Hallo.

Ich habe ein kleines Problem.
Seit etwa 10 Tagen habe ich nach dem Systemstart das Problem das meine GPU direkt auf 75% Auslastung hoch fährt dies konnte ich nur unterbinden in dem ich im Taskmanager die GPUmonitor.exe beendete. Nun kam heute von Avira die Anzeige das TR/BitCoinMiner.V unter folgendem Pfad gefunden wurde:

C:\Programm Files (x86)\VLC Player GPU+\GPUMonitor.exe und
C:\Programm Files (x86)\VLC Player GPU+\UsageMonitor.exe

Ich habe alle Dateien im Ordner VLC Player GPU+ gelöscht. Das Problem selbst tritt seit dem nicht mehr direkt auf, sondern äusert sich nur noch darin das der PC sehr instabil läuft.

Ich hoffe ihr könnt mir helfen.

Vielen Dank.

Liebe Grüße Tobi

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 03
Ran by Tobi (administrator) on TOBI-PC on 16-01-2014 15:15:03
Running from C:\Users\Tobi\Downloads
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Turtle Entertainment GmbH) C:\Program Files\EslWire\wire.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(Overwolf) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Local Weather LLC) C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe
(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [EKStatusMonitor] - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-01-15] (Eastman Kodak Company)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UsageTemp] - C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe [1274592 2014-01-15] ()
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [ESL Wire] - C:\Program Files\EslWire\wire.exe [4253696 2013-12-09] (Turtle Entertainment GmbH)
HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-07-12] (SteelSeries ApS)
HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35768 2013-12-09] (Overwolf)
HKCU\...\Run: [NextLive] - C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.dll [1283584 2013-11-14] (NewNextDotMe)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DesktopWeatherAlerts.lnk
ShortcutTarget: DesktopWeatherAlerts.lnk -> C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp.exe ()
Startup: C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Weather Alerts.lnk
ShortcutTarget: Weather Alerts.lnk -> C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe (Local Weather LLC)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4B2FBEA62A6CCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
BHO: Plus-HD-5.0 - {11111111-1111-1111-1111-110411771118} - C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho64.dll (Plus HD)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: Plus-HD-5.0 - {11111111-1111-1111-1111-110411771118} - C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho.dll (Plus HD)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
BHO-x32: Re-Markable - {f5ce6d93-1111-4c9f-899d-01d1c6a8f798} - C:\Program Files (x86)\Re-Markable\150.dll ()
BHO-x32: Shopping Suggestion - {F6C07882-D703-4DD5-905A-2C4E815A5066} - C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll (WW3, LLC)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.68.161.141 217.68.161.171

Chrome: 
=======
CHR Extension: (Lightning Newtab) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.7.9_0 [2014-01-16]
CHR Extension: (Google Wallet) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 [2014-01-16]
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-12-29]

==================== Services (Whitelisted) =================

U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
U4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)
U2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2013-06-11] ()
U2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [468648 2014-01-09] (Elex do Brasil Participações Ltda)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)
U2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-25] ()
U2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
U2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)
U2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
U2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2013-12-29] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
U3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()
U2 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
U0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2013-12-02] (<Turtle Entertainment>)
U3 iSafeKrnl; C:\Program Files (x86)\iSafe\iSafeKrnl.sys [219648 2014-01-09] (Elex do Brasil Participações Ltda)
U1 iSafeNetFilter; C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [44032 2014-01-09] (Elex do Brasil Participações Ltda)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
U3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2013-11-15] (Razer Inc)
U3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
U3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [38016 2013-06-25] (SteelSeries Corporation)
U3 WinRing0_1_2_0; E:\Program Files (x86)\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
U3 cpuz136; \??\C:\Users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-16 15:15 - 2014-01-16 15:15 - 00014678 _____ C:\Users\Tobi\Downloads\FRST.txt
2014-01-16 15:14 - 2014-01-16 15:14 - 00000000 ____D C:\FRST
2014-01-16 15:12 - 2014-01-16 15:14 - 02076160 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe
2014-01-15 20:53 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-01-15 20:53 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2014-01-15 20:53 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2014-01-15 20:53 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2014-01-15 20:53 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-01-15 20:53 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-01-15 20:53 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2014-01-15 20:53 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-15 20:53 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-15 20:53 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-01-15 20:53 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat
2014-01-15 20:41 - 2014-01-15 20:41 - 00003320 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Windows\CD09642E061D4844BA37ED1480916404.TMP
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-15 20:41 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe
2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe
2014-01-15 20:30 - 2014-01-15 20:30 - 00669160 _____ (                                                            ) C:\Users\Tobi\Downloads\ZipOpenerSetup.exe
2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk
2014-01-15 18:52 - 2014-01-16 15:10 - 00000000 ____D C:\Program Files (x86)\iSafe
2014-01-15 18:52 - 2014-01-16 08:46 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\iSafe
2014-01-15 18:52 - 2014-01-15 18:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber
2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk
2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log
2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe
2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp
2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe
2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar
2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM
2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip
2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe
2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar
2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641
2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar
2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp
2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip
2014-01-03 17:23 - 2014-01-15 22:26 - 00000000 ____D C:\Windows\Minidump
2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp
2014-01-03 16:07 - 2014-01-03 18:50 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter
2014-01-03 15:04 - 2014-01-03 15:16 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung
2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA
2014-01-02 18:36 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-02 18:36 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-02 18:32 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-02 18:32 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-02 18:31 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-02 18:31 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-02 18:31 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-02 18:18 - 2014-01-02 18:30 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA
2014-01-02 18:07 - 2013-11-14 12:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-01-02 18:07 - 2013-11-14 12:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-01-02 18:07 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-01-02 18:07 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2014-01-02 18:07 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-01-02 18:07 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-01-02 17:35 - 2014-01-02 18:37 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation
2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe
2013-12-30 20:57 - 2013-12-30 20:57 - 00860160 _____ C:\Users\Tobi\Downloads\NFBBMHSWQHY.exe
2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar
2013-12-30 16:12 - 2014-01-15 22:51 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+
2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk
2013-12-30 16:08 - 2014-01-02 15:24 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip
2013-12-30 16:02 - 2013-12-30 18:21 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Systweak
2013-12-30 16:02 - 2012-01-20 14:14 - 00018816 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2013-12-30 16:00 - 2014-01-16 15:06 - 00001342 _____ C:\Windows\Tasks\Plus-HD-5.0-updater.job
2013-12-30 16:00 - 2014-01-16 15:06 - 00001244 _____ C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job
2013-12-30 16:00 - 2014-01-16 15:06 - 00001144 _____ C:\Windows\Tasks\Plus-HD-5.0-enabler.job
2013-12-30 16:00 - 2013-12-30 16:00 - 00004346 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-updater
2013-12-30 16:00 - 2013-12-30 16:00 - 00004248 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-codedownloader
2013-12-30 16:00 - 2013-12-30 16:00 - 00004148 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-enabler
2013-12-30 15:58 - 2014-01-16 15:06 - 00002118 _____ C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job
2013-12-30 15:58 - 2014-01-16 15:06 - 00001986 _____ C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job
2013-12-30 15:58 - 2014-01-16 08:46 - 00000300 _____ C:\Windows\Tasks\FoxTab.job
2013-12-30 15:58 - 2013-12-30 16:00 - 00000000 ____D C:\Program Files (x86)\Plus-HD-5.0
2013-12-30 15:58 - 2013-12-30 15:58 - 00002638 _____ C:\Windows\System32\Tasks\FoxTab
2013-12-30 15:52 - 2013-12-30 15:52 - 00576544 _____ C:\Users\Tobi\Downloads\Setup.exe
2013-12-30 15:46 - 2013-12-30 15:47 - 01297728 _____ (Bandoo Media Inc) C:\Users\Tobi\Downloads\jZipSetup-r136-n-bc.exe
2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar
2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar
2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar
2013-12-29 20:33 - 2013-12-29 20:39 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip
2013-12-29 19:30 - 2014-01-16 15:08 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\newnext.me
2013-12-29 19:30 - 2014-01-15 18:55 - 00000000 ____D C:\Users\Tobi\AppData\Local\WeatherAlerts
2013-12-29 19:30 - 2013-12-31 15:45 - 00000000 ____D C:\Users\Tobi\AppData\Local\Mobogenie
2013-12-29 19:30 - 2013-12-30 16:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache
2013-12-29 19:30 - 2013-12-30 16:07 - 00000000 ____D C:\Users\Tobi\AppData\Local\genienext
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\Documents\Mobogenie
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\Local_Weather_LLC
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt
2013-12-29 19:28 - 2013-12-29 19:28 - 00000006 _____ C:\Users\Tobi\Downloads\password CSGO hack v2.0.txt
2013-12-29 19:25 - 2014-01-16 15:09 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job
2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update
2013-12-29 19:25 - 2013-12-29 19:25 - 00000000 ____D C:\ProgramData\WPM
2013-12-29 19:25 - 2013-12-29 19:25 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar
2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-29 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-29 19:10 - 2013-12-29 19:11 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar
2013-12-29 18:48 - 2013-12-29 19:09 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe
2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag
2013-12-25 05:19 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-12-25 05:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-25 05:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-12-25 05:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-25 05:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-25 05:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-12-25 05:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-12-25 05:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-12-25 05:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-12-25 05:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-25 05:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-25 05:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-12-25 05:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-25 05:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-12-25 05:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-25 05:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-12-25 05:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-25 05:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-12-25 05:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-25 05:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-12-25 05:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-25 05:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-12-25 05:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-25 05:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-12-25 05:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-25 05:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-12-25 05:18 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-12-25 05:18 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-12-25 05:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-25 05:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-12-25 05:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-25 05:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-12-25 05:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-25 05:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-12-25 05:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-12-25 05:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-12-25 05:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-25 05:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-12-25 05:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-12-25 05:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-25 05:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-25 05:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-12-25 05:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-12-25 05:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-25 05:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-12-25 05:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-25 05:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-12-25 05:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-25 05:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-12-25 05:18 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-25 05:18 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-12-25 05:18 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-25 05:18 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-12-25 05:18 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-25 05:18 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-12-25 05:18 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-25 05:18 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-12-25 05:18 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-25 05:18 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-12-25 05:17 - 2013-12-25 16:57 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher
2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-12-25 05:17 - 2012-06-19 13:02 - 03123272 ____R C:\Windows\SysWOW64\pbsvc.exe
2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url

==================== One Month Modified Files and Folders =======

2014-01-16 15:15 - 2014-01-16 15:15 - 00014678 _____ C:\Users\Tobi\Downloads\FRST.txt
2014-01-16 15:14 - 2014-01-16 15:14 - 00000000 ____D C:\FRST
2014-01-16 15:14 - 2014-01-16 15:12 - 02076160 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe
2014-01-16 15:12 - 2012-07-26 11:27 - 00751892 _____ C:\Windows\system32\perfh007.dat
2014-01-16 15:12 - 2012-07-26 11:27 - 00155620 _____ C:\Windows\system32\perfc007.dat
2014-01-16 15:12 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-16 15:10 - 2014-01-15 18:52 - 00000000 ____D C:\Program Files (x86)\iSafe
2014-01-16 15:09 - 2013-12-29 19:25 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job
2014-01-16 15:08 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\newnext.me
2014-01-16 15:07 - 2013-10-09 15:19 - 00000000 ____D C:\Users\Tobi\AppData\Local\Overwolf
2014-01-16 15:07 - 2013-06-18 15:05 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-16 15:06 - 2013-12-30 16:00 - 00001342 _____ C:\Windows\Tasks\Plus-HD-5.0-updater.job
2014-01-16 15:06 - 2013-12-30 16:00 - 00001244 _____ C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job
2014-01-16 15:06 - 2013-12-30 16:00 - 00001144 _____ C:\Windows\Tasks\Plus-HD-5.0-enabler.job
2014-01-16 15:06 - 2013-12-30 15:58 - 00002118 _____ C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job
2014-01-16 15:06 - 2013-12-30 15:58 - 00001986 _____ C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job
2014-01-16 15:06 - 2013-10-15 16:44 - 00000000 ____D C:\ProgramData\Kodak
2014-01-16 15:06 - 2013-09-02 14:21 - 00010161 _____ C:\autoupdate.log
2014-01-16 15:06 - 2013-06-18 21:31 - 00000000 ____D C:\Users\Tobi\AppData\Local\ESL Wire Game Client
2014-01-16 15:06 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-16 15:06 - 2013-06-18 14:50 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-16 15:06 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-16 15:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2014-01-16 08:46 - 2014-01-15 18:52 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\iSafe
2014-01-16 08:46 - 2013-12-30 15:58 - 00000300 _____ C:\Windows\Tasks\FoxTab.job
2014-01-16 08:46 - 2013-06-18 14:50 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-16 08:46 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2014-01-16 00:24 - 2013-07-01 18:09 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client
2014-01-15 23:36 - 2013-06-18 14:48 - 01387019 _____ C:\Windows\WindowsUpdate.log
2014-01-15 22:51 - 2013-12-30 16:12 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+
2014-01-15 22:26 - 2014-01-03 17:23 - 00000000 ____D C:\Windows\Minidump
2014-01-15 21:33 - 2013-08-16 00:36 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 21:33 - 2013-06-19 19:42 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 20:50 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat
2014-01-15 20:41 - 2014-01-15 20:41 - 00003320 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Windows\CD09642E061D4844BA37ED1480916404.TMP
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe
2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe
2014-01-15 20:30 - 2014-01-15 20:30 - 00669160 _____ (                                                            ) C:\Users\Tobi\Downloads\ZipOpenerSetup.exe
2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk
2014-01-15 19:34 - 2013-06-18 14:44 - 00117970 _____ C:\Windows\PFRO.log
2014-01-15 18:55 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\WeatherAlerts
2014-01-15 18:53 - 2014-01-15 18:52 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber
2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk
2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log
2014-01-15 18:52 - 2013-06-18 14:53 - 00002367 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-15 18:52 - 2013-06-18 14:48 - 00001646 _____ C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe
2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp
2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe
2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar
2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM
2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip
2014-01-09 09:02 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-09 09:02 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-08 16:08 - 2013-06-18 14:54 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3804308072-1049083099-4122200610-1001
2014-01-05 22:11 - 2013-12-03 15:01 - 00000000 ____D C:\Users\Tobi\Desktop\Tattoo
2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe
2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar
2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641
2014-01-04 17:32 - 2012-07-26 08:21 - 00111528 _____ C:\Windows\setupact.log
2014-01-04 17:31 - 2013-09-01 16:53 - 00131312 _____ C:\Windows\DPINST.LOG
2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar
2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp
2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip
2014-01-03 18:50 - 2014-01-03 16:07 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter
2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp
2014-01-03 15:16 - 2014-01-03 15:04 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung
2014-01-02 19:22 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2014-01-02 18:37 - 2014-01-02 17:35 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation
2014-01-02 18:37 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA
2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-02 18:30 - 2014-01-02 18:18 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA
2014-01-02 18:07 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help
2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-02 15:24 - 2013-12-30 16:08 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2014-01-02 15:24 - 2013-06-18 14:48 - 00000000 ___RD C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-02 15:12 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi\AppData\Local\VirtualStore
2014-01-01 18:24 - 2013-07-02 22:03 - 00000779 _____ C:\Users\Public\Desktop\ESL Wire.lnk
2014-01-01 18:24 - 2013-07-02 22:03 - 00000000 ____D C:\Program Files\EslWire
2013-12-31 15:45 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\Mobogenie
2013-12-31 02:58 - 2013-12-03 14:28 - 00032256 ___SH C:\Users\Tobi\Downloads\Thumbs.db
2013-12-31 02:58 - 2013-10-09 19:03 - 00043520 ___SH C:\Users\Tobi\Desktop\Thumbs.db
2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe
2013-12-30 20:57 - 2013-12-30 20:57 - 00860160 _____ C:\Users\Tobi\Downloads\NFBBMHSWQHY.exe
2013-12-30 18:21 - 2013-12-30 16:02 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Systweak
2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-30 16:27 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache
2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar
2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk
2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip
2013-12-30 16:07 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\genienext
2013-12-30 16:00 - 2013-12-30 16:00 - 00004346 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-updater
2013-12-30 16:00 - 2013-12-30 16:00 - 00004248 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-codedownloader
2013-12-30 16:00 - 2013-12-30 16:00 - 00004148 _____ C:\Windows\System32\Tasks\Plus-HD-5.0-enabler
2013-12-30 16:00 - 2013-12-30 15:58 - 00000000 ____D C:\Program Files (x86)\Plus-HD-5.0
2013-12-30 15:58 - 2013-12-30 15:58 - 00002638 _____ C:\Windows\System32\Tasks\FoxTab
2013-12-30 15:52 - 2013-12-30 15:52 - 00576544 _____ C:\Users\Tobi\Downloads\Setup.exe
2013-12-30 15:47 - 2013-12-30 15:46 - 01297728 _____ (Bandoo Media Inc) C:\Users\Tobi\Downloads\jZipSetup-r136-n-bc.exe
2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar
2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar
2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar
2013-12-29 20:39 - 2013-12-29 20:33 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\Documents\Mobogenie
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\Local_Weather_LLC
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt
2013-12-29 19:30 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi
2013-12-29 19:28 - 2013-12-29 19:28 - 00000006 _____ C:\Users\Tobi\Downloads\password CSGO hack v2.0.txt
2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update
2013-12-29 19:25 - 2013-12-29 19:25 - 00000000 ____D C:\ProgramData\WPM
2013-12-29 19:25 - 2013-12-29 19:25 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar
2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-29 19:11 - 2013-12-29 19:10 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar
2013-12-29 19:09 - 2013-12-29 18:48 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe
2013-12-25 16:57 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher
2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag
2013-12-25 05:18 - 2013-06-19 09:24 - 00026816 _____ C:\Windows\DirectX.log
2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url

Some content of TEMP:
====================
C:\Users\Tobi\AppData\Local\Temp\5844uninstall.exe
C:\Users\Tobi\AppData\Local\Temp\APNSetup.exe
C:\Users\Tobi\AppData\Local\Temp\avgnt.exe
C:\Users\Tobi\AppData\Local\Temp\BackupSetup.exe
C:\Users\Tobi\AppData\Local\Temp\EslWireSetup-1.17.1.7657-x64.exe
C:\Users\Tobi\AppData\Local\Temp\EslWireSetup-1.17.2.7687-x64.exe
C:\Users\Tobi\AppData\Local\Temp\EslWireSetup-1.17.3.7769-x64.exe
C:\Users\Tobi\AppData\Local\Temp\geek_x64.exe
C:\Users\Tobi\AppData\Local\Temp\GPUTemp.exe
C:\Users\Tobi\AppData\Local\Temp\ICReinstall_nsp5242.tmp.exe
C:\Users\Tobi\AppData\Local\Temp\ICReinstall_Setup.exe
C:\Users\Tobi\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\Tobi\AppData\Local\Temp\nsc6BE3.exe
C:\Users\Tobi\AppData\Local\Temp\nsh6AC9.exe
C:\Users\Tobi\AppData\Local\Temp\nsk79B0.exe
C:\Users\Tobi\AppData\Local\Temp\nsoFE71.exe
C:\Users\Tobi\AppData\Local\Temp\nstFD57.exe
C:\Users\Tobi\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Tobi\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Tobi\AppData\Local\Temp\nvStInst.exe
C:\Users\Tobi\AppData\Local\Temp\OpenCL.dll
C:\Users\Tobi\AppData\Local\Temp\prefetch.exe
C:\Users\Tobi\AppData\Local\Temp\presetup.exe
C:\Users\Tobi\AppData\Local\Temp\SearchProtectINT.exe
C:\Users\Tobi\AppData\Local\Temp\Setup1.exe
C:\Users\Tobi\AppData\Local\Temp\setup__1567.exe
C:\Users\Tobi\AppData\Local\Temp\SHSetup.exe
C:\Users\Tobi\AppData\Local\Temp\Sqlite3.dll
C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe
C:\Users\Tobi\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Tobi\AppData\Local\Temp\wupdater.exe
C:\Users\Tobi\AppData\Local\Temp\x2blapi.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-08 03:00

==================== End Of Log ============================
         

--- --- ---
--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2014 03
Ran by Tobi at 2014-01-16 15:15:32
Running from C:\Users\Tobi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

aioprnt (Version: 5.3.1.0 - Eastman Kodak Company) Hidden
aioscnnr (x32 Version: 5.8.10.0 - Your Company Name) Hidden
aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden
Assassin's Creed IV Black Flag (x32 Version:  - Ubisoft)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
center (x32 Version: 7.7.2.0 - Eastman Kodak Company) Hidden
Classic Shell (Version: 3.6.7 - IvoSoft)
Counter-Strike: Global Offensive (x32 Version:  - Valve)
Creative Sound Blaster Properties x64 Edition (x32 Version:  - )
DesktopWeatherAlerts (HKCU Version: 1.0.13.0 - Local Weather LLC)
ESL Wire 1.17.3 (Version:  - Turtle Entertainment GmbH)
essentials (x32 Version: 7.7.2.0 - Eastman Kodak Company) Hidden
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (x32 Version: 32.0.1700.72 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GPU Monitor (x32 Version: 11.041.44 - GPU Usage) <==== ATTENTION
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kodak AIO Printer (Version: 7.7.2.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (x32 Version: 7.7.6.0 - Eastman Kodak Company)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MSI Afterburner 2.3.1 (x32 Version: 2.3.1 - MSI Co., LTD)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation)
ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden
Overwolf (x32 Version: 0.47.284 - Overwolf)
Overwolf.Setup.VC100CRTx64.Dist (Version: 1.0.0 - Overwolf)
Plus-HD-5.0 (x32 Version: 1.31.153.3 - Plus HD) <==== ATTENTION
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (x32 Version: 1.0.0.9282 - RocketLife Inc.)
PunkBuster Services (x32 Version: 0.991 - Even Balance, Inc.)
Razer Game Booster (x32 Version: 3.7 - Razer USA Ltd)
Razer Surround (x32 Version: 1.05.00 - Razer Inc.)
Razer Synapse 2.0 (x32 Version: 1.16.6 - Razer Inc.)
Re-Markable (x32 Version:  - Re-Markable Software)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
SpyHunter (Version: 4.16.5.4290 - Enigma Software Group USA, LLC)
Stardock Start8 (x32 Version: 1.16 - Stardock Software, Inc.)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
SteelSeries Engine (Version: 2.8.59.30483 - SteelSeries)
TeamSpeak 3 Client (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Uplay (x32 Version: 4.0 - Ubisoft)
VLC media player 2.0.1 (x32 Version: 2.0.1 - VideoLAN)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
WPM17.8.0.3159 (x32 Version: 17.8.0.3159 - Cherished Technololgy LIMITED) <==== ATTENTION
YAC (x32 Version:  - ELEX DO BRASIL PARTICIPAÇÕES LTDA)

==================== Restore Points  =========================

15-01-2014 20:32:52 Windows Update

==================== Hosts content: ==========================

2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0431213B-035A-4952-BE14-0FC8135EA52C} - System32\Tasks\Plus-HD-5.0-updater => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe [2013-12-30] (Plus HD) <==== ATTENTION
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2EF75021-6B4A-49DA-8685-E5AF6D4C1FB7} - System32\Tasks\Plus-HD-5.0-enabler => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe [2013-12-30] (Plus HD) <==== ATTENTION
Task: {523095BE-013D-4432-98C3-DDAAA102549C} - System32\Tasks\Plus-HD-5.0-chromeinstaller => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe [2013-12-30] (Plus HD) <==== ATTENTION
Task: {6474088C-3800-4F7E-A975-3DEFA1849154} - System32\Tasks\Plus-HD-5.0-firefoxinstaller => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe [2013-12-30] (Plus HD) <==== ATTENTION
Task: {81FB4BA7-D1F2-408A-A611-9FD5B475FB8B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-18] (Google Inc.)
Task: {9029507F-2921-4CB6-B860-712113CE3446} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {9DEAA037-9FD2-4C66-A1DB-CB1E015A88F1} - System32\Tasks\Razer_Game_Booster_AutoUpdate => E:\Program Files (x86)\Razer Game Booster\AutoUpdate.exe [2013-06-05] ()
Task: {A242208A-D2A8-4DE1-88D0-0B8BE5248330} - System32\Tasks\Re-Markable Update => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe [2013-12-29] ()
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {A7BC554B-B7CF-4C27-AD05-FC728FC17814} - System32\Tasks\Plus-HD-5.0-codedownloader => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe [2013-12-30] (Plus HD) <==== ATTENTION
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {DD9888C9-CF48-4A6F-BAA0-EBA7AB404E41} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-18] (Google Inc.)
Task: {DF2640C1-EBF2-4851-96C1-1D0B85379C69} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2013-10-18] (Enigma Software Group USA, LLC.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F169BD48-A55D-493F-87AA-B3D621904A7D} - System32\Tasks\FoxTab => C:\Users\Tobi\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {F858D828-BA57-4634-B676-FB6F02CBB286} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION
Task: C:\Windows\Tasks\FoxTab.job => C:\Users\Tobi\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-5.0-enabler.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-5.0-updater.job => C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Re-Markable Update.job => C:\Program Files (x86)\Re-Markable\ReMarkableup.exe

==================== Loaded Modules (whitelisted) =============

2013-12-09 12:08 - 2013-12-09 12:08 - 00045608 _____ () C:\Program Files (x86)\Overwolf\x64\OWExplorer-20125.dll
2013-09-01 18:44 - 2012-08-01 14:44 - 00139024 _____ () E:\Program Files (x86)\Razer Game Booster\GBV3ContextMenu.dll
2013-07-02 22:03 - 2013-06-11 10:52 - 02868736 _____ () C:\Program Files\EslWire\QtCore4.dll
2013-07-02 22:03 - 2013-06-11 10:52 - 10445824 _____ () C:\Program Files\EslWire\QtGui4.dll
2013-07-02 22:03 - 2013-06-11 10:52 - 14672896 _____ () C:\Program Files\EslWire\QtWebKit4.dll
2013-07-02 22:03 - 2013-12-09 11:42 - 08660992 _____ () C:\Program Files\EslWire\WireCore.dll
2013-07-02 22:03 - 2013-06-11 10:52 - 00348160 _____ () C:\Program Files\EslWire\phonon4.dll
2013-07-02 22:03 - 2013-06-11 10:52 - 01277440 _____ () C:\Program Files\EslWire\QtNetwork4.dll
2013-07-02 22:03 - 2013-06-11 10:52 - 00503296 _____ () C:\Program Files\EslWire\QtDBus4.dll
2013-07-02 22:03 - 2013-06-11 10:51 - 00799744 _____ () C:\Program Files\EslWire\QtSql4.dll
2013-07-02 22:03 - 2013-07-09 12:12 - 00214016 _____ () C:\Program Files\EslWire\NocIPC64.dll
2013-07-02 22:03 - 2013-12-09 11:40 - 00606208 _____ () C:\Program Files\EslWire\Linesman.dll
2013-07-02 22:03 - 2013-06-11 10:52 - 00454656 _____ () C:\Program Files\EslWire\QtXml4.dll
2013-07-02 22:03 - 2013-06-11 10:51 - 00032768 _____ () C:\Program Files\EslWire\imageformats\qgif4.dll
2013-07-02 22:03 - 2013-06-11 10:51 - 00237056 _____ () C:\Program Files\EslWire\imageformats\qjpeg4.dll
2013-07-02 22:03 - 2013-06-11 10:51 - 00278528 _____ () C:\Program Files\EslWire\imageformats\qmng4.dll
2013-07-02 22:03 - 2013-07-09 12:12 - 00310272 _____ () C:\Program Files\EslWire\laginspect\laginspect.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00665088 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineLib.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00175104 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DBUtils.dll
2013-08-29 21:58 - 2013-08-29 21:58 - 00089915 _____ () C:\Users\Tobi\AppData\Local\Temp\70aeaca4-098f-4bcc-b0fa-e2544fb40678\CliSecureRT64.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00278528 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DriverCommunication.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00139776 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\ISSPlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00148480 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Localization.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00145408 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Utilities.dll
2013-01-10 06:46 - 2013-01-10 06:46 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\x2api.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 09519104 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineWinGui.dll
2013-01-10 06:46 - 2013-01-10 06:46 - 01102336 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\System.Data.SQLite.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00209408 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CustomWPFColorPicker.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00349696 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MousePlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00171008 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\D3MousePlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00173568 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\KKMousePlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00171008 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SRawPlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00307200 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MLGSenseiPlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00154624 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWGoldPlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\GW2MousePlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00169472 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CSGOMousePlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DOTA2MousePlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00157184 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWWirelessPlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CODMousePlugin.dll
2013-07-12 15:57 - 2013-07-12 15:57 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoTMousePlugin.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00039464 _____ () C:\Program Files (x86)\Overwolf\x64\OWLog.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00721960 _____ () C:\Program Files (x86)\Overwolf\x64\OWExplorerLauncher.dll
2014-01-15 18:52 - 2013-12-02 07:56 - 00176976 _____ () C:\Program Files (x86)\iSafe\tws\unrar.dll
2014-01-15 18:52 - 2013-12-02 07:56 - 00068432 _____ () C:\Program Files (x86)\iSafe\tws\zlib1.dll
2014-01-15 18:52 - 2013-12-12 03:28 - 00087744 _____ () C:\Program Files (x86)\iSafe\tws\unacev2.dll
2013-12-29 19:11 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-15 18:52 - 2014-01-09 10:43 - 00185000 _____ () C:\Program Files (x86)\iSafe\libpng.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00079400 _____ () C:\Program Files (x86)\Overwolf\OWExplorer-20125.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00015288 _____ () C:\Program Files (x86)\Overwolf\ODK.AddIns.V2.HostView.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00134696 _____ () C:\Program Files (x86)\Overwolf\OWService.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00970792 _____ () C:\Program Files (x86)\Overwolf\OWServer.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00038440 _____ () C:\Program Files (x86)\Overwolf\OWLog.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00839720 _____ () C:\Program Files (x86)\Overwolf\OWAgent.dll
2013-12-09 12:08 - 2013-12-09 12:08 - 00029224 _____ () C:\Program Files (x86)\Overwolf\OWExplorerLauncher.dll
2014-01-08 07:16 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-01-08 07:16 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files (x86)\Steam\libavutil-52.dll
2013-05-06 16:05 - 2013-12-12 23:04 - 00716800 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-06-06 13:06 - 2014-01-07 22:00 - 01138088 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-03-26 15:16 - 2013-12-12 23:04 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2014-01-08 01:25 - 2014-01-07 05:04 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\libglesv2.dll
2014-01-08 01:25 - 2014-01-07 05:04 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\libegl.dll
2014-01-08 01:25 - 2014-01-07 05:05 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\pdf.dll
2014-01-08 01:25 - 2014-01-07 05:05 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll
2014-01-08 01:25 - 2014-01-07 05:04 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\ffmpegsumo.dll
2014-01-08 01:25 - 2014-01-07 05:05 - 13615896 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.72\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Event log errors: =========================

Could not start eventlog service, could not read events.

Der angeforderte Dienst wurde bereits gestartet.

Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben.


==================== Memory info =========================== 

Percentage of memory in use: 19%
Total physical RAM: 16346.33 MB
Available physical RAM: 13238.96 MB
Total Pagefile: 32730.33 MB
Available Pagefile: 29118.67 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:55.38 GB) (Free:5.46 GB) NTFS
Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: () (Fixed) (Total:931.41 GB) (Free:266.29 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 629ACFEB)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 56 GB) (Disk ID: 324C9AF7)

Partition: GPT Partition Type
==================== End Of Log ============================
         

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Sorry das ich mich erst jetzt melde war übers Wochenende nicht Zuhause.

Also Hier der Scan.
Der Rechner hängt sich im Moment bei allen möglichen Anwendungen auf.

ComboFix 14-01-16.03 - Tobi 19.01.2014  18:06:08.1.4 - x64
Microsoft Windows 8 Pro  6.2.9200.0.1252.49.1031.18.16346.13673 [GMT 1:00]
ausgeführt von:: c:\users\Tobi\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Outdated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Avira Desktop *Disabled/Outdated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Re-Markable\150.dll
c:\users\Tobi\AppData\Local\Temp\70aeaca4-098f-4bcc-b0fa-e2544fb40678\CliSecureRT64.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-12-19 bis 2014-01-19  ))))))))))))))))))))))))))))))
.
.
2014-01-19 17:15 . 2014-01-19 17:15	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-01-16 14:14 . 2014-01-16 14:14	--------	d-----w-	C:\FRST
2014-01-15 19:53 . 2013-10-31 05:56	915968	----a-w-	c:\windows\system32\MPSSVC.dll
2014-01-15 19:53 . 2013-10-31 05:56	758784	----a-w-	c:\windows\system32\FirewallAPI.dll
2014-01-15 19:53 . 2013-10-31 04:01	550400	----a-w-	c:\windows\SysWow64\FirewallAPI.dll
2014-01-15 19:53 . 2013-10-31 03:42	74752	----a-w-	c:\windows\system32\drivers\mpsdrv.sys
2014-01-15 19:53 . 2013-10-28 05:50	588288	----a-w-	c:\windows\system32\SHCore.dll
2014-01-15 19:53 . 2013-10-28 04:05	452608	----a-w-	c:\windows\SysWow64\SHCore.dll
2014-01-15 19:53 . 2013-10-13 20:49	100696	----a-w-	c:\windows\system32\drivers\disk.sys
2014-01-15 19:53 . 2013-08-27 05:21	227840	----a-w-	c:\windows\system32\WebClnt.dll
2014-01-15 19:53 . 2013-08-27 05:19	104448	----a-w-	c:\windows\system32\davclnt.dll
2014-01-15 19:53 . 2013-08-26 22:29	199168	----a-w-	c:\windows\SysWow64\WebClnt.dll
2014-01-15 19:53 . 2013-08-26 22:28	86016	----a-w-	c:\windows\SysWow64\davclnt.dll
2014-01-15 19:41 . 2012-06-22 10:01	22704	----a-w-	c:\windows\system32\drivers\EsgScanner.sys
2014-01-15 19:41 . 2014-01-15 19:41	110080	----a-r-	c:\users\Tobi\AppData\Roaming\Microsoft\Installer\{CD09642E-061D-4844-BA37-ED1480916404}\IconF7A21AF7.exe
2014-01-15 19:41 . 2014-01-15 19:41	110080	----a-r-	c:\users\Tobi\AppData\Roaming\Microsoft\Installer\{CD09642E-061D-4844-BA37-ED1480916404}\IconD7F16134.exe
2014-01-15 19:41 . 2014-01-15 19:41	110080	----a-r-	c:\users\Tobi\AppData\Roaming\Microsoft\Installer\{CD09642E-061D-4844-BA37-ED1480916404}\Icon1226A4C5.exe
2014-01-15 19:41 . 2014-01-15 19:41	--------	d-----w-	C:\sh4ldr
2014-01-15 19:41 . 2014-01-15 19:41	--------	d-----w-	c:\program files\Enigma Software Group
2014-01-15 19:41 . 2014-01-15 19:41	--------	d-----w-	c:\program files (x86)\Common Files\Wise Installation Wizard
2014-01-15 19:32 . 2014-01-15 19:33	--------	d-----w-	c:\users\Tobi\AppData\Roaming\Geek Uninstaller
2014-01-15 17:52 . 2014-01-15 17:53	--------	d-----w-	c:\users\Tobi\AppData\Roaming\eCyber
2014-01-15 17:52 . 2014-01-15 17:52	--------	d-----w-	c:\windows\system32\log
2014-01-15 17:52 . 2014-01-19 17:03	--------	d-----w-	c:\program files (x86)\iSafe
2014-01-15 17:52 . 2014-01-16 07:46	--------	d-----w-	c:\users\Tobi\AppData\Roaming\iSafe
2014-01-15 17:32 . 2014-01-15 17:32	--------	d-----w-	c:\users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
2014-01-13 16:11 . 2014-01-13 16:11	--------	d-----w-	c:\users\Tobi\AppData\Local\DM
2014-01-04 16:32 . 2014-01-04 16:32	--------	d-----w-	c:\programdata\RzMaelstromVAD_1.1.49.1641
2014-01-02 17:36 . 2013-12-05 08:42	39200	----a-w-	c:\windows\system32\drivers\nvvad64v.sys
2014-01-02 17:36 . 2013-12-05 08:42	32544	----a-w-	c:\windows\SysWow64\nvaudcap32v.dll
2014-01-02 17:36 . 2014-01-02 17:36	--------	d-----w-	c:\users\Tobi\AppData\Local\NVIDIA
2014-01-02 17:32 . 2013-12-10 02:13	982232	----a-w-	c:\windows\SysWow64\nvspcap.dll
2014-01-02 17:32 . 2013-12-10 02:13	1100248	----a-w-	c:\windows\system32\nvspcap64.dll
2014-01-02 17:32 . 2014-01-02 17:32	--------	d-----w-	c:\program files (x86)\AGEIA Technologies
2014-01-02 17:10 . 2014-01-02 17:10	--------	d-----w-	c:\users\Tobi\AppData\Roaming\NVIDIA
2014-01-02 17:07 . 2013-11-11 15:02	6674208	----a-w-	c:\windows\system32\nvcpl.dll
2014-01-02 17:07 . 2013-11-11 15:02	3490080	----a-w-	c:\windows\system32\nvsvc64.dll
2014-01-02 17:07 . 2013-11-11 15:01	922912	----a-w-	c:\windows\system32\nvvsvc.exe
2014-01-02 17:07 . 2013-11-11 15:01	63776	----a-w-	c:\windows\system32\nvshext.dll
2014-01-02 17:07 . 2013-11-11 15:01	2559776	----a-w-	c:\windows\system32\nvsvcr.dll
2014-01-02 17:07 . 2013-11-11 15:01	219424	----a-w-	c:\windows\system32\nvmctray.dll
2014-01-02 17:07 . 2013-11-11 15:01	3467927	----a-w-	c:\windows\system32\nvcoproc.bin
2014-01-02 17:07 . 2013-11-14 11:56	61216	----a-w-	c:\windows\system32\OpenCL.dll
2014-01-02 17:07 . 2013-11-14 11:56	53024	----a-w-	c:\windows\SysWow64\OpenCL.dll
2014-01-02 16:35 . 2014-01-02 17:37	--------	d-----w-	c:\users\Tobi\AppData\Local\NVIDIA Corporation
2013-12-30 17:20 . 2013-12-30 17:20	--------	d-----w-	c:\windows\system32\appmgmt
2013-12-30 15:12 . 2014-01-15 21:51	--------	d-----w-	c:\program files (x86)\VLC Player GPU+
2013-12-30 15:08 . 2014-01-02 14:24	--------	d-----w-	c:\program files (x86)\MyPC Backup
2013-12-30 15:02 . 2013-12-30 17:21	--------	d-----w-	c:\users\Tobi\AppData\Roaming\Systweak
2013-12-30 15:02 . 2012-01-20 13:14	18816	----a-w-	c:\windows\system32\roboot64.exe
2013-12-30 14:58 . 2013-12-30 15:00	--------	d-----w-	c:\program files (x86)\Plus-HD-5.0
2013-12-29 18:30 . 2013-12-29 18:30	--------	d-----w-	c:\users\Tobi\AppData\Local\Local_Weather_LLC
2013-12-29 18:30 . 2014-01-15 17:55	--------	d-----w-	c:\users\Tobi\AppData\Local\WeatherAlerts
2013-12-29 18:30 . 2013-12-29 18:30	--------	d-----w-	c:\users\Tobi\.android
2013-12-29 18:30 . 2014-01-19 17:04	--------	d-----w-	c:\users\Tobi\AppData\Roaming\newnext.me
2013-12-29 18:30 . 2013-12-31 14:45	--------	d-----w-	c:\users\Tobi\AppData\Local\Mobogenie
2013-12-29 18:30 . 2013-12-30 15:27	--------	d-----w-	c:\users\Tobi\AppData\Local\cache
2013-12-29 18:30 . 2013-12-30 15:07	--------	d-----w-	c:\users\Tobi\AppData\Local\genienext
2013-12-29 18:25 . 2014-01-19 17:15	--------	d-----w-	c:\program files (x86)\Re-Markable
2013-12-29 18:25 . 2013-12-29 18:25	--------	d-----w-	c:\programdata\WPM
2013-12-29 18:11 . 2013-12-29 18:11	--------	d-----w-	c:\users\Tobi\AppData\Roaming\Avira
2013-12-29 18:11 . 2013-12-09 10:37	84720	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2013-12-29 18:11 . 2013-12-09 10:37	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2013-12-29 18:11 . 2013-12-09 10:37	131576	----a-w-	c:\windows\system32\drivers\avipbb.sys
2013-12-29 18:11 . 2013-12-09 10:37	108440	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2013-12-29 18:11 . 2013-12-29 18:11	--------	d-----w-	c:\programdata\Avira
2013-12-29 18:11 . 2013-12-29 18:11	--------	d-----w-	c:\program files (x86)\Avira
2013-12-29 11:08 . 2013-12-04 03:28	10315576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{68A36410-2469-40C4-8BCB-C199CCF1CE32}\mpengine.dll
2013-12-25 04:18 . 2008-10-15 05:22	5631312	----a-w-	c:\windows\system32\D3DX9_40.dll
2013-12-25 04:17 . 2013-12-25 04:17	75136	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
2013-12-25 04:17 . 2013-12-25 04:17	189248	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2013-12-25 04:17 . 2012-06-19 12:02	3123272	----a-r-	c:\windows\SysWow64\pbsvc.exe
2013-12-25 04:17 . 2013-12-25 15:57	--------	d-----w-	c:\users\Tobi\AppData\Local\Ubisoft Game Launcher
2013-12-25 04:17 . 2013-12-25 04:17	--------	d-----w-	c:\program files (x86)\Ubisoft
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-15 20:33 . 2013-06-19 18:42	86054176	----a-w-	c:\windows\system32\MRT.exe
2014-01-09 08:02 . 2012-07-26 08:14	78296	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-09 08:02 . 2012-07-26 08:14	694240	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-02 17:08 . 2013-07-02 21:24	184968	----a-w-	c:\windows\system32\drivers\ESLWireACD.sys
2013-11-27 21:51 . 2013-11-27 21:51	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-11-21 09:59 . 2013-11-21 09:59	40696	----a-w-	c:\windows\system32\drivers\RzMaelstromVAD.sys
2013-11-21 09:56 . 2013-11-21 09:56	245760	----a-w-	c:\windows\system32\DriverInstallCACMD.exe
2013-11-21 09:56 . 2013-11-21 09:56	69632	----a-w-	c:\windows\system32\DriverInstallCA.dll
2013-11-19 10:21 . 2013-06-19 18:49	267936	------w-	c:\windows\system32\MpSigStub.exe
2013-11-15 06:37 . 2013-11-15 06:37	39080	----a-w-	c:\windows\system32\drivers\rzendpt.sys
2013-11-15 06:37 . 2013-11-15 06:37	149160	----a-w-	c:\windows\system32\drivers\rzudd.sys
2013-11-15 06:32 . 2013-11-15 06:32	57344	----a-w-	c:\windows\SysWow64\rzdevinfo.dll
2013-11-15 06:32 . 2013-11-15 06:32	154112	----a-w-	c:\windows\SysWow64\rztouchdll.dll
2013-11-15 06:31 . 2013-11-15 06:31	834560	----a-w-	c:\windows\SysWow64\rzdevicedll.dll
2013-11-15 06:31 . 2013-11-15 06:31	296448	----a-w-	c:\windows\SysWow64\rzaudiodll.dll
2013-11-15 06:31 . 2013-11-15 06:31	117248	----a-w-	c:\windows\SysWow64\rzdisplaydll.dll
2013-11-14 11:56 . 2013-09-24 16:30	18293608	----a-w-	c:\windows\system32\nvwgf2umx.dll
2013-11-14 11:56 . 2013-09-24 16:30	1436528	----a-w-	c:\windows\system32\nvumdshimx.dll
2013-11-14 11:56 . 2013-09-24 16:30	18208624	----a-w-	c:\windows\system32\nvd3dumx.dll
2013-11-14 11:56 . 2013-09-24 16:30	15218504	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2013-11-14 11:56 . 2013-09-24 16:30	3069608	----a-w-	c:\windows\system32\nvapi64.dll
2013-11-14 11:56 . 2013-09-24 16:30	2697248	----a-w-	c:\windows\SysWow64\nvapi.dll
2013-11-11 07:59 . 2013-11-11 07:59	590112	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2013-11-06 23:18 . 2013-12-11 09:43	4036608	----a-w-	c:\windows\system32\win32k.sys
2013-10-28 00:12 . 2013-10-28 00:12	204568	----a-w-	c:\windows\system32\drivers\ssudmdm.sys
2013-10-28 00:12 . 2013-10-28 00:12	107288	----a-w-	c:\windows\system32\drivers\ssudbus.sys
2013-10-25 06:19 . 2013-12-11 09:50	51712	----a-w-	c:\windows\system32\ie4uinit.exe
2013-10-25 06:19 . 2013-12-11 09:50	2241536	----a-w-	c:\windows\system32\wininet.dll
2013-10-25 06:19 . 2013-12-11 09:50	915968	----a-w-	c:\windows\system32\uxtheme.dll
2013-10-25 06:19 . 2013-12-11 09:50	1365504	----a-w-	c:\windows\system32\urlmon.dll
2013-10-25 06:18 . 2013-12-11 09:50	19271168	----a-w-	c:\windows\system32\mshtml.dll
2013-10-25 06:18 . 2013-12-11 09:50	603136	----a-w-	c:\windows\system32\msfeeds.dll
2013-10-25 06:17 . 2013-12-11 09:50	855552	----a-w-	c:\windows\system32\jscript.dll
2013-10-25 06:17 . 2013-12-11 09:50	3959808	----a-w-	c:\windows\system32\jscript9.dll
2013-10-25 06:17 . 2013-12-11 09:50	2648576	----a-w-	c:\windows\system32\iertutil.dll
2013-10-25 06:17 . 2013-12-11 09:50	15404032	----a-w-	c:\windows\system32\ieframe.dll
2013-10-25 04:45 . 2013-12-11 09:50	1767936	----a-w-	c:\windows\SysWow64\wininet.dll
2013-10-25 04:43 . 2013-12-11 09:50	2877952	----a-w-	c:\windows\SysWow64\jscript9.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110411771118}]
2013-12-30 15:00	644968	----a-w-	c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{F6C07882-D703-4DD5-905A-2C4E815A5066}]
2014-01-15 17:32	115712	----a-w-	c:\users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]
@="{594D4122-1F87-41E2-96C7-825FB4796516}"
[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]
2013-04-12 21:28	611840	----a-w-	c:\program files\Classic Shell\ClassicExplorer32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2014-01-07 1815464]
"ESL Wire"="c:\program files\EslWire\wire.exe" [2013-12-09 4253696]
"SteelSeries Engine"="c:\program files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe" [2013-07-12 242688]
"Overwolf"="c:\program files (x86)\Overwolf\Overwolf.exe" [2013-12-09 35768]
"NextLive"="c:\users\Tobi\AppData\Roaming\newnext.me\nengine.dll" [2013-11-14 1283584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2013-11-17 442712]
"EKStatusMonitor"="c:\program files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe" [2013-01-15 2750840]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-09 684600]
.
c:\users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
DesktopWeatherAlerts.lnk - c:\users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp.exe [2013-11-13 546304]
Weather Alerts.lnk - c:\users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe /restart [2013-11-13 166072]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 EsgScanner;EsgScanner;c:\windows\system32\DRIVERS\EsgScanner.sys;c:\windows\SYSNATIVE\DRIVERS\EsgScanner.sys [x]
R2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x]
R3 cpuz136;cpuz136;c:\users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys;c:\users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 danewFltr;NewDeathAdder Mouse;c:\windows\system32\drivers\danew.sys;c:\windows\SYSNATIVE\drivers\danew.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
R3 SAlphamHid;SteelHIDSvc;c:\windows\System32\drivers\SAlpham64.sys;c:\windows\SYSNATIVE\drivers\SAlpham64.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 VKbms;Razer Gaming Device;c:\windows\System32\drivers\VKbms.sys;c:\windows\SYSNATIVE\drivers\VKbms.sys [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;e:\program files (x86)\Razer Game Booster\Driver\WinRing0x64.sys;e:\program files (x86)\Razer Game Booster\Driver\WinRing0x64.sys [x]
R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
R4 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S0 ESLWireAC;ESLWireAC;c:\windows\system32\drivers\ESLWireACD.sys;c:\windows\SYSNATIVE\drivers\ESLWireACD.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 iSafeNetFilter;iSafeNetFilter;c:\program files (x86)\iSafe\iSafeNetFilter.sys;c:\program files (x86)\iSafe\iSafeNetFilter.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 EslWireHelper;ESL Wire Helper Service;c:\program files\EslWire\service\WireHelperSvc.exe;c:\program files\EslWire\service\WireHelperSvc.exe [x]
S2 iSafeService;iSafeService;c:\program files (x86)\iSafe\iSafeSvc.exe;c:\program files (x86)\iSafe\iSafeSvc.exe [x]
S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe [x]
S2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 RzMaelstromVADStreamingService;Razer Surround Audio Service;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [x]
S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]
S2 Start8;Stardock Start8;c:\program files (x86)\Stardock\Start8\Start8Srv.exe;c:\program files (x86)\Stardock\Start8\Start8Srv.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 busenum;SteelBusSvc;c:\windows\System32\drivers\SteelBus64.sys;c:\windows\SYSNATIVE\drivers\SteelBus64.sys [x]
S3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 iSafeKrnl;iSafeKrnl;c:\program files (x86)\iSafe\iSafeKrnl.sys;c:\program files (x86)\iSafe\iSafeKrnl.sys [x]
S3 L1C;NDIS-Miniporttreiber für den PCI-E-Ethernetcontroller Qualcomm Atheros AR813x/AR815x;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 rzendpt;rzendpt;c:\windows\System32\drivers\rzendpt.sys;c:\windows\SYSNATIVE\drivers\rzendpt.sys [x]
S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE\drivers\RzMaelstromVAD.sys [x]
S3 rzudd;Razer Mouse Driver;c:\windows\System32\drivers\rzudd.sys;c:\windows\SYSNATIVE\drivers\rzudd.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-01-16 14:25	1211672	----a-w-	c:\program files (x86)\Google\Chrome\Application\32.0.1700.76\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-18 13:50]
.
2014-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-18 13:50]
.
2014-01-19 c:\windows\Tasks\Plus-HD-5.0-chromeinstaller.job
- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe [2013-12-30 14:58]
.
2014-01-19 c:\windows\Tasks\Plus-HD-5.0-codedownloader.job
- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe [2013-12-30 14:58]
.
2014-01-19 c:\windows\Tasks\Plus-HD-5.0-enabler.job
- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe [2013-12-30 15:00]
.
2014-01-19 c:\windows\Tasks\Plus-HD-5.0-firefoxinstaller.job
- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe [2013-12-30 14:58]
.
2014-01-19 c:\windows\Tasks\Plus-HD-5.0-updater.job
- c:\program files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe [2013-12-30 15:00]
.
2014-01-19 c:\windows\Tasks\Re-Markable Update.job
- c:\program files (x86)\Re-Markable\ReMarkableup.exe [2013-12-29 18:25]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]
@="{594D4122-1F87-41E2-96C7-825FB4796516}"
[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]
2013-04-12 21:28	742400	----a-w-	c:\program files\Classic Shell\ClassicExplorer64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe" [2012-10-08 3182080]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-14 1028384]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 2279712]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mDefault_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
mDefault_Page_URL = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
TCP: DhcpNameServer = 217.68.161.141 217.68.161.171
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{f5ce6d93-1111-4c9f-899d-01d1c6a8f798} - c:\program files (x86)\Re-Markable\150.dll
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-UsageTemp - c:\users\Tobi\AppData\Local\Temp\UsageTemp.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-VLC Player GPU+11.041.44 - c:\program files (x86)\VLC Player GPU+\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Zeit der Fertigstellung: 2014-01-19  18:22:37
ComboFix-quarantined-files.txt  2014-01-19 17:22
.
Vor Suchlauf: 6.983.307.264 Bytes frei
Nach Suchlauf: 6.999.625.728 Bytes frei
.
- - End Of File - - A661F3937FCFB4D4BA114E93FAF5A6E8
A36C5E4F47E84449FF07ED3517B43A31
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.20.08

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16750
Tobi :: TOBI-PC [Administrator]

Schutz: Aktiviert

20.01.2014 23:13:05
mbam-log-2014-01-20 (23-13-05).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 208032
Laufzeit: 2 Minute(n), 4 Sekunde(n)

Infizierte Speicherprozesse: 2
C:\ProgramData\WPM\wprotectmanager.exe (PUP.Optional.WpManager.A) -> 1480 -> Löschen bei Neustart.
C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe (PUP.Optional.WeatherAlerts) -> 528 -> Löschen bei Neustart.

Infizierte Speichermodule: 1
C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart.

Infizierte Registrierungsschlüssel: 19
HKLM\SYSTEM\CurrentControlSet\Services\Wpm (PUP.Optional.WpManager.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WPM (PUP.Optional.WpManager.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{11111111-1111-1111-1111-110411771118} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411771118} (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0047718.BHO (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0047718.Sandbox (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0047718.Sandbox.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstalledBrowserExtensions\Plus HD (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\SEARCHPROTECTINT (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\nationzoomSoftware (PUP.Optional.NationZoom.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopWeatherAlerts (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 4
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Daten: C:\Windows\SysWOW64\rundll32.exe "C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\SearchProtectINT|Install (PUP.Optional.SearchProtect.A) -> Daten: 1 -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SYSTEM\CurrentControlSet\Services\Wpm|ImagePath (PUP.Optional.WpManager.A) -> Daten: C:\ProgramData\WPM\wprotectmanager.exe -service -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 3
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.NationZoom.A) -> Bösartig: (hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope (PUP.Optional.Qone8) -> Bösartig: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}) Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKLM\Software\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.NationZoom) -> Bösartig: (hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 7
C:\Program Files (x86)\Plus-HD-5.0 (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Löschen bei Neustart.
C:\Users\Tobi\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\Local_Weather_LLC (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\Local_Weather_LLC\WeatherAlerts.exe_Url_suyzcwh53c5qdzcanwcjknlxfywsncoq (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\Local_Weather_LLC\WeatherAlerts.exe_Url_suyzcwh53c5qdzcanwcjknlxfywsncoq\1.4.0.0 (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts (PUP.Optional.WeatherAlerts) -> Löschen bei Neustart.

Infizierte Dateien: 47
C:\ProgramData\WPM\wprotectmanager.exe (PUP.Optional.WpManager.A) -> Löschen bei Neustart.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\Downloads\jZipSetup-r136-n-bc.exe (PUP.Optional.Bandoo.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\Downloads\Setup.exe (PUP.Optional.InstallCore) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\Downloads\ZipOpenerSetup.exe (PUP.Optional.JumpyApps.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DesktopWeatherAlerts.lnk (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Weather Alerts.lnk (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Plus-HD-5.0-chromeinstaller.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Plus-HD-5.0-codedownloader.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Plus-HD-5.0-enabler.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Plus-HD-5.0-firefoxinstaller.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Plus-HD-5.0-updater.job (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Löschen bei Neustart.
C:\Program Files (x86)\Plus-HD-5.0\47718.crx (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\47718.xpi (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\background.html (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Installer.log (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bg.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-bho64.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil64.dll (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-buttonutil64.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-chromeinstaller.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-codedownloader.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-enabler.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-firefoxinstaller.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-helper.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0-updater.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Plus-HD-5.0.ico (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\Uninstall.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Plus-HD-5.0\utils.exe (PUP.Optional.PlusHD.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\Local_Weather_LLC\WeatherAlerts.exe_Url_suyzcwh53c5qdzcanwcjknlxfywsncoq\1.4.0.0\user.config (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp0.dat (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsBrowser.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsK.dat (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsU.dat (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\DesktopWeatherAlertsuninstall.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\ICSharpCode.SharpZipLib.dll (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\mod.DesktopWeatherAlertsApp0.dat (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\uninstall.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\WAUpdater.exe (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe (PUP.Optional.WeatherAlerts) -> Löschen bei Neustart.
C:\Users\Tobi\AppData\Local\WeatherAlerts\WeatherAlerts.exe.config (PUP.Optional.WeatherAlerts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

# AdwCleaner v3.017 - Bericht erstellt am 20/01/2014 um 23:21:28
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 8 Pro  (64 bits)
# Benutzername : Tobi - TOBI-PC
# Gestartet von : C:\Users\Tobi\Desktop\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
Datei Gefunden : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage
Datei Gefunden : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage-journal
Datei Gefunden : C:\Windows\System32\roboot64.exe
Datei Gefunden : C:\Windows\System32\Tasks\Desk 365 RunAsStdUser
Datei Gefunden : C:\Windows\System32\Tasks\SpyHunter4Startup
Ordner Gefunden C:\Program Files (x86)\iSafe
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\ProgramData\WPM
Ordner Gefunden C:\Users\Tobi\AppData\Local\genienext
Ordner Gefunden C:\Users\Tobi\AppData\Local\Mobogenie
Ordner Gefunden C:\Users\Tobi\AppData\Roaming\iSafe
Ordner Gefunden C:\Users\Tobi\AppData\Roaming\Systweak
Ordner Gefunden C:\Users\Tobi\Documents\Mobogenie

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : HKCU\Software\powerpack
Schlüssel Gefunden : HKCU\Software\systweak
Schlüssel Gefunden : [x64] HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : [x64] HKCU\Software\powerpack
Schlüssel Gefunden : [x64] HKCU\Software\systweak
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422772218}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455775518}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466776618}
Schlüssel Gefunden : HKLM\Software\Desksvc
Schlüssel Gefunden : HKLM\Software\hdcode
Schlüssel Gefunden : HKLM\Software\supWPM
Schlüssel Gefunden : HKLM\Software\systweak
Schlüssel Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422772218}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455775518}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466776618}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2915 octets] - [20/01/2014 23:21:28]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2975 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 8 Pro x64
Ran by Tobi on 20.01.2014 at 23:33:55,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] isafekrnl 
Failed to delete: [Service] isafekrnl 
Successfully stopped: [Service] isafeservice 
Failed to delete: [Service] isafeservice 



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Failed to delete: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Users\Tobi\AppData\Roaming\isafe"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.01.2014 at 23:40:44,34
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014 04
Ran by Tobi (administrator) on TOBI-PC on 20-01-2014 23:46:27
Running from C:\Users\Tobi\Downloads
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Turtle Entertainment GmbH) C:\Program Files\EslWire\wire.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(Overwolf) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe
(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [EKStatusMonitor] - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-01-15] (Eastman Kodak Company)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UsageTemp] - "C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe"
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [ESL Wire] - C:\Program Files\EslWire\wire.exe [4253696 2013-12-09] (Turtle Entertainment GmbH)
HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-07-12] (SteelSeries ApS)
HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35768 2013-12-09] (Overwolf)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4B2FBEA62A6CCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
BHO-x32: Re-Markable - {f5ce6d93-1111-4c9f-899d-01d1c6a8f798} - C:\Program Files (x86)\Re-Markable\150.dll No File
BHO-x32: Shopping Suggestion - {F6C07882-D703-4DD5-905A-2C4E815A5066} - C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll (WW3, LLC)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.68.161.141 217.68.161.171

Chrome: 
=======
CHR Extension: (Google Wallet) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]

==================== Services (Whitelisted) =================

U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
U4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)
U2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2013-06-11] ()
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)
U2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-25] ()
U2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
U2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)
U2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
U2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [x]

==================== Drivers (Whitelisted) ====================

U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
U3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()
U2 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
U0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2013-12-02] (<Turtle Entertainment>)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
U3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2013-11-15] (Razer Inc)
U3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
U3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [38016 2013-06-25] (SteelSeries Corporation)
U3 WinRing0_1_2_0; E:\Program Files (x86)\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
U3 catchme; \??\C:\ComboFix\catchme.sys [x]
U3 cpuz136; \??\C:\Users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
U3 iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys [x]
U1 iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-20 23:46 - 2014-01-20 23:46 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion
2014-01-20 23:40 - 2014-01-20 23:40 - 00000935 _____ C:\Users\Tobi\Desktop\JRT.txt
2014-01-20 23:27 - 2014-01-20 23:27 - 00000000 ____D C:\Windows\ERUNT
2014-01-20 23:21 - 2014-01-20 23:22 - 00000000 ____D C:\AdwCleaner
2014-01-20 23:11 - 2014-01-20 23:11 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Malwarebytes
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 23:11 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-20 23:10 - 2014-01-20 23:10 - 01236282 _____ C:\Users\Tobi\Desktop\adwcleaner.exe
2014-01-20 23:10 - 2014-01-20 23:10 - 01037068 _____ (Thisisu) C:\Users\Tobi\Downloads\JRT.exe
2014-01-20 23:09 - 2014-01-20 23:10 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tobi\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-19 19:50 - 2014-01-19 19:50 - 00001457 _____ C:\Users\Tobi\Desktop\ComboFix - Verknüpfung.lnk
2014-01-19 19:50 - 2014-01-19 19:50 - 00000000 ___SD C:\ComboFix
2014-01-19 18:05 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-19 18:05 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-19 18:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-19 18:04 - 2014-01-19 19:50 - 00000000 ____D C:\Qoobox
2014-01-19 18:04 - 2014-01-19 18:21 - 00000000 ____D C:\Windows\erdnt
2014-01-19 17:46 - 2014-01-19 17:50 - 05167985 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe
2014-01-16 20:23 - 2014-01-16 20:24 - 00000000 ____D C:\Users\Tobi\Desktop\Cleaner spyware usw
2014-01-16 20:22 - 2014-01-16 20:22 - 00448512 _____ (OldTimer Tools) C:\Users\Tobi\Downloads\TFC.exe
2014-01-16 15:15 - 2014-01-20 23:46 - 00012444 _____ C:\Users\Tobi\Downloads\FRST.txt
2014-01-16 15:15 - 2014-01-16 15:15 - 00019258 _____ C:\Users\Tobi\Downloads\Addition.txt
2014-01-16 15:14 - 2014-01-20 23:46 - 00000000 ____D C:\FRST
2014-01-16 15:12 - 2014-01-20 23:46 - 02076672 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe
2014-01-15 20:53 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-01-15 20:53 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2014-01-15 20:53 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2014-01-15 20:53 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2014-01-15 20:53 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-01-15 20:53 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-01-15 20:53 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2014-01-15 20:53 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-15 20:53 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-15 20:53 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-01-15 20:53 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat
2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-15 20:41 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe
2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe
2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk
2014-01-15 18:52 - 2014-01-15 18:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber
2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk
2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log
2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe
2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp
2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe
2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar
2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM
2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip
2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe
2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar
2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641
2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar
2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp
2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip
2014-01-03 17:23 - 2014-01-15 22:26 - 00000000 ____D C:\Windows\Minidump
2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp
2014-01-03 16:07 - 2014-01-03 18:50 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter
2014-01-03 15:04 - 2014-01-03 15:16 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung
2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA
2014-01-02 18:36 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-02 18:36 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-02 18:32 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-02 18:32 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-02 18:31 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-02 18:31 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-02 18:31 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-02 18:18 - 2014-01-02 18:30 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA
2014-01-02 18:07 - 2013-11-14 12:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-01-02 18:07 - 2013-11-14 12:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-01-02 18:07 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-01-02 18:07 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2014-01-02 18:07 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-01-02 18:07 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-01-02 17:35 - 2014-01-02 18:37 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation
2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe
2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar
2013-12-30 16:12 - 2014-01-15 22:51 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+
2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk
2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip
2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar
2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar
2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar
2013-12-29 20:33 - 2013-12-29 20:39 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip
2013-12-29 19:30 - 2013-12-30 16:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt
2013-12-29 19:25 - 2014-01-20 23:33 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job
2013-12-29 19:25 - 2014-01-19 18:15 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update
2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar
2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-29 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-29 19:10 - 2013-12-29 19:11 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar
2013-12-29 18:48 - 2013-12-29 19:09 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe
2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag
2013-12-25 05:19 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-12-25 05:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-25 05:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-12-25 05:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-25 05:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-25 05:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-12-25 05:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-12-25 05:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-12-25 05:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-12-25 05:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-25 05:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-25 05:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-12-25 05:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-25 05:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-12-25 05:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-25 05:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-12-25 05:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-25 05:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-12-25 05:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-25 05:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-12-25 05:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-25 05:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-12-25 05:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-25 05:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-12-25 05:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-25 05:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-12-25 05:18 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-12-25 05:18 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-12-25 05:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-25 05:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-12-25 05:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-25 05:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-12-25 05:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-25 05:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-12-25 05:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-12-25 05:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-12-25 05:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-25 05:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-12-25 05:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-12-25 05:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-25 05:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-25 05:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-12-25 05:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-12-25 05:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-25 05:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-12-25 05:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-25 05:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-12-25 05:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-25 05:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-12-25 05:18 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-25 05:18 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-12-25 05:18 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-25 05:18 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-12-25 05:18 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-25 05:18 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-12-25 05:18 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-25 05:18 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-12-25 05:18 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-25 05:18 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-12-25 05:17 - 2013-12-25 16:57 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher
2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-12-25 05:17 - 2012-06-19 13:02 - 03123272 ____R C:\Windows\SysWOW64\pbsvc.exe
2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url

==================== One Month Modified Files and Folders =======

2014-01-20 23:46 - 2014-01-20 23:46 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion
2014-01-20 23:46 - 2014-01-16 15:15 - 00012444 _____ C:\Users\Tobi\Downloads\FRST.txt
2014-01-20 23:46 - 2014-01-16 15:14 - 00000000 ____D C:\FRST
2014-01-20 23:46 - 2014-01-16 15:12 - 02076672 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe
2014-01-20 23:40 - 2014-01-20 23:40 - 00000935 _____ C:\Users\Tobi\Desktop\JRT.txt
2014-01-20 23:39 - 2012-07-26 11:27 - 00751892 _____ C:\Windows\system32\perfh007.dat
2014-01-20 23:39 - 2012-07-26 11:27 - 00155620 _____ C:\Windows\system32\perfc007.dat
2014-01-20 23:39 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-20 23:34 - 2013-10-09 15:19 - 00000000 ____D C:\Users\Tobi\AppData\Local\Overwolf
2014-01-20 23:33 - 2013-12-29 19:25 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job
2014-01-20 23:33 - 2013-10-15 16:44 - 00000000 ____D C:\ProgramData\Kodak
2014-01-20 23:33 - 2013-09-02 14:21 - 00015108 _____ C:\autoupdate.log
2014-01-20 23:33 - 2013-06-18 21:31 - 00000000 ____D C:\Users\Tobi\AppData\Local\ESL Wire Game Client
2014-01-20 23:33 - 2013-06-18 15:05 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-20 23:33 - 2013-06-18 14:50 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-20 23:33 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-20 23:32 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-20 23:27 - 2014-01-20 23:27 - 00000000 ____D C:\Windows\ERUNT
2014-01-20 23:22 - 2014-01-20 23:21 - 00000000 ____D C:\AdwCleaner
2014-01-20 23:20 - 2013-06-18 14:50 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-20 23:19 - 2013-06-18 14:44 - 00132642 _____ C:\Windows\PFRO.log
2014-01-20 23:16 - 2013-06-18 14:48 - 00000000 ___RD C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 23:11 - 2014-01-20 23:11 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Malwarebytes
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 23:10 - 2014-01-20 23:10 - 01236282 _____ C:\Users\Tobi\Desktop\adwcleaner.exe
2014-01-20 23:10 - 2014-01-20 23:10 - 01037068 _____ (Thisisu) C:\Users\Tobi\Downloads\JRT.exe
2014-01-20 23:10 - 2014-01-20 23:09 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tobi\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-20 23:09 - 2013-07-01 18:09 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client
2014-01-20 23:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2014-01-20 22:26 - 2013-09-12 20:03 - 00000000 ____D C:\Users\Tobi\Documents\ESL Match Media
2014-01-20 15:17 - 2013-06-18 14:48 - 01499987 _____ C:\Windows\WindowsUpdate.log
2014-01-19 19:50 - 2014-01-19 19:50 - 00001457 _____ C:\Users\Tobi\Desktop\ComboFix - Verknüpfung.lnk
2014-01-19 19:50 - 2014-01-19 19:50 - 00000000 ___SD C:\ComboFix
2014-01-19 19:50 - 2014-01-19 18:04 - 00000000 ____D C:\Qoobox
2014-01-19 18:21 - 2014-01-19 18:04 - 00000000 ____D C:\Windows\erdnt
2014-01-19 18:15 - 2013-12-29 19:25 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2014-01-19 18:15 - 2012-07-26 06:26 - 00000215 _____ C:\Windows\system.ini
2014-01-19 17:50 - 2014-01-19 17:46 - 05167985 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe
2014-01-16 20:24 - 2014-01-16 20:23 - 00000000 ____D C:\Users\Tobi\Desktop\Cleaner spyware usw
2014-01-16 20:22 - 2014-01-16 20:22 - 00448512 _____ (OldTimer Tools) C:\Users\Tobi\Downloads\TFC.exe
2014-01-16 16:58 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2014-01-16 15:25 - 2013-06-18 14:53 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-16 15:15 - 2014-01-16 15:15 - 00019258 _____ C:\Users\Tobi\Downloads\Addition.txt
2014-01-15 22:51 - 2013-12-30 16:12 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+
2014-01-15 22:26 - 2014-01-03 17:23 - 00000000 ____D C:\Windows\Minidump
2014-01-15 21:33 - 2013-08-16 00:36 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 21:33 - 2013-06-19 19:42 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 20:50 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat
2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe
2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe
2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk
2014-01-15 18:53 - 2014-01-15 18:52 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber
2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk
2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log
2014-01-15 18:52 - 2013-06-18 14:48 - 00001646 _____ C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe
2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp
2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe
2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar
2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM
2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip
2014-01-09 09:02 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-09 09:02 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-08 16:08 - 2013-06-18 14:54 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3804308072-1049083099-4122200610-1001
2014-01-05 22:11 - 2013-12-03 15:01 - 00000000 ____D C:\Users\Tobi\Desktop\Tattoo
2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe
2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar
2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641
2014-01-04 17:32 - 2012-07-26 08:21 - 00111528 _____ C:\Windows\setupact.log
2014-01-04 17:31 - 2013-09-01 16:53 - 00131312 _____ C:\Windows\DPINST.LOG
2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar
2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp
2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip
2014-01-03 18:50 - 2014-01-03 16:07 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter
2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp
2014-01-03 15:16 - 2014-01-03 15:04 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung
2014-01-02 19:22 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2014-01-02 18:37 - 2014-01-02 17:35 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation
2014-01-02 18:37 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA
2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-02 18:30 - 2014-01-02 18:18 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA
2014-01-02 18:07 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help
2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-02 15:12 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi\AppData\Local\VirtualStore
2014-01-01 18:24 - 2013-07-02 22:03 - 00000779 _____ C:\Users\Public\Desktop\ESL Wire.lnk
2014-01-01 18:24 - 2013-07-02 22:03 - 00000000 ____D C:\Program Files\EslWire
2013-12-31 02:58 - 2013-12-03 14:28 - 00032256 ___SH C:\Users\Tobi\Downloads\Thumbs.db
2013-12-31 02:58 - 2013-10-09 19:03 - 00043520 ___SH C:\Users\Tobi\Desktop\Thumbs.db
2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe
2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-30 16:27 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache
2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar
2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk
2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip
2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar
2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar
2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar
2013-12-29 20:39 - 2013-12-29 20:33 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt
2013-12-29 19:30 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi
2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update
2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar
2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-29 19:11 - 2013-12-29 19:10 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar
2013-12-29 19:09 - 2013-12-29 18:48 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe
2013-12-25 16:57 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher
2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag
2013-12-25 05:18 - 2013-06-19 09:24 - 00026816 _____ C:\Windows\DirectX.log
2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url

Some content of TEMP:
====================
C:\Users\Tobi\AppData\Local\Temp\avgnt.exe
C:\Users\Tobi\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 17:53

==================== End Of Log ============================
         

--- --- ---


Vielen Dank für die schnelle Antwort.


Liebe Grüße Tobi

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c9f7ea24c0d0474dab1a0497abb077c0
# engine=16736
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-21 07:56:26
# local_time=2014-01-21 08:56:26 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=1799 16775165 100 94 23913 3752348 38303 0
# compatibility_mode=5893 16776574 100 94 2022493 17617661 0 0
# scanned=400622
# found=1
# cleaned=0
# scan_time=6400
sh=6691CE7F4CB2119170E25894A026EB1E51B580C5 ft=0 fh=0000000000000000 vn="JS/Adware.ShoppingSuggestion.A application" ac=I fn="C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\ejbpjlaagejfakeobljhgplbgklgemll.crx"
         

 Results of screen317's Security Check version 0.99.79  
   x64 (UAC is enabled)  
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
Avira Desktop      
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 45  
 Java version out of Date! 
 Google Chrome 32.0.1700.72  
 Google Chrome 32.0.1700.76  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-01-2014
Ran by Tobi (administrator) on TOBI-PC on 21-01-2014 21:01:46
Running from C:\Users\Tobi\Desktop\Cleaner spyware usw
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Turtle Entertainment GmbH) C:\Program Files\EslWire\wire.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(Overwolf) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe
(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [3182080 2012-10-08] (Eastman Kodak Company)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [EKStatusMonitor] - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-01-15] (Eastman Kodak Company)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UsageTemp] - "C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe"
HKLM-x32\...\Run: [Conime] - %windir%\system32\conime.exe
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [ESL Wire] - C:\Program Files\EslWire\wire.exe [4253696 2013-12-09] (Turtle Entertainment GmbH)
HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-07-12] (SteelSeries ApS)
HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35768 2013-12-09] (Overwolf)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4B2FBEA62A6CCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1388341469&from=vtt&uid=ST31000524AS_6VPDMNRSXXXX6VPDMNRS&q={searchTerms}
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
BHO-x32: Re-Markable - {f5ce6d93-1111-4c9f-899d-01d1c6a8f798} - C:\Program Files (x86)\Re-Markable\150.dll No File
BHO-x32: Shopping Suggestion - {F6C07882-D703-4DD5-905A-2C4E815A5066} - C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll (WW3, LLC)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.68.161.141 217.68.161.171

Chrome: 
=======
CHR Extension: (Google Wallet) - C:\Users\Tobi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]

==================== Services (Whitelisted) =================

U2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
U4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)
U2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2013-06-11] ()
U2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
U2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
U2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
U3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)
U2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-25] ()
U2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
U2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)
U2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)
U3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
U2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [x]

==================== Drivers (Whitelisted) ====================

U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
U1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
U1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
U2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
U3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()
U2 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
U0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2013-12-02] (<Turtle Entertainment>)
U3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
U3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2013-11-15] (Razer Inc)
U3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
U3 SAlphamHid; C:\Windows\System32\drivers\SAlpham64.sys [38016 2013-06-25] (SteelSeries Corporation)
U3 WinRing0_1_2_0; E:\Program Files (x86)\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
U3 catchme; \??\C:\ComboFix\catchme.sys [x]
U3 cpuz136; \??\C:\Users\Tobi\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
U3 iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys [x]
U1 iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-21 20:59 - 2014-01-21 20:59 - 00987425 _____ C:\Users\Tobi\Desktop\SecurityCheck.exe
2014-01-21 19:05 - 2014-01-21 19:05 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-21 19:04 - 2014-01-21 19:04 - 02347384 _____ (ESET) C:\Users\Tobi\Downloads\esetsmartinstaller_enu.exe
2014-01-20 23:46 - 2014-01-20 23:46 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion
2014-01-20 23:40 - 2014-01-20 23:40 - 00000935 _____ C:\Users\Tobi\Desktop\JRT.txt
2014-01-20 23:27 - 2014-01-20 23:27 - 00000000 ____D C:\Windows\ERUNT
2014-01-20 23:21 - 2014-01-20 23:22 - 00000000 ____D C:\AdwCleaner
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Malwarebytes
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 23:11 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-20 23:10 - 2014-01-20 23:10 - 01037068 _____ (Thisisu) C:\Users\Tobi\Downloads\JRT.exe
2014-01-20 23:09 - 2014-01-20 23:10 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tobi\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-19 19:50 - 2014-01-19 19:50 - 00000000 ___SD C:\ComboFix
2014-01-19 18:05 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-19 18:05 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-19 18:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-19 18:05 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-19 18:04 - 2014-01-19 19:50 - 00000000 ____D C:\Qoobox
2014-01-19 18:04 - 2014-01-19 18:21 - 00000000 ____D C:\Windows\erdnt
2014-01-19 17:46 - 2014-01-19 17:50 - 05167985 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe
2014-01-16 20:23 - 2014-01-21 21:01 - 00000000 ____D C:\Users\Tobi\Desktop\Cleaner spyware usw
2014-01-16 20:22 - 2014-01-16 20:22 - 00448512 _____ (OldTimer Tools) C:\Users\Tobi\Downloads\TFC.exe
2014-01-16 15:15 - 2014-01-20 23:46 - 00062829 _____ C:\Users\Tobi\Downloads\FRST.txt
2014-01-16 15:15 - 2014-01-16 15:15 - 00019258 _____ C:\Users\Tobi\Downloads\Addition.txt
2014-01-16 15:14 - 2014-01-21 21:01 - 00000000 ____D C:\FRST
2014-01-16 15:12 - 2014-01-20 23:46 - 02076672 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe
2014-01-15 20:53 - 2013-10-31 06:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-01-15 20:53 - 2013-10-31 06:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2014-01-15 20:53 - 2013-10-31 05:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2014-01-15 20:53 - 2013-10-31 04:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2014-01-15 20:53 - 2013-10-28 06:50 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-01-15 20:53 - 2013-10-28 05:05 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-01-15 20:53 - 2013-10-13 21:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2014-01-15 20:53 - 2013-08-27 06:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-15 20:53 - 2013-08-27 06:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-15 20:53 - 2013-08-26 23:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-01-15 20:53 - 2013-08-26 23:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat
2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-15 20:41 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe
2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe
2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk
2014-01-15 18:52 - 2014-01-15 18:53 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber
2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk
2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log
2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe
2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp
2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe
2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar
2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM
2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip
2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe
2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar
2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641
2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar
2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp
2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip
2014-01-03 17:23 - 2014-01-15 22:26 - 00000000 ____D C:\Windows\Minidump
2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp
2014-01-03 16:07 - 2014-01-03 18:50 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter
2014-01-03 15:04 - 2014-01-03 15:16 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung
2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA
2014-01-02 18:36 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-02 18:36 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-02 18:32 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-02 18:32 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-02 18:31 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-02 18:31 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-02 18:31 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-02 18:31 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-02 18:18 - 2014-01-02 18:30 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA
2014-01-02 18:07 - 2013-11-14 12:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-01-02 18:07 - 2013-11-14 12:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-01-02 18:07 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-01-02 18:07 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2014-01-02 18:07 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-01-02 18:07 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-01-02 18:07 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-01-02 17:35 - 2014-01-02 18:37 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation
2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe
2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar
2013-12-30 16:12 - 2014-01-15 22:51 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+
2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk
2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip
2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar
2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar
2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar
2013-12-29 20:33 - 2013-12-29 20:39 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip
2013-12-29 19:30 - 2013-12-30 16:27 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt
2013-12-29 19:25 - 2014-01-21 19:15 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job
2013-12-29 19:25 - 2014-01-19 18:15 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update
2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar
2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-29 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-29 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-29 19:10 - 2013-12-29 19:11 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar
2013-12-29 18:48 - 2013-12-29 19:09 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe
2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag
2013-12-25 05:19 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-12-25 05:19 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-12-25 05:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-12-25 05:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-25 05:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-25 05:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-25 05:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-12-25 05:19 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-25 05:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-25 05:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-25 05:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-12-25 05:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-25 05:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-12-25 05:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-12-25 05:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-25 05:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-25 05:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-12-25 05:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-12-25 05:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-12-25 05:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-12-25 05:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-25 05:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-12-25 05:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-12-25 05:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-25 05:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-25 05:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-25 05:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-12-25 05:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-25 05:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-12-25 05:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-25 05:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-12-25 05:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-25 05:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-25 05:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-12-25 05:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-25 05:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-12-25 05:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-25 05:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-25 05:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-12-25 05:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-25 05:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-25 05:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-12-25 05:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-25 05:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-12-25 05:18 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-12-25 05:18 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-12-25 05:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-25 05:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-25 05:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-12-25 05:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-25 05:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-12-25 05:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-25 05:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-12-25 05:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-12-25 05:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-25 05:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-12-25 05:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-12-25 05:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-25 05:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-12-25 05:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-12-25 05:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-12-25 05:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-25 05:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-25 05:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-12-25 05:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-25 05:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-12-25 05:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-25 05:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-12-25 05:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-25 05:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-12-25 05:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-25 05:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-12-25 05:18 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-25 05:18 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-12-25 05:18 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-25 05:18 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-12-25 05:18 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-25 05:18 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-12-25 05:18 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-25 05:18 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-12-25 05:18 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-25 05:18 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-12-25 05:17 - 2013-12-25 16:57 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher
2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-12-25 05:17 - 2012-06-19 13:02 - 03123272 ____R C:\Windows\SysWOW64\pbsvc.exe
2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url

==================== One Month Modified Files and Folders =======

2014-01-21 21:01 - 2014-01-16 20:23 - 00000000 ____D C:\Users\Tobi\Desktop\Cleaner spyware usw
2014-01-21 21:01 - 2014-01-16 15:14 - 00000000 ____D C:\FRST
2014-01-21 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2014-01-21 20:59 - 2014-01-21 20:59 - 00987425 _____ C:\Users\Tobi\Desktop\SecurityCheck.exe
2014-01-21 20:20 - 2013-06-18 14:50 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-21 19:25 - 2013-06-18 15:05 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-21 19:15 - 2013-12-29 19:25 - 00000408 _____ C:\Windows\Tasks\Re-Markable Update.job
2014-01-21 19:05 - 2014-01-21 19:05 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-21 19:04 - 2014-01-21 19:04 - 02347384 _____ (ESET) C:\Users\Tobi\Downloads\esetsmartinstaller_enu.exe
2014-01-21 19:04 - 2013-10-15 16:44 - 00000000 ____D C:\ProgramData\Kodak
2014-01-21 16:51 - 2013-07-01 18:09 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\TS3Client
2014-01-21 15:24 - 2012-07-26 11:27 - 00751892 _____ C:\Windows\system32\perfh007.dat
2014-01-21 15:24 - 2012-07-26 11:27 - 00155620 _____ C:\Windows\system32\perfc007.dat
2014-01-21 15:24 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-21 15:20 - 2013-06-18 14:50 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-21 15:19 - 2013-10-09 15:19 - 00000000 ____D C:\Users\Tobi\AppData\Local\Overwolf
2014-01-21 15:18 - 2013-09-02 14:21 - 00015258 _____ C:\autoupdate.log
2014-01-21 15:18 - 2013-06-18 21:31 - 00000000 ____D C:\Users\Tobi\AppData\Local\ESL Wire Game Client
2014-01-21 15:18 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-21 15:18 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-20 23:46 - 2014-01-20 23:46 - 00000000 ____D C:\Users\Tobi\Downloads\FRST-OlderVersion
2014-01-20 23:46 - 2014-01-16 15:15 - 00062829 _____ C:\Users\Tobi\Downloads\FRST.txt
2014-01-20 23:46 - 2014-01-16 15:12 - 02076672 _____ (Farbar) C:\Users\Tobi\Downloads\FRST64.exe
2014-01-20 23:40 - 2014-01-20 23:40 - 00000935 _____ C:\Users\Tobi\Desktop\JRT.txt
2014-01-20 23:27 - 2014-01-20 23:27 - 00000000 ____D C:\Windows\ERUNT
2014-01-20 23:22 - 2014-01-20 23:21 - 00000000 ____D C:\AdwCleaner
2014-01-20 23:19 - 2013-06-18 14:44 - 00132642 _____ C:\Windows\PFRO.log
2014-01-20 23:16 - 2013-06-18 14:48 - 00000000 ___RD C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Malwarebytes
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 23:11 - 2014-01-20 23:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 23:10 - 2014-01-20 23:10 - 01037068 _____ (Thisisu) C:\Users\Tobi\Downloads\JRT.exe
2014-01-20 23:10 - 2014-01-20 23:09 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tobi\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-20 22:26 - 2013-09-12 20:03 - 00000000 ____D C:\Users\Tobi\Documents\ESL Match Media
2014-01-20 15:17 - 2013-06-18 14:48 - 01499987 _____ C:\Windows\WindowsUpdate.log
2014-01-19 19:50 - 2014-01-19 19:50 - 00000000 ___SD C:\ComboFix
2014-01-19 19:50 - 2014-01-19 18:04 - 00000000 ____D C:\Qoobox
2014-01-19 18:21 - 2014-01-19 18:04 - 00000000 ____D C:\Windows\erdnt
2014-01-19 18:15 - 2013-12-29 19:25 - 00000000 ____D C:\Program Files (x86)\Re-Markable
2014-01-19 18:15 - 2012-07-26 06:26 - 00000215 _____ C:\Windows\system.ini
2014-01-19 17:50 - 2014-01-19 17:46 - 05167985 ____R (Swearware) C:\Users\Tobi\Downloads\ComboFix.exe
2014-01-16 20:22 - 2014-01-16 20:22 - 00448512 _____ (OldTimer Tools) C:\Users\Tobi\Downloads\TFC.exe
2014-01-16 16:58 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2014-01-16 15:25 - 2013-06-18 14:53 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-16 15:15 - 2014-01-16 15:15 - 00019258 _____ C:\Users\Tobi\Downloads\Addition.txt
2014-01-15 22:51 - 2013-12-30 16:12 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+
2014-01-15 22:26 - 2014-01-03 17:23 - 00000000 ____D C:\Windows\Minidump
2014-01-15 21:33 - 2013-08-16 00:36 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 21:33 - 2013-06-19 19:42 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 20:50 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2014-01-15 20:42 - 2014-01-15 20:42 - 00000000 _____ C:\autoexec.bat
2014-01-15 20:41 - 2014-01-15 20:41 - 00002256 _____ C:\Users\Tobi\Desktop\SpyHunter.lnk
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\sh4ldr
2014-01-15 20:41 - 2014-01-15 20:41 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-15 20:38 - 2014-01-15 20:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Tobi\Downloads\SpyHunter-Installer.exe
2014-01-15 20:32 - 2014-01-15 20:32 - 02146304 _____ (Geek Uninstaller Software) C:\Users\Tobi\Downloads\geek.exe
2014-01-15 20:30 - 2014-01-15 20:30 - 00001120 _____ C:\Users\Tobi\Desktop\Continue Zip Opener Installation.lnk
2014-01-15 18:53 - 2014-01-15 18:52 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\eCyber
2014-01-15 18:52 - 2014-01-15 18:52 - 00001784 _____ C:\Users\Public\Desktop\YAC.lnk
2014-01-15 18:52 - 2014-01-15 18:52 - 00000000 ____D C:\Windows\system32\log
2014-01-15 18:52 - 2013-06-18 14:48 - 00001646 _____ C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-15 18:48 - 2014-01-15 18:48 - 09608048 _____ C:\Users\Tobi\Downloads\yet_another_cleaner.exe
2014-01-15 18:32 - 2014-01-15 18:32 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
2014-01-15 13:26 - 2014-01-15 13:26 - 00297296 _____ C:\Windows\Minidump\011514_f61db6b1-bdb8-431c-b8f5-c5906ec57411.dmp
2014-01-13 17:11 - 2014-01-13 17:11 - 00097024 _____ C:\Users\Tobi\Downloads\cfg.rar.exe
2014-01-13 17:11 - 2014-01-13 17:11 - 00060300 _____ C:\Users\Tobi\Downloads\cfg.rar
2014-01-13 17:11 - 2014-01-13 17:11 - 00000000 ____D C:\Users\Tobi\AppData\Local\DM
2014-01-13 15:55 - 2014-01-13 15:55 - 00037116 _____ C:\Users\Tobi\Downloads\linesman-archive.zip
2014-01-09 09:02 - 2012-07-26 09:14 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-09 09:02 - 2012-07-26 09:14 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-08 16:08 - 2013-06-18 14:54 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3804308072-1049083099-4122200610-1001
2014-01-05 22:11 - 2013-12-03 15:01 - 00000000 ____D C:\Users\Tobi\Desktop\Tattoo
2014-01-05 17:02 - 2014-01-05 17:02 - 00578600 _____ C:\Users\Tobi\Downloads\Setup (1).exe
2014-01-04 22:00 - 2014-01-04 22:00 - 00004765 _____ C:\Users\Tobi\Downloads\file_169914933144432_4661_0.rar
2014-01-04 17:32 - 2014-01-04 17:32 - 00000000 ____D C:\ProgramData\RzMaelstromVAD_1.1.49.1641
2014-01-04 17:32 - 2012-07-26 08:21 - 00111528 _____ C:\Windows\setupact.log
2014-01-04 17:31 - 2013-09-01 16:53 - 00131312 _____ C:\Windows\DPINST.LOG
2014-01-03 22:19 - 2014-01-03 22:19 - 00006228 _____ C:\Users\Tobi\Downloads\3_friberg_csgo.rar
2014-01-03 22:14 - 2014-01-03 22:14 - 00060944 _____ C:\Users\Tobi\Downloads\bot_full_T.bsp
2014-01-03 22:13 - 2014-01-03 22:13 - 00071302 _____ C:\Users\Tobi\Downloads\NewCfgSCREAM.zip
2014-01-03 18:50 - 2014-01-03 16:07 - 00000000 ____D C:\Users\Tobi\Desktop\Praxishefter
2014-01-03 17:23 - 2014-01-03 17:23 - 00297264 _____ C:\Windows\Minidump\010314-11406-01.dmp
2014-01-03 15:16 - 2014-01-03 15:04 - 00000000 ____D C:\Users\Tobi\Desktop\Bewerbung
2014-01-02 19:22 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2014-01-02 18:37 - 2014-01-02 17:35 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA Corporation
2014-01-02 18:37 - 2013-06-18 15:46 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-02 18:36 - 2014-01-02 18:36 - 00001351 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2014-01-02 18:36 - 2014-01-02 18:36 - 00000000 ____D C:\Users\Tobi\AppData\Local\NVIDIA
2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-02 18:36 - 2013-06-18 15:46 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-02 18:32 - 2014-01-02 18:32 - 00002137 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2014-01-02 18:32 - 2014-01-02 18:32 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2014-01-02 18:30 - 2014-01-02 18:18 - 255488144 _____ (NVIDIA Corporation) C:\Users\Tobi\Downloads\331.82-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-01-02 18:10 - 2014-01-02 18:10 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\NVIDIA
2014-01-02 18:07 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help
2014-01-02 15:25 - 2014-01-02 15:25 - 00306072 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-02 15:12 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi\AppData\Local\VirtualStore
2014-01-01 18:24 - 2013-07-02 22:03 - 00000779 _____ C:\Users\Public\Desktop\ESL Wire.lnk
2014-01-01 18:24 - 2013-07-02 22:03 - 00000000 ____D C:\Program Files\EslWire
2013-12-31 02:58 - 2013-12-03 14:28 - 00032256 ___SH C:\Users\Tobi\Downloads\Thumbs.db
2013-12-31 02:58 - 2013-10-09 19:03 - 00043520 ___SH C:\Users\Tobi\Desktop\Thumbs.db
2013-12-30 20:58 - 2013-12-30 20:58 - 00860160 _____ C:\Users\Tobi\Downloads\ChodsCheatsLite.exe
2013-12-30 18:20 - 2013-12-30 18:20 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-30 16:27 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Local\cache
2013-12-30 16:21 - 2013-12-30 16:21 - 00278540 _____ C:\Users\Tobi\Downloads\Crazywinks_Injector_2.0.rar
2013-12-30 16:09 - 2013-12-30 16:09 - 00001107 _____ C:\Users\Tobi\Desktop\Continue AnyProtect Installation.lnk
2013-12-30 16:07 - 2013-12-30 16:07 - 00041191 _____ C:\Users\Tobi\Downloads\x86-binary_autodllinjector-1.0.0.1.zip
2013-12-30 14:36 - 2013-12-30 14:36 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (2).rar
2013-12-30 14:35 - 2013-12-30 14:35 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_ (1).rar
2013-12-30 14:32 - 2013-12-30 14:32 - 00008346 _____ C:\Users\Tobi\Downloads\Intelligenz.v1(30.12)_[www.unknowncheats.me]_.rar
2013-12-29 20:39 - 2013-12-29 20:33 - 00180860 _____ C:\Users\Tobi\Downloads\[CSGO]Y3t1y3t's Trigger v1 r0.5_[www.unknowncheats.me]_.zip
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Alerts
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 ____D C:\Users\Tobi\.android
2013-12-29 19:30 - 2013-12-29 19:30 - 00000000 _____ C:\Users\Tobi\daemonprocess.txt
2013-12-29 19:30 - 2013-06-18 14:48 - 00000000 ____D C:\Users\Tobi
2013-12-29 19:25 - 2013-12-29 19:25 - 00003046 _____ C:\Windows\System32\Tasks\Re-Markable Update
2013-12-29 19:22 - 2013-12-29 19:22 - 00141984 _____ C:\Users\Tobi\Downloads\CSGO Hack v2.0.rar
2013-12-29 19:11 - 2013-12-29 19:11 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\ProgramData\Avira
2013-12-29 19:11 - 2013-12-29 19:11 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-29 19:11 - 2013-12-29 19:10 - 05940743 _____ C:\Users\Tobi\Downloads\[www.OldSchoolHack.de]_König Pixel Hack 3.2 Vollversion.rar
2013-12-29 19:09 - 2013-12-29 18:48 - 129598176 _____ C:\Users\Tobi\Downloads\avira_free_antivirus_de.exe
2013-12-25 16:57 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Local\Ubisoft Game Launcher
2013-12-25 16:23 - 2013-12-25 16:23 - 00000000 ____D C:\Users\Tobi\Documents\Assassin's Creed IV Black Flag
2013-12-25 05:18 - 2013-06-19 09:24 - 00026816 _____ C:\Windows\DirectX.log
2013-12-25 05:17 - 2013-12-25 05:17 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00075136 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-25 05:17 - 2013-12-25 05:17 - 00001205 _____ C:\Users\Tobi\Desktop\Uplay.lnk
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Users\Tobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-12-25 05:17 - 2013-12-25 05:17 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-12-25 05:16 - 2013-12-25 05:16 - 00000113 _____ C:\Users\Tobi\Desktop\Assassin's Creed IV Black Flag.url

Some content of TEMP:
====================
C:\Users\Tobi\AppData\Local\Temp\avgnt.exe
C:\Users\Tobi\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 17:53

==================== End Of Log ============================
         

--- --- ---



Also der PC läuft nach dem Boot wieder stabil, jedoch bootet er im Vergleich zu vorher noch relativ langsam.
Schonmal ein riesen Danke an dich!

LG

Java updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
HKLM-x32\...\Run: [UsageTemp] - "C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe"
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Fertig

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun


Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Beim Boot ist er immer noch relativ langsam. Ansonsten sind meine Probleme gelöst.
Vielen lieben Dank!

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-01-2014
Ran by Tobi at 2014-01-22 15:28:23 Run:1
Running from C:\Users\Tobi\Desktop\Cleaner spyware usw
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
HKLM-x32\...\Run: [UsageTemp] - "C:\Users\Tobi\AppData\Local\Temp\UsageTemp.exe"
*****************

C:\Users\Tobi\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4 => Moved successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UsageTemp => Value deleted successfully.

==== End of Fixlog ====
         

Deinstallier mal aus Spass dein AV Programm und teste den Speed beim Booten nochmal.