Windows 7 64bit BKA Browser Trojaner

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:58 on 09/01/2014 (Chris)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01
Ran by Chris (administrator) on CHRIS-NOTEBOOK on 09-01-2014 15:00:05
Running from D:\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8081952 2009-08-24] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
MountPoints2: G - G:\AutoRun.exe
MountPoints2: {6e44cce0-f7b5-11e2-a865-806e6f6e6963} - E:\Autorun.exe
MountPoints2: {90b3cfe7-72f5-11e3-a3d8-0022fa92f4dc} - G:\AutoRun.exe
MountPoints2: {90b3cff9-72f5-11e3-a3d8-0022fa92f4dc} - G:\AutoRun.exe
MountPoints2: {90b3d01d-72f5-11e3-a3d8-00235a073e9e} - G:\AutoRun.exe

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8179A3258F8CCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zxy06uee.default
FF user.js: detected! => C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zxy06uee.default\user.js
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\zxy06uee.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-12-15] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-09-02] (DT Soft Ltd)
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-09 15:00 - 2014-01-09 15:00 - 00000000 ____D C:\FRST
2014-01-09 14:58 - 2014-01-09 14:58 - 00000000 _____ C:\Users\Chris\defogger_reenable
2014-01-08 15:52 - 2014-01-09 11:41 - 00079668 _____ C:\Users\Chris\Desktop\config-mein.big
2014-01-08 00:21 - 2014-01-08 00:21 - 00000000 ____D C:\Users\Chris\AppData\Roaming\Avira
2014-01-08 00:20 - 2014-01-08 00:20 - 00000000 ____D C:\ProgramData\APN
2014-01-08 00:19 - 2014-01-08 00:19 - 00002030 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-08 00:19 - 2014-01-08 00:19 - 00000000 ____D C:\ProgramData\Avira
2014-01-08 00:19 - 2014-01-08 00:19 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-08 00:19 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-08 00:19 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-08 00:19 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-08 00:19 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-05 01:26 - 2014-01-05 01:26 - 00003128 _____ C:\Windows\System32\Tasks\{191D5E38-24C6-4A72-A78C-6906D4702C02}
2014-01-05 01:18 - 2014-01-05 01:18 - 00003120 _____ C:\Windows\System32\Tasks\{C4838DD4-5BDB-4583-825B-6188E8564955}
2014-01-05 01:16 - 2014-01-05 01:16 - 00003122 _____ C:\Windows\System32\Tasks\{7F450808-8C88-4CFA-925B-20BB451AEFC3}
2014-01-05 01:13 - 2014-01-05 01:13 - 00003128 _____ C:\Windows\System32\Tasks\{716DA11A-16E4-45D1-8AFF-FCC5A9779EB8}
2014-01-05 01:09 - 2014-01-05 01:09 - 00003120 _____ C:\Windows\System32\Tasks\{6EFC3A18-2641-4DD9-A118-E417DC9BE7D1}
2014-01-05 00:57 - 2014-01-05 00:57 - 00000000 ____D C:\Users\Chris\Documents\FUSSBALL MANAGER 14
2014-01-05 00:55 - 2014-01-05 00:55 - 00000000 ____D C:\ProgramData\BitDefender
2014-01-05 00:54 - 2014-01-09 14:29 - 00000728 _____ C:\Windows\setupact.log
2014-01-05 00:54 - 2014-01-08 12:38 - 00104092 _____ C:\Windows\PFRO.log
2014-01-05 00:54 - 2014-01-05 00:54 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 23:02 - 2014-01-04 23:02 - 00001224 _____ C:\Users\Public\Desktop\FUSSBALL MANAGER 14.lnk
2014-01-04 23:02 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-01-04 23:02 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-01-04 23:02 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-01-04 23:02 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-01-04 23:02 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-01-04 23:02 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-01-04 23:02 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-01-04 23:02 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-01-04 23:02 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-01-04 23:02 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-01-04 23:02 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-01-04 23:02 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-01-04 23:02 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-01-04 23:02 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-01-04 23:02 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-01-04 23:02 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-01-04 23:02 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-01-04 23:02 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-01-04 23:02 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-01-04 23:02 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-01-04 23:02 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-01-04 23:02 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-01-04 23:02 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-01-04 23:02 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-01-04 23:02 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-01-04 23:02 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-01-04 23:02 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-01-04 23:02 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-01-04 23:02 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-01-04 23:02 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-01-04 23:02 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-01-04 23:02 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-01-04 23:02 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-01-04 23:02 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-01-04 23:02 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-01-04 23:02 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-01-04 23:02 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-01-04 23:02 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-01-04 23:02 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-01-04 23:02 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-01-04 23:02 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-01-04 23:02 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-01-04 23:02 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-01-04 23:02 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-01-04 23:02 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-01-04 23:02 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-01-04 23:02 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-01-04 23:02 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-01-04 23:02 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-01-04 23:02 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-01-04 23:02 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-01-04 23:02 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-01-04 23:01 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-01-04 23:01 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-01-04 23:01 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-01-04 23:01 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-01-04 23:01 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-01-04 23:01 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-01-04 23:01 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-01-04 23:01 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-01-04 23:01 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-01-04 23:01 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-01-04 23:01 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-01-04 23:01 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-01-04 23:01 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-01-04 23:01 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-01-04 23:01 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-01-04 23:01 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-01-04 23:01 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-01-04 23:01 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-01-04 23:01 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-01-04 23:01 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-01-04 23:01 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-01-04 23:01 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-01-04 23:01 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-01-04 23:01 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-01-04 23:01 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-01-04 23:01 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-01-04 23:01 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-01-04 23:01 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-01-04 23:01 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-01-04 23:01 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-01-04 23:01 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-01-04 23:01 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-01-04 23:01 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-01-04 23:01 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-01-04 23:01 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-01-04 23:01 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-01-04 23:01 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-01-04 23:01 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-01-04 23:01 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-01-04 23:01 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-01-04 23:01 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-01-04 23:01 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-01-04 23:01 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-01-04 23:01 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-01-04 23:01 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-01-04 23:01 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-01-04 23:01 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-01-04 23:01 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-01-04 23:01 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-01-04 23:01 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-01-04 23:01 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-01-04 23:01 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-01-04 23:01 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-01-04 23:01 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-01-04 23:01 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-01-04 23:01 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-01-04 23:01 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-01-04 23:01 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-01-04 23:01 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-01-04 23:01 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-01-04 23:01 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-01-04 23:01 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-01-04 23:01 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-01-04 23:01 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-01-04 23:01 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-01-04 23:01 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-01-04 23:01 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-01-04 23:01 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-01-04 23:01 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-01-04 23:01 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-01-04 23:01 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-01-04 23:01 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-01-04 23:01 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-01-04 23:01 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-01-04 23:01 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-01-04 23:01 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-01-04 23:01 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-01-04 23:01 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-01-04 23:01 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-01-04 23:01 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-01-04 23:01 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-01-04 23:01 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-01-04 23:01 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-01-04 23:01 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-01-04 23:01 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-01-04 23:01 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-01-04 23:01 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-01-04 23:01 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-01-04 23:01 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-01-04 23:01 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-01-04 23:01 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-01-04 23:01 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-01-04 23:01 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-01-04 23:01 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-01-04 23:00 - 2014-01-04 23:01 - 00016883 _____ C:\Windows\DirectX.log
2014-01-04 23:00 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-01-04 23:00 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-01-04 23:00 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-01-04 23:00 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-01-04 23:00 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-01-04 23:00 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-01-04 23:00 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-01-04 23:00 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-01-04 23:00 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-01-04 23:00 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-01-04 23:00 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-01-04 23:00 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-01-04 23:00 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-01-04 23:00 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-01-04 23:00 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-01-04 23:00 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-01-04 23:00 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-01-04 23:00 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-01-04 22:45 - 2014-01-04 22:47 - 00000000 ____D C:\Program Files (x86)\Origin Games
2014-01-04 22:42 - 2014-01-05 00:56 - 00000000 ____D C:\Users\Chris\AppData\Roaming\Origin
2014-01-04 22:42 - 2014-01-04 22:45 - 00000000 ____D C:\Users\Chris\AppData\Local\Origin
2014-01-04 22:41 - 2014-01-05 00:52 - 00000000 ____D C:\ProgramData\Origin
2014-01-04 22:41 - 2014-01-05 00:52 - 00000000 ____D C:\ProgramData\Electronic Arts
2014-01-04 22:41 - 2014-01-04 22:41 - 00000983 _____ C:\Users\Public\Desktop\Origin.lnk
2014-01-04 22:40 - 2014-01-09 11:41 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-04 22:36 - 2014-01-04 22:36 - 00086672 _____ C:\Users\Chris\Documents\cc_20140104_223609.reg
2014-01-04 22:36 - 2014-01-04 22:36 - 00004578 _____ C:\Users\Chris\Documents\cc_20140104_223641.reg
2014-01-04 22:34 - 2014-01-04 22:34 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-04 22:34 - 2014-01-04 22:34 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-04 22:34 - 2014-01-04 22:34 - 00000000 ____D C:\Program Files\CCleaner
2014-01-02 00:40 - 2014-01-03 14:17 - 00000000 ____D C:\Users\Chris\AppData\Roaming\vlc
2014-01-02 00:40 - 2014-01-02 00:40 - 00001070 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-02 00:39 - 2014-01-02 00:39 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2014-01-01 16:06 - 2014-01-01 16:06 - 00000000 ____D C:\Users\Chris\AppData\Roaming\T-Mobile Internet Manager
2014-01-01 16:05 - 2014-01-01 16:05 - 00000000 ____D C:\Users\Chris\AppData\Roaming\T-Mobile
2013-12-20 21:11 - 2013-12-20 21:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-15 14:23 - 2013-12-17 22:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-14 14:37 - 2013-12-14 14:45 - 00000000 ____D C:\Users\Chris\AppData\Local\Thunderbird
2013-12-14 14:37 - 2013-12-14 14:37 - 00002090 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-12-14 14:37 - 2013-12-14 14:37 - 00000000 ____D C:\Users\Chris\AppData\Roaming\Thunderbird
2013-12-13 09:35 - 2014-01-07 23:58 - 00000000 ____D C:\Users\Chris\AppData\Roaming\LavasoftStatistics
2013-12-13 09:19 - 2013-12-13 09:19 - 00000000 ____D C:\Program Files\Lavasoft
2013-12-13 09:18 - 2014-01-07 23:56 - 00000000 ____D C:\Program Files (x86)\Lavasoft
2013-12-13 09:16 - 2013-12-13 09:16 - 00000000 ____D C:\ProgramData\Lavasoft
2013-12-13 08:59 - 2013-12-13 08:59 - 00000085 _____ C:\Windows\wininit.ini
2013-12-13 08:57 - 2013-12-08 16:17 - 00000372 _____ C:\Quarantine.lst
2013-12-13 08:57 - 2013-12-08 16:17 - 00000200 _____ C:\Quarantine.reg
2013-12-12 22:58 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 22:58 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 22:58 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-12 22:58 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-12 22:57 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 22:57 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 22:57 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 22:57 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 22:57 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 22:57 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 22:57 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 22:57 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 22:57 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-12 22:57 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 22:57 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 22:57 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 22:57 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 22:57 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 22:57 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-12 22:57 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-12 22:57 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-12 22:57 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-12 22:57 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-12 22:57 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 22:57 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 22:57 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 22:57 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-12 22:57 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-12 22:57 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 22:56 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-12 22:56 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 22:56 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-12 22:56 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 22:56 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 22:56 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 20:01 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 20:01 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 20:01 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 20:01 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 20:01 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 20:01 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 20:01 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 20:01 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 20:01 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 20:00 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 20:00 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 20:00 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 20:00 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 20:00 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 20:00 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 20:00 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 20:00 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 20:00 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 20:00 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-09 15:00 - 2014-01-09 15:00 - 00000000 ____D C:\FRST
2014-01-09 14:58 - 2014-01-09 14:58 - 00000000 _____ C:\Users\Chris\defogger_reenable
2014-01-09 14:58 - 2013-07-28 20:13 - 00000000 ____D C:\Users\Chris
2014-01-09 14:37 - 2009-07-14 05:45 - 00016704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-09 14:37 - 2009-07-14 05:45 - 00016704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-09 14:33 - 2013-10-09 10:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 14:33 - 2013-07-28 19:45 - 01182538 _____ C:\Windows\WindowsUpdate.log
2014-01-09 14:33 - 2009-07-14 18:58 - 00654166 _____ C:\Windows\system32\perfh007.dat
2014-01-09 14:33 - 2009-07-14 18:58 - 00130006 _____ C:\Windows\system32\perfc007.dat
2014-01-09 14:33 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-09 14:29 - 2014-01-05 00:54 - 00000728 _____ C:\Windows\setupact.log
2014-01-09 14:29 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-09 11:41 - 2014-01-08 15:52 - 00079668 _____ C:\Users\Chris\Desktop\config-mein.big
2014-01-09 11:41 - 2014-01-04 22:40 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-08 12:38 - 2014-01-05 00:54 - 00104092 _____ C:\Windows\PFRO.log
2014-01-08 12:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-08 00:21 - 2014-01-08 00:21 - 00000000 ____D C:\Users\Chris\AppData\Roaming\Avira
2014-01-08 00:20 - 2014-01-08 00:20 - 00000000 ____D C:\ProgramData\APN
2014-01-08 00:19 - 2014-01-08 00:19 - 00002030 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-08 00:19 - 2014-01-08 00:19 - 00000000 ____D C:\ProgramData\Avira
2014-01-08 00:19 - 2014-01-08 00:19 - 00000000 ____D C:\Program Files (x86)\Avira
2014-01-07 23:58 - 2013-12-13 09:35 - 00000000 ____D C:\Users\Chris\AppData\Roaming\LavasoftStatistics
2014-01-07 23:56 - 2013-12-13 09:18 - 00000000 ____D C:\Program Files (x86)\Lavasoft
2014-01-05 01:26 - 2014-01-05 01:26 - 00003128 _____ C:\Windows\System32\Tasks\{191D5E38-24C6-4A72-A78C-6906D4702C02}
2014-01-05 01:18 - 2014-01-05 01:18 - 00003120 _____ C:\Windows\System32\Tasks\{C4838DD4-5BDB-4583-825B-6188E8564955}
2014-01-05 01:16 - 2014-01-05 01:16 - 00003122 _____ C:\Windows\System32\Tasks\{7F450808-8C88-4CFA-925B-20BB451AEFC3}
2014-01-05 01:13 - 2014-01-05 01:13 - 00003128 _____ C:\Windows\System32\Tasks\{716DA11A-16E4-45D1-8AFF-FCC5A9779EB8}
2014-01-05 01:09 - 2014-01-05 01:09 - 00003120 _____ C:\Windows\System32\Tasks\{6EFC3A18-2641-4DD9-A118-E417DC9BE7D1}
2014-01-05 00:57 - 2014-01-05 00:57 - 00000000 ____D C:\Users\Chris\Documents\FUSSBALL MANAGER 14
2014-01-05 00:56 - 2014-01-04 22:42 - 00000000 ____D C:\Users\Chris\AppData\Roaming\Origin
2014-01-05 00:55 - 2014-01-05 00:55 - 00000000 ____D C:\ProgramData\BitDefender
2014-01-05 00:54 - 2014-01-05 00:54 - 00000000 _____ C:\Windows\setuperr.log
2014-01-05 00:52 - 2014-01-04 22:41 - 00000000 ____D C:\ProgramData\Origin
2014-01-05 00:52 - 2014-01-04 22:41 - 00000000 ____D C:\ProgramData\Electronic Arts
2014-01-04 23:02 - 2014-01-04 23:02 - 00001224 _____ C:\Users\Public\Desktop\FUSSBALL MANAGER 14.lnk
2014-01-04 23:01 - 2014-01-04 23:00 - 00016883 _____ C:\Windows\DirectX.log
2014-01-04 22:47 - 2014-01-04 22:45 - 00000000 ____D C:\Program Files (x86)\Origin Games
2014-01-04 22:45 - 2014-01-04 22:42 - 00000000 ____D C:\Users\Chris\AppData\Local\Origin
2014-01-04 22:41 - 2014-01-04 22:41 - 00000983 _____ C:\Users\Public\Desktop\Origin.lnk
2014-01-04 22:36 - 2014-01-04 22:36 - 00086672 _____ C:\Users\Chris\Documents\cc_20140104_223609.reg
2014-01-04 22:36 - 2014-01-04 22:36 - 00004578 _____ C:\Users\Chris\Documents\cc_20140104_223641.reg
2014-01-04 22:35 - 2013-09-02 14:24 - 00000000 ____D C:\Users\Chris\AppData\Roaming\DAEMON Tools Lite
2014-01-04 22:35 - 2013-07-28 20:41 - 00000000 ____D C:\Windows\Panther
2014-01-04 22:34 - 2014-01-04 22:34 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-04 22:34 - 2014-01-04 22:34 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-04 22:34 - 2014-01-04 22:34 - 00000000 ____D C:\Program Files\CCleaner
2014-01-03 14:17 - 2014-01-02 00:40 - 00000000 ____D C:\Users\Chris\AppData\Roaming\vlc
2014-01-02 00:40 - 2014-01-02 00:40 - 00001070 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-02 00:39 - 2014-01-02 00:39 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2014-01-01 16:06 - 2014-01-01 16:06 - 00000000 ____D C:\Users\Chris\AppData\Roaming\T-Mobile Internet Manager
2014-01-01 16:05 - 2014-01-01 16:05 - 00000000 ____D C:\Users\Chris\AppData\Roaming\T-Mobile
2013-12-21 14:30 - 2013-08-18 19:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 21:11 - 2013-12-20 21:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-17 22:45 - 2013-12-15 14:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-16 21:20 - 2013-11-24 22:52 - 00002192 ____H C:\Users\Chris\Documents\Default.rdp
2013-12-16 20:55 - 2013-07-30 21:47 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 20:54 - 2013-07-29 23:39 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-14 14:45 - 2013-12-14 14:37 - 00000000 ____D C:\Users\Chris\AppData\Local\Thunderbird
2013-12-14 14:37 - 2013-12-14 14:37 - 00002090 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-12-14 14:37 - 2013-12-14 14:37 - 00000000 ____D C:\Users\Chris\AppData\Roaming\Thunderbird
2013-12-13 11:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-13 09:19 - 2013-12-13 09:19 - 00000000 ____D C:\Program Files\Lavasoft
2013-12-13 09:16 - 2013-12-13 09:16 - 00000000 ____D C:\ProgramData\Lavasoft
2013-12-13 08:59 - 2013-12-13 08:59 - 00000085 _____ C:\Windows\wininit.ini
2013-12-13 08:49 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-13 08:48 - 2013-12-08 17:24 - 00563840 _____ C:\Windows\system32\Drivers\sfi.dat
2013-12-13 08:30 - 2009-07-14 05:45 - 00304120 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-10 21:33 - 2013-10-09 10:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 21:33 - 2013-07-31 22:07 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 21:33 - 2013-07-31 22:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Chris\AppData\Local\Temp\avgnt.exe
C:\Users\Chris\AppData\Local\Temp\Offercast_AVIRAV7_.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-01 18:24

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-01-2014 01
Ran by Chris at 2014-01-09 15:01:35
Running from D:\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
CCleaner (Version: 4.09 - Piriform)
DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd)
DivX-Setup (x32 Version: 2.6.1.84 - DivX, LLC)
Explorer Suite IV (Version:  - )
FUSSBALL MANAGER 14 (x32 Version: 1.0.0.0 - Electronic Arts)
Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
moDiag 2.8.607 (x32 Version: 2.8.607 - Matthias Tieben)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
OpenOffice 4.0.0 (x32 Version: 4.00.9702 - Apache Software Foundation)
OpenVPN 2.2.2 (x32 Version: 2.2.2 - )
Origin (x32 Version: 9.3.2.2730 - Electronic Arts, Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5923 - Realtek Semiconductor Corp.)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (x32 Version:  - Silicon Laboratories)
Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7 (x32 Version: 6.4 - Silicon Laboratories, Inc.)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WinRAR 4.01 (32-Bit) (x32 Version: 4.01.0 - win.rar GmbH)

==================== Restore Points  =========================

04-01-2014 21:59:37 DirectX wurde installiert
06-01-2014 02:00:11 Windows Update
07-01-2014 22:57:37 AA11

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-12-13 08:58 - 00000938 ____R C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {4CAF68B2-2483-4C08-8865-C127FDE15FEC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {7942C09D-CAFF-42CC-8F84-9DACC3679A53} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-09-02 14:48 - 2011-05-28 21:05 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2014-01-08 00:19 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-12-20 21:11 - 2013-12-20 21:11 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:206470A5
AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F
AlternateDataStreams: C:\ProgramData\TEMP:71612023
AlternateDataStreams: C:\ProgramData\TEMP:A88BE334
AlternateDataStreams: C:\ProgramData\TEMP:C68DE4A3

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Realtek RTL8102E/RTL8103E Family PCI-E Fast Ethernet NIC (NDIS 6.20)
Description: Realtek RTL8102E/RTL8103E Family PCI-E Fast Ethernet NIC (NDIS 6.20)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8167
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: TAP-Win32 Adapter V9
Description: TAP-Win32 Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Win32 Provider V9
Service: tap0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2014 01:17:18 AM) (Source: Application Hang) (User: )
Description: Programm Origin.exe, Version 9.3.11.2762 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: f74

Startzeit: 01cf0c8da0cc42bc

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Origin\Origin.exe

Berichts-ID: 64472594-78c3-11e3-a515-00235a073e9e

Error: (01/08/2014 03:11:11 PM) (Source: Application Hang) (User: )
Description: Programm Origin.exe, Version 9.3.11.2762 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 45c

Startzeit: 01cf0c76da627bd0

Endzeit: 15

Anwendungspfad: C:\Program Files (x86)\Origin\Origin.exe

Berichts-ID: b750d6b6-786e-11e3-a515-00235a073e9e

Error: (01/08/2014 00:59:37 AM) (Source: Application Hang) (User: )
Description: Programm Origin.exe, Version 9.3.11.2762 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: e84

Startzeit: 01cf0bfcdf093a5e

Endzeit: 15

Anwendungspfad: C:\Program Files (x86)\Origin\Origin.exe

Berichts-ID: c12e7c8f-77f7-11e3-91eb-00235a073e9e

Error: (01/08/2014 00:27:03 AM) (Source: Application Hang) (User: )
Description: Programm avcenter.exe, Version 14.0.2.220 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: e64

Startzeit: 01cf0bffb6fa7682

Endzeit: 60000

Anwendungspfad: C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe

Berichts-ID: 0abcd2f1-77f3-11e3-91eb-00235a073e9e

Error: (01/08/2014 00:24:01 AM) (Source: MsiInstaller) (User: Chris-Notebook)
Description: Produkt: Avira SearchFree Toolbar -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Mozilla Firefox

Error: (01/08/2014 00:23:20 AM) (Source: MsiInstaller) (User: Chris-Notebook)
Description: Produkt: Avira SearchFree Toolbar -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Mozilla Firefox

Error: (01/08/2014 00:23:19 AM) (Source: MsiInstaller) (User: Chris-Notebook)
Description: Produkt: Avira SearchFree Toolbar -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Mozilla Firefox

Error: (01/08/2014 00:23:13 AM) (Source: MsiInstaller) (User: Chris-Notebook)
Description: Produkt: Avira SearchFree Toolbar -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Mozilla Firefox

Error: (01/07/2014 06:00:36 PM) (Source: Application Hang) (User: )
Description: Programm Origin.exe, Version 9.3.11.2762 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fe8

Startzeit: 01cf0bc7f32b953a

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Origin\Origin.exe

Berichts-ID: 37daa020-77bd-11e3-b899-00235a073e9e

Error: (01/06/2014 05:36:27 PM) (Source: Application Hang) (User: )
Description: Programm Origin.exe, Version 9.3.11.2762 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fe8

Startzeit: 01cf0ae40ee40f68

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Origin\Origin.exe

Berichts-ID: aee3697b-76f0-11e3-9671-00235a073e9e


System errors:
=============
Error: (01/09/2014 02:29:34 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (01/09/2014 02:29:34 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (01/09/2014 02:10:36 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (01/09/2014 02:10:36 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (01/09/2014 01:45:58 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (01/09/2014 01:45:57 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (01/09/2014 01:00:27 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (01/09/2014 01:00:26 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (01/09/2014 00:43:47 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (01/09/2014 00:43:46 PM) (Source: atikmdag) (User: )
Description: Display is not active


Microsoft Office Sessions:
=========================
Error: (01/09/2014 01:17:18 AM) (Source: Application Hang)(User: )
Description: Origin.exe9.3.11.2762f7401cf0c8da0cc42bc0C:\Program Files (x86)\Origin\Origin.exe64472594-78c3-11e3-a515-00235a073e9e

Error: (01/08/2014 03:11:11 PM) (Source: Application Hang)(User: )
Description: Origin.exe9.3.11.276245c01cf0c76da627bd015C:\Program Files (x86)\Origin\Origin.exeb750d6b6-786e-11e3-a515-00235a073e9e

Error: (01/08/2014 00:59:37 AM) (Source: Application Hang)(User: )
Description: Origin.exe9.3.11.2762e8401cf0bfcdf093a5e15C:\Program Files (x86)\Origin\Origin.exec12e7c8f-77f7-11e3-91eb-00235a073e9e

Error: (01/08/2014 00:27:03 AM) (Source: Application Hang)(User: )
Description: avcenter.exe14.0.2.220e6401cf0bffb6fa768260000C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe0abcd2f1-77f3-11e3-91eb-00235a073e9e

Error: (01/08/2014 00:24:01 AM) (Source: MsiInstaller)(User: Chris-Notebook)
Description: Produkt: Avira SearchFree Toolbar -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Mozilla Firefox	(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/08/2014 00:23:20 AM) (Source: MsiInstaller)(User: Chris-Notebook)
Description: Produkt: Avira SearchFree Toolbar -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Mozilla Firefox	(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/08/2014 00:23:19 AM) (Source: MsiInstaller)(User: Chris-Notebook)
Description: Produkt: Avira SearchFree Toolbar -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Mozilla Firefox	(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/08/2014 00:23:13 AM) (Source: MsiInstaller)(User: Chris-Notebook)
Description: Produkt: Avira SearchFree Toolbar -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 

Mozilla Firefox	(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/07/2014 06:00:36 PM) (Source: Application Hang)(User: )
Description: Origin.exe9.3.11.2762fe801cf0bc7f32b953a16C:\Program Files (x86)\Origin\Origin.exe37daa020-77bd-11e3-b899-00235a073e9e

Error: (01/06/2014 05:36:27 PM) (Source: Application Hang)(User: )
Description: Origin.exe9.3.11.2762fe801cf0ae40ee40f6816C:\Program Files (x86)\Origin\Origin.exeaee3697b-76f0-11e3-9671-00235a073e9e


==================== Memory info =========================== 

Percentage of memory in use: 33%
Total physical RAM: 4060.89 MB
Available physical RAM: 2703.95 MB
Total Pagefile: 8119.96 MB
Available Pagefile: 6489.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:78.13 GB) (Free:32.6 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:219.95 GB) (Free:195.38 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 01660165)
Partition 1: (Active) - (Size=78 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=220 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2014-01-09 15:14:54
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HM321HI rev.2AJ10001 298,09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Chris\AppData\Local\Temp\awddraoc.sys


---- User code sections - GMER 2.1 ----

?  C:\Windows\system32\mssprxy.dll [2332] entry point in ".rdata" section  00000000741871e6

---- EOF - GMER 2.1 ----