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2014-01-09 12:53:35 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-3 ST31500341AS rev.CC1H 1397,26GB Running: g8q180rx.exe; Driver: C:\Users\Boronian\AppData\Local\Temp\axlcikog.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff800031f9000 45 bytes [00, 00, 10, 02, 48, 6F, 6F, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 574 fffff800031f902e 8 bytes [5C, 00, 4D, 00, 41, 00, 43, ...] ---- User code sections - GMER 2.1 ---- .text C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 0000000071611a22 2 bytes [61, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 0000000071611ad0 2 bytes [61, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 0000000071611b08 2 bytes [61, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 0000000071611bba 2 bytes [61, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 0000000071611bda 2 bytes [61, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075881465 2 bytes [88, 75] .text C:\Windows\SysWOW64\PnkBstrA.exe[1924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000758814bb 2 bytes [88, 75] .text ... * 2 .text E:\Hamachi Server Client\hamachi-2-ui.exe[4764] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 69 0000000075881465 2 bytes [88, 75] .text E:\Hamachi Server Client\hamachi-2-ui.exe[4764] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 155 00000000758814bb 2 bytes [88, 75] .text ... * 2 .text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[5012] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075881465 2 bytes [88, 75] .text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[5012] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000758814bb 2 bytes [88, 75] .text ... * 2 .text D:\Programe\GData\Firewall\GDFirewallTray.exe[6336] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075881465 2 bytes [88, 75] .text D:\Programe\GData\Firewall\GDFirewallTray.exe[6336] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000758814bb 2 bytes [88, 75] .text ... * 2 .text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[6568] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075881465 2 bytes [88, 75] .text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[6568] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000758814bb 2 bytes [88, 75] .text ... * 2 .text E:\Steam\Steam.exe[2632] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate 0000000074d7549c 5 bytes JMP 0000000100130800 .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[2136] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate 0000000074d7549c 5 bytes JMP 0000000100100800 .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[2136] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075881465 2 bytes [88, 75] .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[2136] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000758814bb 2 bytes [88, 75] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2832:3004] 000007fef37c4094 Thread C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2832:3016] 000007fef37c4094 Thread C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2832:3020] 000007fef2a7b710 ---- EOF - GMER 2.1 ---- MalwarBytes LOG Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.07.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Boronian :: BORONIAN-PC [Administrator] Schutz: Aktiviert 08.01.2014 11:49:03 mbam-log-2014-01-08 (11-49-03).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 209599 Laufzeit: 5 Minute(n), 26 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Grüße Boronian |
09.01.2014, 14:22 | #2 |
/// the machine /// TB-Ausbilder | Win7 , 64 bit -- (Firefox) Nation-zoom Befall. hi,
__________________Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.
und ein frisches FRST log bitte.
__________________ |
09.01.2014, 16:20 | #3 |
| Win7 , 64 bit -- (Firefox) Nation-zoom Befall. soo erst mal danke für das reagieren.
__________________Anbei die erwünschten logs ------------------------- ADWcleaner log AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 09/01/2014 um 15:33:13 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) # Benutzername : Boronian - BORONIAN-PC # Gestartet von : E:\Downloads\DL zeug\Downloadkram von Mozilla\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar Ordner Gelöscht : C:\ProgramData\Trymedia Ordner Gelöscht : C:\ProgramData\WPM Ordner Gelöscht : C:\Program Files (x86)\ICQ6Toolbar Ordner Gelöscht : C:\Program Files (x86)\Common Files\Software Update Utility Ordner Gelöscht : C:\Users\Boronian\AppData\Local\Mobogenie Ordner Gelöscht : C:\Users\Boronian\AppData\Local\SwvUpdater Ordner Gelöscht : C:\Users\Boronian\AppData\Roaming\goforfiles Ordner Gelöscht : C:\Users\Boronian\Documents\Mobogenie Datei Gelöscht : C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lollipop.lnk Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt Datei Gelöscht : C:\Windows\System32\Tasks\GoforFilesUpdate Datei Gelöscht : C:\Windows\System32\Tasks\SpyHunter4Startup ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\Classes\Applications\lollipop.exe Schlüssel Gelöscht : HKCU\Software\Classes\iLivid.torrent Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\dnu.EXE Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdate Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_aol-instant-messenger_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_aol-instant-messenger_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bejeweled-blitz_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bejeweled-blitz_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : HKCU\Software\Ciuvo Schlüssel Gelöscht : HKCU\Software\GoforFiles Schlüssel Gelöscht : HKCU\Software\ICQ\ICQToolbar Schlüssel Gelöscht : HKCU\Software\ilivid Schlüssel Gelöscht : HKCU\Software\lollipop Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DynConIE Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyrixeeker Schlüssel Gelöscht : HKLM\Software\GoforFiles Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar Schlüssel Gelöscht : HKLM\Software\supWPM Schlüssel Gelöscht : HKLM\Software\Trymedia Systems Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] -\\ Mozilla Firefox v20.0.1 (de) [ Datei : C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341\prefs.js ] ************************* AdwCleaner[R0].txt - [7011 octets] - [09/01/2014 15:29:26] AdwCleaner[S0].txt - [5901 octets] - [09/01/2014 15:33:13] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5961 octets] ########## JRT Log Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows 7 Ultimate x64 Ran by Boronian on 09.01.2014 at 15:41:57,11 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\foxydeal ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 09.01.2014 at 15:58:14,48 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Shortcut Cleaner 1.2.6 by Lawrence Abrams (Grinler) hxxp://www.bleepingcomputer.com/ Copyright 2008-2014 BleepingComputer.com More Information about Shortcut Cleaner can be found at this link: hxxp://www.bleepingcomputer.com/download/shortcut-cleaner/ Windows Version: Windows 7 Ultimate Service Pack 1 Program started at: 01/09/2014 04:00:12 PM. Scanning for registry hijacks: * No issues found in the Registry. Searching for Hijacked Shortcuts: Searching C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ Searching C:\ProgramData\Microsoft\Windows\Start Menu\ Searching C:\Users\Boronian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ Searching C:\Users\Public\Desktop\ Searching C:\Users\Boronian\Desktop 0 bad shortcuts found. Program finished at: 01/09/2014 04:00:15 PM Execution time: 0 hours(s), 0 minute(s), and 2 seconds(s) FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01 Ran by Boronian (administrator) on BORONIAN-PC on 09-01-2014 16:03:46 Running from E:\Downloads\DL zeug\Downloadkram von Mozilla\Antiviren zeug Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) D:\Programe\GData\AVK\AVKWCtlx64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) D:\Programe\GData\AVK\AVKService.exe (G Data Software AG) D:\Programe\GData\AVKBackup\AVKBackupService.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamgui.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (G Data Software) D:\Programe\GData\TSNxG\TSNxGService.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2.exe (LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2-ui.exe (LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe (G Data Software AG) D:\Programe\GData\Firewall\GDFwSvcx64.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Valve Corporation) E:\Steam\Steam.exe (ICQ) C:\Users\Boronian\AppData\Roaming\ICQM\icq.exe (Spotify Ltd) C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Program Files (x86)\ESO Survey Live\ESOSurveyLive.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (G Data Software AG) D:\Programe\GData\Firewall\GDFirewallTray.exe (G Data Software AG) D:\Programe\GData\AVKTray\AVKTray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AvkBap64.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Mozilla Corporation) D:\Programe\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [790552 2007-04-26] (Logitech Inc.) HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe [1793048 2007-04-26] (Logitech Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [GDFirewallTray] - D:\Programe\GData\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG) HKLM-x32\...\Run: [G Data AntiVirus Tray] - D:\Programe\GData\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - E:\Hamachi Server Client\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation) HKCU\...\Run: [ICQ] - C:\Users\Boronian\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-02] (ICQ) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-26] (Spotify Ltd) MountPoints2: {1f795429-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {1f7954c2-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {e34c18a5-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {e34c22ea-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA10BD39CBBD7CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - {05D862FD-4E4A-47EF-A6CA-8342AA21DB4D} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\..\Interfaces\{CA2430EE-77B2-48D8-B22D-1A6C66CE6AA5}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.8 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File FF Extension: Adblock Plus - C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff FF HKCU\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi FF StartMenuInternet: FIREFOX.EXE - firefox.exe ==================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG) R2 AVKService; D:\Programe\GData\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG) R2 AVKWCtl; D:\Programe\GData\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG) R2 GDBackupSvc; D:\Programe\GData\AVKBackup\AVKBackupService.exe [1947768 2013-08-21] (G Data Software AG) R3 GDFwSvc; D:\Programe\GData\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG) S3 GDTunerSvc; D:\Programe\GData\AVKTuner\AVKTunerService.exe [1711568 2013-02-25] (G Data Software AG) R2 Hamachi2Svc; E:\Hamachi Server Client\hamachi-2.exe [2210640 2013-11-29] (LogMeIn Inc.) R2 MBAMScheduler; D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-07-09] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.) S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation) R2 TSNxGService; D:\Programe\GData\TSNxG\TSNxGService.exe [257512 2013-02-25] (G Data Software) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099000 2013-10-30] (AVG) R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG) ==================== Drivers (Whitelisted) ==================== S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2013-12-01] () R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] () S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] () R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-30] (G Data Software AG) R3 gddcd; C:\Windows\system32\drivers\gddcd64.sys [79704 2013-10-23] (G Data Software AG) R1 gddcv; C:\Windows\system32\drivers\gddcv64.sys [59736 2013-10-23] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-30] (G Data Software AG) S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon64.sys [31608 2012-01-20] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2013-09-30] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-10-23] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-01-03] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-30] (G Data Software AG) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2013-12-01] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [98760 2013-10-23] (G Data Software) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-09 15:58 - 2014-01-09 15:58 - 00000878 _____ C:\Users\Boronian\Desktop\JRT.txt 2014-01-09 15:41 - 2014-01-09 15:41 - 00000000 ____D C:\Windows\ERUNT 2014-01-09 15:29 - 2014-01-09 15:33 - 00000000 ____D C:\AdwCleaner 2014-01-09 11:40 - 2014-01-09 11:40 - 00000000 ____D C:\FRST 2014-01-09 11:38 - 2014-01-09 11:41 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug 2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log 2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable 2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe 2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\sh4ldr 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat 2014-01-08 12:29 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys 2014-01-08 12:28 - 2014-01-08 12:29 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live 2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk 2014-01-07 22:15 - 2014-01-08 11:56 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-07 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-07 19:01 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-01-07 19:01 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-01-07 19:01 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-01-07 19:01 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-01-07 19:01 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA 2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db 2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0 2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18 2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\ProgramData\RHelpers 2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\Program Files (x86)\AmiExt 2014-01-03 19:20 - 2014-01-05 03:15 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext 2014-01-03 19:20 - 2014-01-04 19:09 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt 2014-01-03 19:20 - 2014-01-04 19:08 - 00000000 ____D C:\ProgramData\Updater 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android 2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe 2014-01-03 13:57 - 2014-01-05 13:25 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm 2014-01-03 13:57 - 2014-01-03 14:00 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm 2014-01-03 13:47 - 2014-01-03 13:48 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe 2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk 2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop 2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal 2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-01-02 10:13 - 2014-01-09 15:37 - 00002511 _____ C:\Windows\setupact.log 2014-01-02 10:13 - 2014-01-07 20:49 - 00037784 _____ C:\Windows\PFRO.log 2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log 2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-01-02 04:15 - 2013-10-30 11:27 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll 2014-01-02 04:15 - 2013-10-30 11:27 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll 2014-01-02 04:14 - 2013-10-30 11:27 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe 2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG 2014-01-02 04:13 - 2013-10-30 11:27 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll 2014-01-02 04:13 - 2013-10-30 11:27 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll 2014-01-02 04:09 - 2014-01-02 04:39 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-02 04:09 - 2014-01-02 04:16 - 00000000 ____D C:\ProgramData\AVG 2014-01-02 04:05 - 2014-01-02 04:06 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe 2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM 2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe 2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014 2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute 2014-01-02 03:49 - 2014-01-02 03:50 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software 2014-01-02 03:48 - 2014-01-02 04:12 - 00000000 ____D C:\Program Files (x86)\AVG 2014-01-02 03:46 - 2014-01-09 12:07 - 00000000 ____D C:\ProgramData\MFAData 2014-01-02 03:46 - 2014-01-02 04:05 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014 2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe 2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData 2014-01-01 13:46 - 2014-01-01 13:47 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe 2014-01-01 13:37 - 2014-01-09 15:23 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife 2014-01-01 13:37 - 2014-01-01 13:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife 2013-12-27 04:04 - 2013-12-27 04:02 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt 2013-12-26 11:16 - 2014-01-01 12:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify 2013-12-26 11:16 - 2013-12-30 21:38 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify 2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk 2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2013-12-23 17:21 - 2013-12-23 18:31 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf 2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2013-12-23 01:43 - 2013-11-23 20:26 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433193.dll 2013-12-23 01:43 - 2013-11-23 20:26 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433193.dll 2013-12-22 08:00 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2 2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2 2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk 2013-12-21 08:44 - 2013-12-21 08:45 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt 2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google 2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-17 17:20 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-17 17:20 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle 2013-12-11 20:43 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 20:43 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 20:43 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 20:43 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 20:43 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 20:43 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 20:43 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 20:43 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 20:43 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 20:43 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 20:43 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 20:43 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 20:43 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 20:43 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 20:43 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 20:43 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 20:43 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 20:43 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 20:43 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 20:43 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 20:43 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 20:43 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 20:43 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 20:43 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 20:43 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 20:43 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 20:43 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 20:42 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 20:42 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 20:42 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 20:42 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 02:10 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 02:10 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 02:10 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-11 02:10 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-11 02:09 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-11 02:04 - 2013-12-11 02:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-11 02:04 - 2013-12-11 02:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-11 02:04 - 2013-12-11 02:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-11 02:04 - 2013-12-11 02:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-11 02:04 - 2013-12-11 02:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-11 01:14 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 01:14 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 01:14 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 01:14 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 01:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 01:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 01:14 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 01:14 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 01:14 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 01:14 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 01:14 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 01:14 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 01:14 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 01:14 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 01:14 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 01:14 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 01:14 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 01:14 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 01:14 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys ==================== One Month Modified Files and Folders ======= 2014-01-09 15:58 - 2014-01-09 15:58 - 00000878 _____ C:\Users\Boronian\Desktop\JRT.txt 2014-01-09 15:44 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-09 15:44 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-09 15:41 - 2014-01-09 15:41 - 00000000 ____D C:\Windows\ERUNT 2014-01-09 15:38 - 2013-06-05 23:33 - 00000000 ____D C:\Users\Boronian\AppData\Local\LogMeIn Hamachi 2014-01-09 15:37 - 2014-01-02 10:13 - 00002511 _____ C:\Windows\setupact.log 2014-01-09 15:36 - 2012-01-20 23:37 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-09 15:36 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-09 15:34 - 2012-01-20 18:55 - 02017877 _____ C:\Windows\WindowsUpdate.log 2014-01-09 15:33 - 2014-01-09 15:29 - 00000000 ____D C:\AdwCleaner 2014-01-09 15:33 - 2012-01-20 23:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Skype 2014-01-09 15:33 - 2012-01-20 18:56 - 00000000 ___RD C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-09 15:23 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife 2014-01-09 15:09 - 2012-11-07 17:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-09 13:40 - 2012-06-22 11:31 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\U3 2014-01-09 12:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-09 12:07 - 2014-01-02 03:46 - 00000000 ____D C:\ProgramData\MFAData 2014-01-09 11:41 - 2014-01-09 11:38 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug 2014-01-09 11:40 - 2014-01-09 11:40 - 00000000 ____D C:\FRST 2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log 2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable 2014-01-09 11:36 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian 2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe 2014-01-09 10:58 - 2012-09-02 12:57 - 00000000 ____D C:\Windows\system32\appmgmt 2014-01-09 10:34 - 2012-01-20 18:56 - 00001421 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google 2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-08 19:33 - 2012-10-21 12:59 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F8FB1A55-F516-4C27-87C4-A40A3EFF1E4F} 2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\sh4ldr 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat 2014-01-08 12:29 - 2014-01-08 12:28 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-08 11:56 - 2014-01-07 22:15 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk 2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live 2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk 2014-01-07 21:53 - 2013-11-08 21:37 - 00000759 _____ C:\Users\Boronian\Desktop\abo´s.txt 2014-01-07 20:49 - 2014-01-02 10:13 - 00037784 _____ C:\Windows\PFRO.log 2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\RHelpers 2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\Program Files (x86)\AmiExt 2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-07 19:08 - 2012-01-20 23:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA 2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db 2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0 2014-01-05 13:25 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm 2014-01-05 03:15 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext 2014-01-05 01:03 - 2013-06-07 18:26 - 00000000 __SHD C:\#GDATA.Trash.Store# 2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18 2014-01-04 19:09 - 2014-01-03 19:20 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt 2014-01-04 19:08 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\Updater 2014-01-04 18:18 - 2013-07-15 18:27 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android 2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe 2014-01-03 14:00 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm 2014-01-03 13:48 - 2014-01-03 13:47 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe 2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk 2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop 2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal 2014-01-03 10:57 - 2012-03-24 14:46 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-01-03 10:19 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian\AppData\Local\VirtualStore 2014-01-03 10:08 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log 2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-01-02 04:39 - 2014-01-02 04:09 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-02 04:39 - 2012-07-26 22:26 - 00000000 ____D C:\ProgramData\DriverGenius 2014-01-02 04:39 - 2012-01-20 23:27 - 00000000 ____D C:\Users\Boronian\AppData\Local\Downloaded Installations 2014-01-02 04:32 - 2012-01-20 18:47 - 00000000 ____D C:\Windows\Panther 2014-01-02 04:16 - 2014-01-02 04:09 - 00000000 ____D C:\ProgramData\AVG 2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG 2014-01-02 04:12 - 2014-01-02 03:48 - 00000000 ____D C:\Program Files (x86)\AVG 2014-01-02 04:06 - 2014-01-02 04:05 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe 2014-01-02 04:05 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014 2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM 2014-01-02 03:52 - 2012-01-20 23:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQ 2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe 2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014 2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute 2014-01-02 03:50 - 2014-01-02 03:49 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software 2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe 2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData 2014-01-01 13:54 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife 2014-01-01 13:47 - 2014-01-01 13:46 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe 2014-01-01 12:43 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify 2013-12-30 21:38 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify 2013-12-27 04:02 - 2013-12-27 04:04 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt 2013-12-26 11:52 - 2012-04-29 09:39 - 00000000 ____D C:\Program Files (x86)\Gameforge 2013-12-26 11:48 - 2009-07-14 18:58 - 00709908 _____ C:\Windows\system32\perfh007.dat 2013-12-26 11:48 - 2009-07-14 18:58 - 00154344 _____ C:\Windows\system32\perfc007.dat 2013-12-26 11:48 - 2009-07-14 06:13 - 01649524 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk 2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-24 00:04 - 2012-04-22 05:06 - 01622868 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-23 19:18 - 2012-01-20 19:22 - 00065160 _____ C:\Users\Boronian\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-23 18:34 - 2009-07-14 05:45 - 00299664 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-23 18:31 - 2013-12-23 17:21 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf 2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2013-12-22 13:55 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2 2013-12-22 13:45 - 2012-11-29 20:30 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-12-22 13:45 - 2012-01-20 23:43 - 00000000 ____D C:\ProgramData\Skype 2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2 2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk 2013-12-22 07:33 - 2012-01-20 23:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-22 07:28 - 2013-12-02 01:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2013-12-21 08:45 - 2013-12-21 08:44 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt 2013-12-19 21:33 - 2014-01-07 19:01 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-12-19 21:33 - 2014-01-07 19:01 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-12-19 21:33 - 2013-05-24 03:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-12-19 21:33 - 2013-05-24 03:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-12-19 21:33 - 2012-01-20 23:36 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-12-19 21:33 - 2012-01-20 23:36 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2013-12-19 19:53 - 2012-01-20 23:37 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-12-19 19:53 - 2012-01-20 23:37 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-12-19 18:34 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-12-19 06:01 - 2012-10-19 14:59 - 03539040 _____ C:\Windows\system32\nvcoproc.bin 2013-12-14 17:58 - 2013-08-15 01:01 - 00000000 ____D C:\Windows\system32\MRT 2013-12-14 17:56 - 2012-01-21 00:44 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-14 17:49 - 2012-04-24 18:17 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TS3Client 2013-12-14 01:15 - 2013-11-19 23:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA Corporation 2013-12-14 01:15 - 2013-05-24 03:39 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA 2013-12-14 01:15 - 2012-01-20 23:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-14 01:14 - 2012-01-20 23:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-12 21:35 - 2012-02-24 19:37 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle 2013-12-11 19:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-11 02:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-11 02:09 - 2012-11-07 17:52 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-11 02:09 - 2012-04-02 16:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 02:09 - 2012-01-20 23:25 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 02:04 - 2013-12-11 02:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-11 02:04 - 2013-12-11 02:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-11 02:04 - 2013-12-11 02:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-11 02:04 - 2013-12-11 02:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-11 02:04 - 2013-12-11 02:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-11 02:04 - 2013-12-11 02:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-11 02:04 - 2013-12-11 02:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-11 02:04 - 2013-12-11 02:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-11 02:04 - 2013-12-11 02:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-10 03:13 - 2013-10-30 00:41 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-12-10 03:13 - 2013-10-30 00:41 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll Some content of TEMP: ==================== C:\Users\Boronian\AppData\Local\Temp\htmlayout.dll C:\Users\Boronian\AppData\Local\Temp\nv3DVStreaming.dll C:\Users\Boronian\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Boronian\AppData\Local\Temp\nvStereoApiI.dll C:\Users\Boronian\AppData\Local\Temp\nvStInst.exe C:\Users\Boronian\AppData\Local\Temp\Quarantine.exe C:\Users\Boronian\AppData\Local\Temp\SHSetup.exe C:\Users\Boronian\AppData\Local\Temp\toolbar3011458.exe C:\Users\Boronian\AppData\Local\Temp\toolbar3061488.exe C:\Users\Boronian\AppData\Local\Temp\uninstall21498232.exe C:\Users\Boronian\AppData\Local\Temp\uninstall21498248.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-02 11:39 ==================== End Of Log ============================ --- --- --- *schaut gespannt und abwartend* |
10.01.2014, 10:39 | #4 |
/// the machine /// TB-Ausbilder | Win7 , 64 bit -- (Firefox) Nation-zoom Befall.ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
11.01.2014, 09:09 | #5 |
| Win7 , 64 bit -- (Firefox) Nation-zoom Befall. soo sorry für die späte Antwort..aber Arbeitstag verhinderte früheres posten. puhh.. 11 std scannen.. hier nun aber die Logs.. einen Fehler scheint er noch erkannt zu haben. ____________________ ESET log Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=aa09feac3533b34999c8a36c5695fc88 # engine=16607 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-11 07:42:45 # local_time=2014-01-11 08:42:45 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5122 16777214 0 11 22889872 138212361 0 0 # compatibility_mode=5893 16776574 100 94 798727 141056015 0 0 # scanned=388821 # found=1 # cleaned=0 # scan_time=39918 sh=80585BEB547B8B6BF11444D79B5EB02F232C610C ft=0 fh=0000000000000000 vn="a variant of Win32/Kryptik.BEQH trojan" ac=I fn="E:\BORONIAN-PC\Backup Set 2013-12-30 214713\Backup Files 2014-01-03 170002\Backup files 2.zip" Code:
ATTFilter Results of screen317's Security Check version 0.99.78 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` AVG AntiVirus 2014 G Data TotalProtection 2014 Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Malwarebytes Anti-Malware Version 1.75.0.1300 AVG PC TuneUp 2014 AVG PC TuneUp 2014 (de-DE) JavaFX 2.1.1 Java 7 Update 45 Adobe Flash Player 11.9.900.170 Adobe Reader 10.1.8 Adobe Reader out of Date! Mozilla Firefox 20.0.1 Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Spybot Teatimer.exe is disabled! AVG avgwdsvc.exe Malwarebytes' Anti-Malware mbamscheduler.exe GData Firewall GDFwSvcx64.exe GData Firewall GDFirewallTray.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 01 Ran by Boronian (administrator) on BORONIAN-PC on 11-01-2014 09:24:54 Running from E:\Downloads\DL zeug\Downloadkram von Mozilla\Antiviren zeug Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) D:\Programe\GData\AVK\AVKWCtlx64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) D:\Programe\GData\AVK\AVKService.exe (G Data Software AG) D:\Programe\GData\AVKBackup\AVKBackupService.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe (Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Malwarebytes Corporation) D:\Programe\Malwarebytes' Anti-Malware\mbamgui.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (G Data Software) D:\Programe\GData\TSNxG\TSNxGService.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2.exe (LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (LogMeIn Inc.) E:\Hamachi Server Client\hamachi-2-ui.exe (LogMeIn, Inc.) E:\Hamachi Server Client\LMIGuardianSvc.exe (G Data Software AG) D:\Programe\GData\Firewall\GDFwSvcx64.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Valve Corporation) E:\Steam\Steam.exe (Spotify Ltd) C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (G Data Software AG) D:\Programe\GData\Firewall\GDFirewallTray.exe (G Data Software AG) D:\Programe\GData\AVKTray\AVKTray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe () C:\Program Files (x86)\ESO Survey Live\ESOSurveyLive.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AvkBap64.exe (Mozilla Corporation) D:\Programe\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [790552 2007-04-26] (Logitech Inc.) HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe [1793048 2007-04-26] (Logitech Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [6900024 2012-07-24] (Logitech Inc.) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [GDFirewallTray] - D:\Programe\GData\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG) HKLM-x32\...\Run: [G Data AntiVirus Tray] - D:\Programe\GData\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - E:\Hamachi Server Client\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKCU\...\Run: [Steam] - E:\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation) HKCU\...\Run: [ICQ] - C:\Users\Boronian\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-02] (ICQ) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Boronian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-26] (Spotify Ltd) MountPoints2: {1f795429-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {1f7954c2-a9a0-11e1-8083-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {e34c18a5-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe MountPoints2: {e34c22ea-843b-11e2-8e43-001fd02dccd8} - G:\HTC_Sync_Manager_PC.exe ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA10BD39CBBD7CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - DefaultScope {05D862FD-4E4A-47EF-A6CA-8342AA21DB4D} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} SearchScopes: HKCU - {05D862FD-4E4A-47EF-A6CA-8342AA21DB4D} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\..\Interfaces\{CA2430EE-77B2-48D8-B22D-1A6C66CE6AA5}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.8 - D:\Programe\VLC Media Player\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File FF Extension: Adblock Plus - C:\Users\Boronian\AppData\Roaming\Mozilla\Firefox\Profiles\61m4sk41.default-1389205791341\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff FF HKCU\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi FF StartMenuInternet: FIREFOX.EXE - firefox.exe ==================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG) R2 AVKService; D:\Programe\GData\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG) R2 AVKWCtl; D:\Programe\GData\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG) R2 GDBackupSvc; D:\Programe\GData\AVKBackup\AVKBackupService.exe [1947768 2013-08-21] (G Data Software AG) R3 GDFwSvc; D:\Programe\GData\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG) S3 GDTunerSvc; D:\Programe\GData\AVKTuner\AVKTunerService.exe [1711568 2013-02-25] (G Data Software AG) R2 Hamachi2Svc; E:\Hamachi Server Client\hamachi-2.exe [2210640 2013-11-29] (LogMeIn Inc.) R2 MBAMScheduler; D:\Programe\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; D:\Programe\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-07-09] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation) R2 TSNxGService; D:\Programe\GData\TSNxG\TSNxGService.exe [257512 2013-02-25] (G Data Software) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099000 2013-10-30] (AVG) R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG) ==================== Drivers (Whitelisted) ==================== S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2013-12-01] () R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-09-30] (G Data Software AG) R3 gddcd; C:\Windows\system32\drivers\gddcd64.sys [79704 2013-10-23] (G Data Software AG) R1 gddcv; C:\Windows\system32\drivers\gddcv64.sys [59736 2013-10-23] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-09-30] (G Data Software AG) S3 GdNetMon; C:\Windows\system32\drivers\GdNetMon64.sys [31608 2012-01-20] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2013-09-30] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-10-23] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-01-03] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-09-30] (G Data Software AG) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2013-12-01] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [98760 2013-10-23] (G Data Software) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-10 23:01 - 2014-01-10 23:01 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Awesomium 2014-01-10 01:39 - 2014-01-10 02:33 - 00000000 ____D C:\Users\Boronian\AppData\Local\SingularityViewer64 2014-01-10 01:39 - 2014-01-10 01:39 - 00000808 _____ C:\Users\Public\Desktop\Singularity (64 bit) Viewer.lnk 2014-01-09 20:00 - 2014-01-09 20:00 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk 2014-01-09 20:00 - 2014-01-09 20:00 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-09 19:49 - 2014-01-09 19:49 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk 2014-01-09 15:58 - 2014-01-09 15:58 - 00000878 _____ C:\Users\Boronian\Desktop\JRT.txt 2014-01-09 15:41 - 2014-01-09 15:41 - 00000000 ____D C:\Windows\ERUNT 2014-01-09 15:29 - 2014-01-09 15:33 - 00000000 ____D C:\AdwCleaner 2014-01-09 11:40 - 2014-01-11 09:05 - 00000000 ____D C:\FRST 2014-01-09 11:38 - 2014-01-09 11:41 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug 2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log 2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable 2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe 2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat 2014-01-08 12:28 - 2014-01-09 19:55 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live 2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-07 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-07 19:01 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-01-07 19:01 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-01-07 19:01 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-01-07 19:01 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-01-07 19:01 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-01-07 19:01 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA 2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db 2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0 2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18 2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\ProgramData\RHelpers 2014-01-03 19:20 - 2014-01-07 20:40 - 00000000 ____D C:\Program Files (x86)\AmiExt 2014-01-03 19:20 - 2014-01-05 03:15 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext 2014-01-03 19:20 - 2014-01-04 19:09 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt 2014-01-03 19:20 - 2014-01-04 19:08 - 00000000 ____D C:\ProgramData\Updater 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android 2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe 2014-01-03 13:57 - 2014-01-05 13:25 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm 2014-01-03 13:57 - 2014-01-03 14:00 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm 2014-01-03 13:47 - 2014-01-03 13:48 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe 2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk 2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop 2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal 2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-01-02 10:13 - 2014-01-10 21:16 - 00003351 _____ C:\Windows\setupact.log 2014-01-02 10:13 - 2014-01-07 20:49 - 00037784 _____ C:\Windows\PFRO.log 2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log 2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-01-02 04:15 - 2013-10-30 11:27 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll 2014-01-02 04:15 - 2013-10-30 11:27 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll 2014-01-02 04:14 - 2013-10-30 11:27 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe 2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG 2014-01-02 04:13 - 2013-10-30 11:27 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll 2014-01-02 04:13 - 2013-10-30 11:27 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll 2014-01-02 04:09 - 2014-01-02 04:39 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-02 04:09 - 2014-01-02 04:16 - 00000000 ____D C:\ProgramData\AVG 2014-01-02 04:05 - 2014-01-02 04:06 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe 2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM 2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe 2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014 2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute 2014-01-02 03:49 - 2014-01-02 03:50 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software 2014-01-02 03:48 - 2014-01-02 04:12 - 00000000 ____D C:\Program Files (x86)\AVG 2014-01-02 03:46 - 2014-01-11 08:07 - 00000000 ____D C:\ProgramData\MFAData 2014-01-02 03:46 - 2014-01-02 04:05 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014 2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe 2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData 2014-01-01 13:46 - 2014-01-01 13:47 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe 2014-01-01 13:37 - 2014-01-10 09:53 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife 2014-01-01 13:37 - 2014-01-01 13:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife 2013-12-27 04:04 - 2013-12-27 04:02 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt 2013-12-26 11:16 - 2014-01-01 12:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify 2013-12-26 11:16 - 2013-12-30 21:38 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify 2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk 2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2013-12-23 17:21 - 2013-12-23 18:31 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2013-12-23 17:21 - 2013-12-23 18:31 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf 2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2013-12-23 01:43 - 2013-11-23 20:26 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433193.dll 2013-12-23 01:43 - 2013-11-23 20:26 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433193.dll 2013-12-22 08:00 - 2013-12-22 13:55 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2 2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2 2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk 2013-12-21 08:44 - 2013-12-21 08:45 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt 2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google 2013-12-17 22:11 - 2014-01-08 19:46 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-17 17:20 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-17 17:20 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle ==================== One Month Modified Files and Folders ======= 2014-01-11 09:18 - 2012-07-25 21:14 - 00001294 _____ C:\Users\Boronian\Desktop\kira pw.txt 2014-01-11 09:09 - 2012-11-07 17:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-11 09:05 - 2014-01-09 11:40 - 00000000 ____D C:\FRST 2014-01-11 08:43 - 2012-01-20 18:55 - 01081371 _____ C:\Windows\WindowsUpdate.log 2014-01-11 08:07 - 2014-01-02 03:46 - 00000000 ____D C:\ProgramData\MFAData 2014-01-11 03:25 - 2012-01-20 23:43 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Skype 2014-01-10 23:01 - 2014-01-10 23:01 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Awesomium 2014-01-10 21:25 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-10 21:25 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-10 21:21 - 2012-10-21 12:59 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F8FB1A55-F516-4C27-87C4-A40A3EFF1E4F} 2014-01-10 21:18 - 2013-06-05 23:33 - 00000000 ____D C:\Users\Boronian\AppData\Local\LogMeIn Hamachi 2014-01-10 21:16 - 2014-01-02 10:13 - 00003351 _____ C:\Windows\setupact.log 2014-01-10 21:16 - 2012-01-20 23:37 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-10 21:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-10 09:53 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Local\SecondLife 2014-01-10 02:33 - 2014-01-10 01:39 - 00000000 ____D C:\Users\Boronian\AppData\Local\SingularityViewer64 2014-01-10 01:39 - 2014-01-10 01:39 - 00000808 _____ C:\Users\Public\Desktop\Singularity (64 bit) Viewer.lnk 2014-01-09 20:00 - 2014-01-09 20:00 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk 2014-01-09 20:00 - 2014-01-09 20:00 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-09 20:00 - 2012-01-20 23:43 - 00000000 ____D C:\ProgramData\Skype 2014-01-09 19:55 - 2014-01-08 12:28 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2014-01-09 19:49 - 2014-01-09 19:49 - 00000633 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk 2014-01-09 15:58 - 2014-01-09 15:58 - 00000878 _____ C:\Users\Boronian\Desktop\JRT.txt 2014-01-09 15:41 - 2014-01-09 15:41 - 00000000 ____D C:\Windows\ERUNT 2014-01-09 15:33 - 2014-01-09 15:29 - 00000000 ____D C:\AdwCleaner 2014-01-09 15:33 - 2012-01-20 23:55 - 00000000 ____D C:\ProgramData\ICQ 2014-01-09 15:33 - 2012-01-20 18:56 - 00000000 ___RD C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-09 13:40 - 2012-06-22 11:31 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\U3 2014-01-09 12:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-09 11:41 - 2014-01-09 11:38 - 00000000 ____D C:\Users\Boronian\Downloads\Antiviren zeug 2014-01-09 11:36 - 2014-01-09 11:36 - 00000478 _____ C:\Users\Boronian\Downloads\defogger_disable.log 2014-01-09 11:36 - 2014-01-09 11:36 - 00000000 _____ C:\Users\Boronian\defogger_reenable 2014-01-09 11:36 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian 2014-01-09 11:35 - 2014-01-09 11:35 - 00050477 _____ C:\Users\Boronian\Downloads\Defogger.exe 2014-01-09 10:58 - 2012-09-02 12:57 - 00000000 ____D C:\Windows\system32\appmgmt 2014-01-09 10:34 - 2012-01-20 18:56 - 00001421 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Users\Boronian\AppData\Local\Google 2014-01-08 19:46 - 2013-12-17 22:11 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-08 19:29 - 2014-01-08 19:29 - 00000000 ____D C:\Users\Boronian\Desktop\Alte Firefox-Daten 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 ____D C:\Program Files\Enigma Software Group 2014-01-08 12:29 - 2014-01-08 12:29 - 00000000 _____ C:\autoexec.bat 2014-01-08 11:34 - 2014-01-08 11:34 - 00000000 ____D C:\ProgramData\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\Documents\Elder Scrolls Online 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\com.immersyve.Paladin.live 2014-01-08 05:46 - 2014-01-08 05:46 - 00000000 ____D C:\Program Files (x86)\ESO Survey Live 2014-01-08 05:32 - 2014-01-08 05:32 - 00000757 _____ C:\Users\Boronian\Desktop\The Elder Scrolls Online Beta.lnk 2014-01-07 21:53 - 2013-11-08 21:37 - 00000759 _____ C:\Users\Boronian\Desktop\abo´s.txt 2014-01-07 20:49 - 2014-01-02 10:13 - 00037784 _____ C:\Windows\PFRO.log 2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\RHelpers 2014-01-07 20:40 - 2014-01-03 19:20 - 00000000 ____D C:\Program Files (x86)\AmiExt 2014-01-07 20:15 - 2014-01-07 20:15 - 00000731 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Malwarebytes 2014-01-07 20:15 - 2014-01-07 20:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-07 20:14 - 2014-01-07 20:14 - 10284808 _____ (Malwarebytes Corporation ) C:\Users\Boronian\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-07 19:08 - 2012-01-20 23:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-07 18:58 - 2014-01-07 18:58 - 00000000 ____D C:\NVIDIA 2014-01-07 10:20 - 2014-01-07 10:20 - 00005120 _____ C:\Users\Boronian\AppData\Local\Databases.db 2014-01-07 10:20 - 2014-01-07 10:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\http_www.flickr.com_0 2014-01-05 13:25 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Local\Firestorm 2014-01-05 03:15 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\genienext 2014-01-05 01:03 - 2013-06-07 18:26 - 00000000 __SHD C:\#GDATA.Trash.Store# 2014-01-05 01:02 - 2014-01-05 01:02 - 00262144 _____ C:\Windows\SysWOW64\5-18 2014-01-04 19:09 - 2014-01-03 19:20 - 00000816 _____ C:\Users\Boronian\daemonprocess.txt 2014-01-04 19:08 - 2014-01-03 19:20 - 00000000 ____D C:\ProgramData\Updater 2014-01-04 18:18 - 2013-07-15 18:27 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\AppData\Local\cache 2014-01-03 19:20 - 2014-01-03 19:20 - 00000000 ____D C:\Users\Boronian\.android 2014-01-03 16:02 - 2014-01-03 16:02 - 46383872 _____ C:\Users\Boronian\Downloads\Phoenix-Firestorm-Beta-4-5-1-38838_SetupSL.exe 2014-01-03 14:00 - 2014-01-03 13:57 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Firestorm 2014-01-03 13:48 - 2014-01-03 13:47 - 46451408 _____ C:\Users\Boronian\Downloads\Phoenix_Firestorm-Release_4-4-2-34167_SetupSL.exe 2014-01-03 10:59 - 2014-01-03 10:59 - 00001337 _____ C:\Users\Boronian\Desktop\Continue App of the Day.lnk 2014-01-03 10:59 - 2014-01-03 10:59 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop 2014-01-03 10:58 - 2014-01-03 10:58 - 00000000 ____D C:\Program Files (x86)\foxydeal 2014-01-03 10:57 - 2012-03-24 14:46 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-01-03 10:19 - 2012-01-20 18:56 - 00000000 ____D C:\Users\Boronian\AppData\Local\VirtualStore 2014-01-03 10:08 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-03 02:12 - 2014-01-03 02:12 - 00002762 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-01-02 10:13 - 2014-01-02 10:13 - 00000000 _____ C:\Windows\setuperr.log 2014-01-02 04:42 - 2014-01-02 04:42 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-01-02 04:39 - 2014-01-02 04:09 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-02 04:39 - 2012-07-26 22:26 - 00000000 ____D C:\ProgramData\DriverGenius 2014-01-02 04:39 - 2012-01-20 23:27 - 00000000 ____D C:\Users\Boronian\AppData\Local\Downloaded Installations 2014-01-02 04:32 - 2012-01-20 18:47 - 00000000 ____D C:\Windows\Panther 2014-01-02 04:16 - 2014-01-02 04:09 - 00000000 ____D C:\ProgramData\AVG 2014-01-02 04:13 - 2014-01-02 04:13 - 00002225 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00002201 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-01-02 04:13 - 2014-01-02 04:13 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG 2014-01-02 04:12 - 2014-01-02 03:48 - 00000000 ____D C:\Program Files (x86)\AVG 2014-01-02 04:06 - 2014-01-02 04:05 - 78388136 _____ (AVG) C:\Users\Boronian\Downloads\avg_tuh_stf_all_2014_204_24c4.exe 2014-01-02 04:05 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\Avg2014 2014-01-02 03:52 - 2014-01-02 03:52 - 00001814 _____ C:\Users\Boronian\Desktop\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00001672 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ 2014-01-02 03:52 - 2014-01-02 03:52 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQM 2014-01-02 03:52 - 2012-01-20 23:54 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\ICQ 2014-01-02 03:51 - 2014-01-02 03:51 - 39431496 _____ (ICQ) C:\Users\Boronian\Downloads\icq_rfrset.exe 2014-01-02 03:51 - 2014-01-02 03:51 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\AVG2014 2014-01-02 03:50 - 2014-01-02 03:50 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute 2014-01-02 03:50 - 2014-01-02 03:49 - 00000000 ____D C:\ProgramData\AVG2014 2014-01-02 03:49 - 2014-01-02 03:49 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ___HD C:\$AVG 2014-01-02 03:49 - 2014-01-02 03:49 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TuneUp Software 2014-01-02 03:46 - 2014-01-02 03:46 - 04435768 _____ (AVG Technologies) C:\Users\Boronian\Downloads\avg_avct_stb_all_2014_4259_cm10.exe 2014-01-02 03:46 - 2014-01-02 03:46 - 00000000 ____D C:\Users\Boronian\AppData\Local\MFAData 2014-01-01 13:54 - 2014-01-01 13:37 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\SecondLife 2014-01-01 13:47 - 2014-01-01 13:46 - 31468112 _____ C:\Users\Boronian\Downloads\Second_Life_3_6_12_284506_i686_Setup.exe 2014-01-01 12:43 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Spotify 2013-12-30 21:38 - 2013-12-26 11:16 - 00000000 ____D C:\Users\Boronian\AppData\Local\Spotify 2013-12-27 04:02 - 2013-12-27 04:04 - 00011617 _____ C:\Users\Boronian\Desktop\NWO - RP.txt 2013-12-26 11:52 - 2012-04-29 09:39 - 00000000 ____D C:\Program Files (x86)\Gameforge 2013-12-26 11:48 - 2009-07-14 18:58 - 00709908 _____ C:\Windows\system32\perfh007.dat 2013-12-26 11:48 - 2009-07-14 18:58 - 00154344 _____ C:\Windows\system32\perfc007.dat 2013-12-26 11:48 - 2009-07-14 06:13 - 01649524 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-26 11:16 - 2013-12-26 11:16 - 00001823 _____ C:\Users\Boronian\Desktop\Spotify.lnk 2013-12-26 11:16 - 2013-12-26 11:16 - 00001809 _____ C:\Users\Boronian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-24 00:04 - 2012-04-22 05:06 - 01622868 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-23 19:18 - 2012-01-20 19:22 - 00065160 _____ C:\Users\Boronian\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-23 18:34 - 2009-07-14 05:45 - 00299664 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-23 18:31 - 2013-12-23 17:21 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 2013-12-23 18:31 - 2013-12-23 17:21 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 2013-12-23 18:30 - 2013-12-23 18:30 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf 2013-12-23 17:21 - 2013-12-23 17:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf 2013-12-23 17:15 - 2013-12-23 17:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf 2013-12-22 13:55 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\Documents\Witcher 2 2013-12-22 08:00 - 2013-12-22 08:00 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2 2013-12-22 07:52 - 2013-12-22 07:52 - 00000401 _____ C:\Users\Public\Desktop\Start The Witcher 2.lnk 2013-12-22 07:33 - 2012-01-20 23:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-22 07:28 - 2013-12-02 01:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\The Witcher 2013-12-21 08:45 - 2013-12-21 08:44 - 00017124 _____ C:\Users\Boronian\Desktop\Konversation.txt 2013-12-19 21:33 - 2014-01-07 19:01 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-12-19 21:33 - 2014-01-07 19:01 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-12-19 21:33 - 2014-01-07 19:01 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-12-19 21:33 - 2013-05-24 03:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-12-19 21:33 - 2013-05-24 03:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-12-19 21:33 - 2012-10-19 14:58 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-12-19 21:33 - 2012-01-20 23:36 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-12-19 21:33 - 2012-01-20 23:36 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2013-12-19 19:53 - 2012-01-20 23:37 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2013-12-19 19:53 - 2012-01-20 23:37 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2013-12-19 19:53 - 2012-01-20 23:37 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2013-12-19 18:34 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-19 12:20 - 2013-12-19 12:20 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2013-12-19 06:01 - 2012-10-19 14:59 - 03539040 _____ C:\Windows\system32\nvcoproc.bin 2013-12-14 17:58 - 2013-08-15 01:01 - 00000000 ____D C:\Windows\system32\MRT 2013-12-14 17:56 - 2012-01-21 00:44 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-14 17:49 - 2012-04-24 18:17 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\TS3Client 2013-12-14 01:15 - 2013-11-19 23:04 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA Corporation 2013-12-14 01:15 - 2013-05-24 03:39 - 00000000 ____D C:\Users\Boronian\AppData\Local\NVIDIA 2013-12-14 01:15 - 2012-01-20 23:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-14 01:14 - 2012-01-20 23:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-12 21:35 - 2012-02-24 19:37 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-12 21:34 - 2013-12-12 21:34 - 00000000 ____D C:\Users\Boronian\AppData\Roaming\Oracle Some content of TEMP: ==================== C:\Users\Boronian\AppData\Local\Temp\htmlayout.dll C:\Users\Boronian\AppData\Local\Temp\nv3DVStreaming.dll C:\Users\Boronian\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Boronian\AppData\Local\Temp\nvStereoApiI.dll C:\Users\Boronian\AppData\Local\Temp\nvStInst.exe C:\Users\Boronian\AppData\Local\Temp\Quarantine.exe C:\Users\Boronian\AppData\Local\Temp\SHSetup.exe C:\Users\Boronian\AppData\Local\Temp\toolbar3011458.exe C:\Users\Boronian\AppData\Local\Temp\toolbar3061488.exe C:\Users\Boronian\AppData\Local\Temp\uninstall21498232.exe C:\Users\Boronian\AppData\Local\Temp\uninstall21498248.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-02 11:39 ==================== End Of Log ============================ welchen Virenscanner kannst du mir, nebst GData empfehlen, käulich zu erwerben? Scheinbar konnte meiner diese Flut nicht zurückhalten. MalwareBytes werde ich auf jedenfall eine Lizens holen. Geändert von Boronian (11.01.2014 um 09:31 Uhr) |
11.01.2014, 15:33 | #6 |
/// the machine /// TB-Ausbilder | Win7 , 64 bit -- (Firefox) Nation-zoom Befall. Ich empfehle immer Emsisoft, aber bitte nur ein AV nutzen. Der Fund ist im Backup auf E:, dieses löschen. Fertig Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Win7 , 64 bit -- (Firefox) Nation-zoom Befall. |
12.01.2014, 06:11 | #7 |
| Win7 , 64 bit -- (Firefox) Nation-zoom Befall. Grüß dich Abschlussbericht: --------------- Code:
ATTFilter # DelFix v10.6 - Datei am 12/01/2014 um 06:00:02 erstellt # Aktualisiert am 11/11/2013 von Xplode # Benutzer : Boronian - BORONIAN-PC # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) ~ Aktiviere die Benutzerkontensteuerung ... OK ~ Entferne die Bereinigungsprogramme ... Gelöscht : C:\FRST Gelöscht : C:\AdwCleaner Gelöscht : C:\Users\Boronian\Desktop\JRT.txt Gelöscht : C:\Users\Boronian\Downloads\Defogger.exe Gelöscht : C:\Users\Boronian\Downloads\defogger_disable.log Gelöscht : HKLM\SOFTWARE\AdwCleaner ~ Erstelle ein Backup der Registrierungsdatenbank ... OK ~ Lösche die Wiederherstellungspunkte ... Gelöscht : RP #383 [Removed SpyHunter | 01/09/2014 09:57:34] Gelöscht : RP #384 [Removed SpyHunter | 01/09/2014 18:53:10] Gelöscht : RP #385 [Removed SpyHunter | 01/09/2014 18:55:03] Gelöscht : RP #386 [Removed Skype™ 6.11 | 01/09/2014 18:57:21] Gelöscht : RP #387 [Windows-Sicherung | 01/10/2014 20:27:41] Ein neuer Wiederherstellungspunkt wurde erstellt ! ~ Stelle die Systemeinstellungen wieder her ... OK ########## - EOF - ########## Lieben Gruß Boronian |
12.01.2014, 09:21 | #8 |
/// the machine /// TB-Ausbilder | Win7 , 64 bit -- (Firefox) Nation-zoom Befall. Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Win7 , 64 bit -- (Firefox) Nation-zoom Befall. |
adblock, converter, defender, downloader, esgscanner.sys, explorer, flash player, gdata, iexplore.exe, launch, lollipop.exe, mobogenie, mobogenie entfernen, nationzoom, nationzoom entfernen, neustart, ntdll.dll, programm, refresh, registry, richtlinie, security, server, services.exe, spotify web helper, spyhunter, spyhunter entfernen, svchost.exe, totalprotection, updates, windows, winlogon.exe, youtube downloader |