|
Plagegeister aller Art und deren Bekämpfung: HILFE Youtube und google gegen Schuhwebsite ausgetauschtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.02.2014, 08:51 | #1 |
| HILFE Youtube und google gegen Schuhwebsite ausgetauscht Seit heute wenn ich Google und Youtube öffnen will kommt eine Schuhwebsite AUF JAPANISCH oder Chinesisch jenachdem |
01.02.2014, 09:25 | #2 |
/// the machine /// TB-Ausbilder | HILFE Youtube und google gegen Schuhwebsite ausgetauscht hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
01.02.2014, 12:46 | #3 |
| HILFE Youtube und google gegen Schuhwebsite ausgetauscht Hier Der FRST.log
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 03 Ran by Hausaufgaben (administrator) on MANHHAO-PC on 01-02-2014 10:06:15 Running from C:\Users\Hausaufgaben\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345312 2013-03-30] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Olympus DSS] - C:\ProgramData\AppleDev0\rzsbkotiu.exe [596992 2013-10-26] (Elite Bypassers) HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [YouCam Service] - C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [255208 2011-11-29] (CyberLink Corp.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813200 2014-01-23] (LogMeIn Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [HideSCAHealth] 1 HKU\S-1-5-21-2823766941-1517505164-3398274235-1008\...\Run: [ꢋ⺑v澼Ὄᚇ汉ᴭ䠳䃦ମᱩ纩ₘ忩䴪谄毉Ჶ떩ꡲﱱḶⷭ暶꿠肟鞵琔엵捍︣횡鎟蟼ꇐ⺫ꮵ�ᴯ䒪�料㻾᳁鉖슕ꌼ⹉칙噔ᘟ貀鷄ۥ] - C:\ProgramData\AppleDev0\rzsbkotiu.exe [596992 2013-10-26] (Elite Bypassers) HKU\S-1-5-21-2823766941-1517505164-3398274235-1008\...\Run: [Olympus DSS] - C:\ProgramData\AppleDev0\rzsbkotiu.exe [596992 2013-10-26] (Elite Bypassers) HKU\S-1-5-21-2823766941-1517505164-3398274235-1008\...\Run: [iFunBoxConnector] - C:\Program Files (x86)\i-Funbox DevTeam\ifb_conn.exe [812544 2012-11-20] () IFEO\hijackthis.exe: [Debugger] rs_.exe IFEO\housecalllauncher.exe: [Debugger] zl_.exe IFEO\rstrui.exe: [Debugger] xs_.exe IFEO\spybotsd.exe: [Debugger] zb_.exe SecurityProviders: credssp.dll, ObzinkEblanc.dll Startup: C:\Users\Mama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\blueincarnations.vbs () Startup: C:\Users\Manh hao\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\blueincarnations.vbs () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yandex.ru/?win=103&clid=1995482 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=tugumsd&cd=2XzuyEtN2Y1L1QzuyB0AyBzytCzyyEtCzytB0D0FtB0AtC0BtN0D0Tzu0CyDtCtDtN1L2XzutBtFtBtFtCtFyCtCzztN1L1Czu2Z2Y1N2Y1H1B1Q&cr=1742042479&ir= SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=42820&st=bs&tid=3347&q={searchTerms} SearchScopes: HKCU - DefaultScope DD28B20CCB6D8396A4FD0D3A6FB7E1CB URL = hxxp://yandex.ru/yandsearch?win=103&clid=1995483&text={searchTerms} SearchScopes: HKCU - DD28B20CCB6D8396A4FD0D3A6FB7E1CB URL = hxxp://yandex.ru/yandsearch?win=103&clid=1995483&text={searchTerms} SearchScopes: HKCU - {3601E731-9D95-95B5-7C7D-629D5426D365} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=42820&st=bs&tid=3347&q={searchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: qualitink - {73ad5d47-66e5-4127-80ca-c0eedabafbcc} - C:\Program Files (x86)\qualitink\qualitinkbho.dll (qualitink) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Hausaufgaben\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default FF DefaultSearchEngine: Yandex FF SelectedSearchEngine: Yandex FF Homepage: hxxp://www.yandex.ru/?win=103&clid=1995482 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Users\Hausaufgaben\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-114336.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\Hausaufgaben\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\staged [2013-12-21] Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-02] CHR Extension: (Google Drive) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-02] CHR Extension: (YouTube) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-02] CHR Extension: (Google-Suche) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-02] CHR Extension: (qualitink) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljkcijnbckdflhifmbnfnkjacokloacf [2013-12-02] CHR Extension: (Google Wallet) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-02] CHR Extension: (Google Mail) - C:\Users\Hausaufgaben\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-02] CHR HKLM-x32\...\Chrome\Extension: [ljkcijnbckdflhifmbnfnkjacokloacf] - C:\Program Files (x86)\qualitink\ljkcijnbckdflhifmbnfnkjacokloacf.crx [2013-10-05] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-03-30] (Avira Operations GmbH & Co. KG) S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-03-30] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [565472 2013-03-30] (Avira Operations GmbH & Co. KG) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-12-13] (LogMeIn, Inc.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) ==================== Drivers (Whitelisted) ==================== R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-30] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-30] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-30] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-16] (DT Soft Ltd) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-03] (Anchorfree Inc.) S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-01 10:06 - 2014-02-01 10:06 - 00014267 _____ () C:\Users\Hausaufgaben\Desktop\FRST.txt 2014-02-01 10:05 - 2014-02-01 10:05 - 02080256 _____ (Farbar) C:\Users\Hausaufgaben\Downloads\FRST64.exe 2014-02-01 10:05 - 2014-02-01 10:05 - 02080256 _____ (Farbar) C:\Users\Hausaufgaben\Desktop\FRST64.exe 2014-02-01 08:48 - 2014-02-01 08:49 - 00000000 ____D () C:\Users\Manh hao\Documents\Bandicam 2014-01-31 21:19 - 2014-01-31 21:19 - 02321335 _____ () C:\Users\Hausaufgaben\Downloads\MineCraft Cracker.zip 2014-01-31 19:54 - 2014-01-31 19:56 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\BigDigServer-v1.3.9 2014-01-31 19:54 - 2014-01-31 19:54 - 49740104 _____ () C:\Users\Hausaufgaben\Desktop\BigDigServer-v1.3.9.zip 2014-01-31 19:51 - 2014-01-31 19:54 - 49740104 _____ () C:\Users\Hausaufgaben\Downloads\BigDigServer-v1.3.9.zip 2014-01-31 19:43 - 2014-01-31 19:43 - 01666994 _____ () C:\Users\Hausaufgaben\Downloads\Hack-slash-Mine---Server.zip 2014-01-31 19:43 - 2014-01-31 19:43 - 01666994 _____ () C:\Users\Hausaufgaben\Desktop\Hack-slash-Mine---Server.zip 2014-01-31 19:36 - 2014-01-31 19:49 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\Hexxit_Server_v1.0.10 (1) 2014-01-31 19:35 - 2014-01-31 19:35 - 48168194 _____ () C:\Users\Hausaufgaben\Desktop\Hexxit_Server_v1.0.10 (1).zip 2014-01-31 19:33 - 2014-01-31 19:35 - 48168194 _____ () C:\Users\Hausaufgaben\Downloads\Hexxit_Server_v1.0.10 (1).zip 2014-01-30 19:05 - 2014-01-30 19:05 - 00533690 _____ () C:\Users\Hausaufgaben\Downloads\GemsPlus_Forge_1.6.4v2.zip 2014-01-30 19:05 - 2014-01-30 19:05 - 00533690 _____ () C:\Users\Hausaufgaben\Desktop\GemsPlus_Forge_1.6.4v2.zip 2014-01-30 17:55 - 2014-01-30 17:55 - 02269863 _____ () C:\Users\Hausaufgaben\Downloads\forge-1.6.4-9.11.1.965-installer.jar 2014-01-30 17:55 - 2014-01-30 17:55 - 02269863 _____ () C:\Users\Hausaufgaben\Desktop\forge-1.6.4-9.11.1.965-installer.jar 2014-01-30 17:55 - 2014-01-30 17:55 - 00044309 _____ () C:\Users\Hausaufgaben\Downloads\Animated_Player_v1.3.0_mc1.6.4.zip 2014-01-29 19:13 - 2014-01-29 19:17 - 163518455 _____ () C:\Users\Hausaufgaben\Downloads\Minecraft_Texture_Pack.zip 2014-01-29 19:02 - 2014-01-29 19:02 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-01-29 19:00 - 2014-01-29 19:00 - 00278584 _____ () C:\Windows\Minidump\012914-35895-01.dmp 2014-01-28 19:41 - 2014-01-28 19:41 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Hausaufgaben\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe 2014-01-28 19:41 - 2014-01-28 19:41 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Hausaufgaben\Desktop\BlueStacks-SplitInstaller_native_0.8.4.3036.exe 2014-01-27 17:48 - 2014-01-27 17:48 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Apple 2014-01-26 00:04 - 2014-01-26 00:04 - 00000000 ____D () C:\Users\Papa2\AppData\Local\Google 2014-01-25 23:59 - 2014-01-25 23:59 - 00065872 _____ () C:\Users\Papa2\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-25 23:59 - 2014-01-25 23:59 - 00000000 ____D () C:\Users\Papa2\Documents\Youcam 2014-01-25 23:59 - 2014-01-25 23:59 - 00000000 ____D () C:\Users\Papa2\AppData\Local\CyberLink 2014-01-25 23:58 - 2014-01-28 02:18 - 00000000 ____D () C:\Users\Papa2\AppData\Local\LogMeIn Hamachi 2014-01-25 23:58 - 2014-01-25 23:58 - 00001425 _____ () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-25 23:58 - 2014-01-25 23:58 - 00000020 ___SH () C:\Users\Papa2\ntuser.ini 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Vorlagen 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Startmenü 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Netzwerkumgebung 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Lokale Einstellungen 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Eigene Dateien 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Druckumgebung 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Documents\Eigene Musik 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Documents\Eigene Bilder 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Local\Verlauf 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Local\Anwendungsdaten 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Anwendungsdaten 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Roaming\Apple Computer 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Roaming\Adobe 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\VirtualStore 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\LogMeIn 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\Adobe 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2 2014-01-25 23:58 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-25 23:58 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-25 22:00 - 2014-01-25 22:00 - 01462548 _____ () C:\Users\Hausaufgaben\Desktop\Intro Für TodayPlays By ItsZerCrash.mp4 2014-01-25 21:59 - 2014-01-25 22:00 - 01462548 _____ () C:\Users\Hausaufgaben\Downloads\Intro Für TodayPlays By ItsZerCrash.mp4 2014-01-25 18:37 - 2014-01-25 18:43 - 293186046 _____ () C:\Users\Hausaufgaben\Desktop\javaw 2014-01-25 18-37-53-869.avi 2014-01-25 18:29 - 2014-01-28 17:44 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\Bandicam 2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Selina\Desktop\Bandicam.lnk 2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Manh hao\Desktop\Bandicam.lnk 2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Mama\Desktop\Bandicam.lnk 2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Hausaufgaben\Desktop\Bandicam.lnk 2014-01-25 18:29 - 2014-01-25 18:29 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\BANDISOFT 2014-01-25 18:29 - 2014-01-25 18:29 - 00000000 ____D () C:\Program Files (x86)\Bandicam 2014-01-25 18:28 - 2014-01-25 18:28 - 07377680 _____ (Bandisoft) C:\Users\Hausaufgaben\Downloads\bdcamsetup193.exe 2014-01-18 20:51 - 2014-01-18 20:51 - 00004535 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamStudio.cfg 2014-01-18 20:51 - 2014-01-18 20:51 - 00000408 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamShapes.ini 2014-01-18 20:51 - 2014-01-18 20:51 - 00000408 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamLayout.ini 2014-01-18 20:51 - 2014-01-18 20:51 - 00000046 _____ () C:\Users\Hausaufgaben\AppData\Roaming\Camdata.ini 2014-01-18 20:02 - 2014-01-18 20:07 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\My CamStudio Temp Files 2014-01-18 19:52 - 2014-01-18 19:52 - 00000096 _____ () C:\Users\Hausaufgaben\AppData\Roaming\version2.xml 2014-01-18 19:21 - 2014-01-18 19:21 - 03577897 _____ () C:\Users\Hausaufgaben\Downloads\Template.rar 2014-01-18 19:21 - 2014-01-18 19:21 - 03577897 _____ () C:\Users\Hausaufgaben\Desktop\Template.rar 2014-01-18 19:09 - 2014-01-18 19:09 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Publish Providers 2014-01-18 18:59 - 2014-01-18 18:59 - 00000000 ____D () C:\Program Files\CamStudio 2.7 2014-01-18 18:58 - 2014-01-18 18:58 - 00001038 _____ () C:\Users\Public\Desktop\Vegas Pro 12.0 (64-bit).lnk 2014-01-18 18:58 - 2012-09-29 17:37 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\SonyVegasPro.v12 2014-01-18 18:57 - 2014-01-18 19:09 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Sony 2014-01-18 18:57 - 2014-01-18 19:05 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Sony 2014-01-18 18:57 - 2014-01-18 19:01 - 00000000 ____D () C:\ProgramData\Sony 2014-01-18 18:57 - 2014-01-18 18:57 - 00000000 ____D () C:\Program Files\Sony 2014-01-18 18:57 - 2014-01-18 18:57 - 00000000 ____D () C:\Program Files (x86)\Sony 2014-01-18 18:57 - 2014-01-18 18:50 - 28147000 _____ () C:\Users\Hausaufgaben\Desktop\SonyVegasPro.v12.rar 2014-01-18 18:56 - 2014-01-18 18:57 - 11613447 _____ (CamStudio Open Source ) C:\Users\Hausaufgaben\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe 2014-01-18 18:49 - 2014-01-18 18:50 - 28147000 _____ () C:\Users\Hausaufgaben\Downloads\SonyVegasPro.v12.rar 2014-01-18 18:48 - 2014-01-18 18:56 - 243071608 _____ (Sony Creative Software Inc.) C:\Users\Hausaufgaben\Downloads\vegaspro12.0.770.exe 2014-01-18 17:24 - 2014-01-20 19:59 - 00000776 _____ () C:\Users\Hausaufgaben\Desktop\Beschreibung.txt 2014-01-18 17:09 - 2014-01-18 17:10 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Minecraft Skin Viewer 2014-01-18 16:29 - 2014-01-18 16:32 - 48168194 _____ () C:\Users\Hausaufgaben\Downloads\Hexxit_Server_v1.0.10.zip 2014-01-18 15:46 - 2014-01-18 15:47 - 40343735 _____ () C:\Users\Hausaufgaben\Downloads\Sphax PureBDcraft 64x Hexxit Patch 1.5.2 by werri33.zip 2014-01-18 15:45 - 2014-01-18 15:45 - 02295368 _____ () C:\Users\Hausaufgaben\Desktop\Technic Launcher Cracked.exe 2014-01-18 15:44 - 2014-01-18 15:45 - 02295368 _____ () C:\Users\Hausaufgaben\Downloads\Technic Launcher Cracked.exe 2014-01-17 17:19 - 2014-01-17 17:19 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-01-17 17:18 - 2014-01-17 17:18 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-01-17 16:43 - 2014-01-17 16:58 - 00000000 ____D () C:\ProgramData\BlueStacks 2014-01-17 16:43 - 2014-01-17 16:57 - 00000000 ____D () C:\ProgramData\BlueStacksSetup 2014-01-17 15:06 - 2014-01-17 15:06 - 67234966 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 128x.zip 2014-01-17 15:06 - 2014-01-17 15:06 - 36021856 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 64x.zip 2014-01-17 15:01 - 2014-01-17 15:01 - 21042665 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 32x.zip 2014-01-16 18:38 - 2014-01-16 18:40 - 35098272 _____ (Skype Technologies S.A.) C:\Users\Hausaufgaben\Downloads\SkypeSetupFull-6.11.59.exe 2014-01-16 18:34 - 2014-01-16 18:34 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-16 18:34 - 2014-01-16 18:33 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-16 18:33 - 2014-01-16 18:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-16 18:33 - 2014-01-16 18:33 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-16 18:33 - 2014-01-16 18:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-16 18:28 - 2014-01-16 18:29 - 29141928 _____ (Oracle Corporation) C:\Users\Hausaufgaben\Downloads\jre-7u51-windows-i586.exe 2014-01-16 18:12 - 2014-01-16 18:17 - 17142553 _____ () C:\Users\Hausaufgaben\Downloads\Template by AdnoArt.rar 2014-01-16 18:12 - 2014-01-16 18:12 - 04087248 _____ () C:\Users\Hausaufgaben\Downloads\GreyScaleGorillaLightKitPro1.lib4d 2014-01-16 18:08 - 2014-01-16 18:09 - 37154174 _____ () C:\Users\Hausaufgaben\Downloads\minecraft 2.lib4d 2014-01-16 17:43 - 2014-01-16 17:43 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\MonkeyJam 2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Selina\Desktop\MonkeyJam.lnk 2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Manh hao\Desktop\MonkeyJam.lnk 2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Mama\Desktop\MonkeyJam.lnk 2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Hausaufgaben\Desktop\MonkeyJam.lnk 2014-01-16 17:42 - 2014-01-16 17:42 - 00000000 ____D () C:\Program Files (x86)\MonkeyJam 2014-01-16 17:42 - 2005-02-27 17:11 - 00424960 _____ () C:\Windows\SysWOW64\wavdest.ax 2014-01-16 17:41 - 2014-01-16 17:41 - 01397331 _____ (GiantScreamingRobotMonkeys ) C:\Users\Hausaufgaben\Downloads\MonkeyJamSetup_3.0.exe 2014-01-16 08:40 - 2014-01-16 08:41 - 37739800 _____ (Google Inc.) C:\Users\Hausaufgaben\Downloads\ChromeStandalone32Setup.exe 2014-01-14 18:32 - 2014-01-14 18:50 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Skype 2014-01-14 18:23 - 2014-01-14 18:23 - 01249424 _____ () C:\Users\Mama\Downloads\Minecraftrig-by-skrab-Edited-by-KBDESIGNZ.blend 2014-01-14 18:23 - 2014-01-14 18:23 - 00000792 _____ () C:\Users\Mama\Desktop\Minecraftrig-by-skrab-Edited-by-KBDESIGNZ.lnk 2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Blender Foundation 2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\Mama\.thumbnails 2014-01-14 18:15 - 2014-01-14 18:15 - 00079569 _____ () C:\Users\Mama\Downloads\MinecraftPlayer.zip 2014-01-14 18:00 - 2014-01-14 18:06 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Minecraft Skin Viewer 2014-01-14 18:00 - 2014-01-14 18:00 - 00140332 _____ () C:\Users\Mama\Downloads\Minecraft Skin Viewer.zip 2014-01-14 18:00 - 2014-01-14 18:00 - 00140332 _____ () C:\Users\Mama\Desktop\Minecraft Skin Viewer.zip 2014-01-14 18:00 - 2014-01-14 18:00 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\WinRAR 2014-01-14 18:00 - 2012-06-11 23:38 - 00302592 _____ () C:\Users\Mama\Desktop\Minecraft Skin Viewer.exe 2014-01-14 17:55 - 2014-01-14 18:07 - 00045056 ____H () C:\Users\Mama\Desktop\photothumb.db 2014-01-14 17:55 - 2014-01-14 18:06 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\PhotoScape 2014-01-08 17:04 - 2014-01-16 18:08 - 00009216 ____H () C:\Users\Hausaufgaben\Desktop\photothumb.db 2014-01-08 17:04 - 2014-01-16 08:44 - 00006144 ____H () C:\Users\Hausaufgaben\Downloads\photothumb.db 2014-01-08 17:03 - 2014-01-08 17:07 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\PhotoScape 2014-01-08 17:03 - 2014-01-08 17:03 - 00001035 _____ () C:\Users\Hausaufgaben\Desktop\PhotoScape.lnk 2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D () C:\Program Files (x86)\PhotoScape 2014-01-08 16:46 - 2014-01-08 16:46 - 21331096 _____ (Mooii) C:\Users\Hausaufgaben\Downloads\PhotoScape_V3.6.5.exe 2014-01-07 17:24 - 2014-01-07 17:26 - 43581054 _____ () C:\Users\Hausaufgaben\Downloads\Tropicraft v5.1.6 for MC v1.6.4.zip 2014-01-07 17:24 - 2014-01-07 17:24 - 02231448 _____ () C:\Users\Hausaufgaben\Downloads\minecraftforge-installer-1.6.4-9.11.1.916.jar 2014-01-07 16:53 - 2014-01-07 16:53 - 00035468 _____ () C:\Users\Hausaufgaben\Downloads\RudoPlays Shader.zip 2014-01-07 16:50 - 2013-12-31 06:14 - 02481492 _____ () C:\Users\Hausaufgaben\Desktop\Minecraft Forge 1.7.2 (doppelklick) .jar 2014-01-07 16:50 - 2013-12-01 01:10 - 02267797 _____ () C:\Users\Hausaufgaben\Desktop\Minecraft Forge 1.6.4 (doppelklick) .jar 2014-01-07 16:49 - 2014-01-07 16:49 - 05104927 _____ () C:\Users\Hausaufgaben\Downloads\Minecraft+Shader+Installation.zip 2014-01-07 16:39 - 2014-01-07 16:39 - 02998217 _____ () C:\Users\Hausaufgaben\Downloads\Trauminsel [Survival].rar 2014-01-07 16:38 - 2014-01-07 16:44 - 00000556 _____ () C:\Users\Hausaufgaben\Desktop\ufgaben.txt 2014-01-03 12:55 - 2014-01-03 12:55 - 05127324 _____ () C:\Users\Hausaufgaben\Downloads\faithful32pack.zip 2014-01-03 12:50 - 2014-01-03 12:51 - 16439432 _____ () C:\Users\Hausaufgaben\Downloads\Davids Detailed 64x64.zip 2014-01-03 12:39 - 2014-01-03 12:41 - 45042000 _____ () C:\Users\Hausaufgaben\Downloads\kop_64_1.7.2.zip 2014-01-03 12:34 - 2014-01-03 12:34 - 01957959 _____ () C:\Users\Hausaufgaben\Downloads\VKNikoVK.zip 2014-01-03 11:56 - 2014-01-03 11:56 - 15635763 _____ () C:\Users\Hausaufgaben\Desktop\New intro Template (Movie Maker).mp4 2014-01-03 11:55 - 2014-01-03 11:56 - 15635763 _____ () C:\Users\Hausaufgaben\Downloads\New intro Template (Movie Maker).mp4 2014-01-02 17:21 - 2014-01-18 15:46 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\.technic 2014-01-02 13:11 - 2014-01-02 13:12 - 00000000 ____D () C:\Users\Manh hao\Desktop\New Server 2014-01-02 11:56 - 2014-01-02 12:03 - 21836334 _____ () C:\Users\Manh hao\Downloads\Server.rar ==================== One Month Modified Files and Folders ======= 2014-02-01 10:07 - 2014-02-01 10:06 - 00014267 _____ () C:\Users\Hausaufgaben\Desktop\FRST.txt 2014-02-01 10:06 - 2013-10-26 11:40 - 00000000 ____D () C:\FRST 2014-02-01 10:05 - 2014-02-01 10:05 - 02080256 _____ (Farbar) C:\Users\Hausaufgaben\Downloads\FRST64.exe 2014-02-01 10:05 - 2014-02-01 10:05 - 02080256 _____ (Farbar) C:\Users\Hausaufgaben\Desktop\FRST64.exe 2014-02-01 10:03 - 2013-12-02 19:43 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\Youcam 2014-02-01 10:02 - 2013-02-08 19:35 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-01 10:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-01 10:01 - 2009-07-14 05:51 - 00029908 _____ () C:\Windows\setupact.log 2014-02-01 09:28 - 2013-02-06 17:00 - 01664455 _____ () C:\Windows\WindowsUpdate.log 2014-02-01 09:28 - 2009-07-14 05:45 - 00021648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-01 09:28 - 2009-07-14 05:45 - 00021648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-01 09:25 - 2013-12-02 19:43 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Adobe 2014-02-01 09:01 - 2013-04-02 19:53 - 00000000 ____D () C:\Users\Manh hao\AppData\Roaming\Skype 2014-02-01 08:53 - 2013-10-21 17:15 - 00000000 ____D () C:\Users\Manh hao\AppData\Roaming\.minecraft 2014-02-01 08:49 - 2014-02-01 08:48 - 00000000 ____D () C:\Users\Manh hao\Documents\Bandicam 2014-02-01 08:40 - 2013-02-16 11:52 - 00000000 ____D () C:\Users\Manh hao\AppData\Local\LogMeIn Hamachi 2014-02-01 08:38 - 2013-10-06 13:02 - 00000000 ____D () C:\Users\Manh hao\Documents\Youcam 2014-02-01 08:38 - 2013-05-24 18:26 - 00000000 ____D () C:\Users\Manh hao\AppData\Local\Adobe 2014-02-01 08:37 - 2013-12-02 19:45 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Skype 2014-02-01 08:36 - 2013-12-02 19:47 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Apple Computer 2014-02-01 08:36 - 2013-07-19 22:03 - 00002491 _____ () C:\Users\Public\Desktop\Safari.lnk 2014-02-01 08:36 - 2013-02-08 19:35 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-01 08:33 - 2013-12-02 19:43 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\LogMeIn Hamachi 2014-02-01 07:55 - 2013-06-28 21:37 - 00001301 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2014-02-01 07:38 - 2013-07-06 09:33 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA.job 2014-01-31 21:41 - 2013-12-21 11:26 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft 2014-01-31 21:19 - 2014-01-31 21:19 - 02321335 _____ () C:\Users\Hausaufgaben\Downloads\MineCraft Cracker.zip 2014-01-31 19:56 - 2014-01-31 19:54 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\BigDigServer-v1.3.9 2014-01-31 19:54 - 2014-01-31 19:54 - 49740104 _____ () C:\Users\Hausaufgaben\Desktop\BigDigServer-v1.3.9.zip 2014-01-31 19:54 - 2014-01-31 19:51 - 49740104 _____ () C:\Users\Hausaufgaben\Downloads\BigDigServer-v1.3.9.zip 2014-01-31 19:49 - 2014-01-31 19:36 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\Hexxit_Server_v1.0.10 (1) 2014-01-31 19:43 - 2014-01-31 19:43 - 01666994 _____ () C:\Users\Hausaufgaben\Downloads\Hack-slash-Mine---Server.zip 2014-01-31 19:43 - 2014-01-31 19:43 - 01666994 _____ () C:\Users\Hausaufgaben\Desktop\Hack-slash-Mine---Server.zip 2014-01-31 19:35 - 2014-01-31 19:35 - 48168194 _____ () C:\Users\Hausaufgaben\Desktop\Hexxit_Server_v1.0.10 (1).zip 2014-01-31 19:35 - 2014-01-31 19:33 - 48168194 _____ () C:\Users\Hausaufgaben\Downloads\Hexxit_Server_v1.0.10 (1).zip 2014-01-31 19:26 - 2013-06-22 10:04 - 00000390 _____ () C:\Windows\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005.job 2014-01-30 19:05 - 2014-01-30 19:05 - 00533690 _____ () C:\Users\Hausaufgaben\Downloads\GemsPlus_Forge_1.6.4v2.zip 2014-01-30 19:05 - 2014-01-30 19:05 - 00533690 _____ () C:\Users\Hausaufgaben\Desktop\GemsPlus_Forge_1.6.4v2.zip 2014-01-30 18:41 - 2013-12-27 20:46 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-30 18:39 - 2013-06-22 10:03 - 00000394 _____ () C:\Windows\Tasks\update-sys.job 2014-01-30 17:55 - 2014-01-30 17:55 - 02269863 _____ () C:\Users\Hausaufgaben\Downloads\forge-1.6.4-9.11.1.965-installer.jar 2014-01-30 17:55 - 2014-01-30 17:55 - 02269863 _____ () C:\Users\Hausaufgaben\Desktop\forge-1.6.4-9.11.1.965-installer.jar 2014-01-30 17:55 - 2014-01-30 17:55 - 00044309 _____ () C:\Users\Hausaufgaben\Downloads\Animated_Player_v1.3.0_mc1.6.4.zip 2014-01-29 19:17 - 2014-01-29 19:13 - 163518455 _____ () C:\Users\Hausaufgaben\Downloads\Minecraft_Texture_Pack.zip 2014-01-29 19:02 - 2014-01-29 19:02 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-01-29 19:02 - 2013-02-16 11:51 - 00000926 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2014-01-29 19:00 - 2014-01-29 19:00 - 00278584 _____ () C:\Windows\Minidump\012914-35895-01.dmp 2014-01-29 19:00 - 2013-02-16 18:36 - 00000000 ____D () C:\Windows\Minidump 2014-01-29 18:59 - 2013-02-16 18:36 - 365338559 _____ () C:\Windows\MEMORY.DMP 2014-01-29 18:14 - 2013-07-06 09:33 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core.job 2014-01-28 19:41 - 2014-01-28 19:41 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Hausaufgaben\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe 2014-01-28 19:41 - 2014-01-28 19:41 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Hausaufgaben\Desktop\BlueStacks-SplitInstaller_native_0.8.4.3036.exe 2014-01-28 17:51 - 2013-12-13 15:02 - 00007680 _____ () C:\Users\Hausaufgaben\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-01-28 17:46 - 2013-12-13 15:02 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\HyperCam3 2014-01-28 17:44 - 2014-01-25 18:29 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\Bandicam 2014-01-28 02:18 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\LogMeIn Hamachi 2014-01-27 17:48 - 2014-01-27 17:48 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Apple 2014-01-26 00:04 - 2014-01-26 00:04 - 00000000 ____D () C:\Users\Papa2\AppData\Local\Google 2014-01-26 00:03 - 2013-03-02 20:07 - 00000000 ____D () C:\Users\Papa 2014-01-26 00:02 - 2013-03-24 20:33 - 00000000 ____D () C:\Windows\System32\Tasks\Games 2014-01-25 23:59 - 2014-01-25 23:59 - 00065872 _____ () C:\Users\Papa2\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-25 23:59 - 2014-01-25 23:59 - 00000000 ____D () C:\Users\Papa2\Documents\Youcam 2014-01-25 23:59 - 2014-01-25 23:59 - 00000000 ____D () C:\Users\Papa2\AppData\Local\CyberLink 2014-01-25 23:58 - 2014-01-25 23:58 - 00001425 _____ () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-25 23:58 - 2014-01-25 23:58 - 00000020 ___SH () C:\Users\Papa2\ntuser.ini 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Vorlagen 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Startmenü 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Netzwerkumgebung 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Lokale Einstellungen 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Eigene Dateien 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Druckumgebung 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Documents\Eigene Musik 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Documents\Eigene Bilder 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Local\Verlauf 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\AppData\Local\Anwendungsdaten 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 _SHDL () C:\Users\Papa2\Anwendungsdaten 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ___RD () C:\Users\Papa2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Roaming\Apple Computer 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Roaming\Adobe 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\VirtualStore 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\LogMeIn 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2\AppData\Local\Adobe 2014-01-25 23:58 - 2014-01-25 23:58 - 00000000 ____D () C:\Users\Papa2 2014-01-25 22:00 - 2014-01-25 22:00 - 01462548 _____ () C:\Users\Hausaufgaben\Desktop\Intro Für TodayPlays By ItsZerCrash.mp4 2014-01-25 22:00 - 2014-01-25 21:59 - 01462548 _____ () C:\Users\Hausaufgaben\Downloads\Intro Für TodayPlays By ItsZerCrash.mp4 2014-01-25 18:43 - 2014-01-25 18:37 - 293186046 _____ () C:\Users\Hausaufgaben\Desktop\javaw 2014-01-25 18-37-53-869.avi 2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Selina\Desktop\Bandicam.lnk 2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Manh hao\Desktop\Bandicam.lnk 2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Mama\Desktop\Bandicam.lnk 2014-01-25 18:29 - 2014-01-25 18:29 - 00000992 _____ () C:\Users\Hausaufgaben\Desktop\Bandicam.lnk 2014-01-25 18:29 - 2014-01-25 18:29 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\BANDISOFT 2014-01-25 18:29 - 2014-01-25 18:29 - 00000000 ____D () C:\Program Files (x86)\Bandicam 2014-01-25 18:29 - 2013-02-15 20:21 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1 2014-01-25 18:28 - 2014-01-25 18:28 - 07377680 _____ (Bandisoft) C:\Users\Hausaufgaben\Downloads\bdcamsetup193.exe 2014-01-24 15:51 - 2013-02-16 13:48 - 00000000 ____D () C:\Users\Manh hao\AppData\Roaming\uTorrent 2014-01-24 14:46 - 2013-04-04 13:34 - 00000000 ____D () C:\Users\Manh hao\Desktop\Fraps 2014-01-20 19:59 - 2014-01-18 17:24 - 00000776 _____ () C:\Users\Hausaufgaben\Desktop\Beschreibung.txt 2014-01-18 20:51 - 2014-01-18 20:51 - 00004535 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamStudio.cfg 2014-01-18 20:51 - 2014-01-18 20:51 - 00000408 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamShapes.ini 2014-01-18 20:51 - 2014-01-18 20:51 - 00000408 _____ () C:\Users\Hausaufgaben\AppData\Roaming\CamLayout.ini 2014-01-18 20:51 - 2014-01-18 20:51 - 00000046 _____ () C:\Users\Hausaufgaben\AppData\Roaming\Camdata.ini 2014-01-18 20:07 - 2014-01-18 20:02 - 00000000 ____D () C:\Users\Hausaufgaben\Documents\My CamStudio Temp Files 2014-01-18 19:52 - 2014-01-18 19:52 - 00000096 _____ () C:\Users\Hausaufgaben\AppData\Roaming\version2.xml 2014-01-18 19:42 - 2014-01-01 16:46 - 00001941 _____ () C:\Users\Hausaufgaben\Desktop\Blender.lnk 2014-01-18 19:21 - 2014-01-18 19:21 - 03577897 _____ () C:\Users\Hausaufgaben\Downloads\Template.rar 2014-01-18 19:21 - 2014-01-18 19:21 - 03577897 _____ () C:\Users\Hausaufgaben\Desktop\Template.rar 2014-01-18 19:09 - 2014-01-18 19:09 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Publish Providers 2014-01-18 19:09 - 2014-01-18 18:57 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Sony 2014-01-18 19:05 - 2014-01-18 18:57 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Local\Sony 2014-01-18 19:01 - 2014-01-18 18:57 - 00000000 ____D () C:\ProgramData\Sony 2014-01-18 18:59 - 2014-01-18 18:59 - 00000000 ____D () C:\Program Files\CamStudio 2.7 2014-01-18 18:58 - 2014-01-18 18:58 - 00001038 _____ () C:\Users\Public\Desktop\Vegas Pro 12.0 (64-bit).lnk 2014-01-18 18:57 - 2014-01-18 18:57 - 00000000 ____D () C:\Program Files\Sony 2014-01-18 18:57 - 2014-01-18 18:57 - 00000000 ____D () C:\Program Files (x86)\Sony 2014-01-18 18:57 - 2014-01-18 18:56 - 11613447 _____ (CamStudio Open Source ) C:\Users\Hausaufgaben\Downloads\CamStudio_Setup_v2.7.2_r326__build_19Oct2013_.exe 2014-01-18 18:56 - 2014-01-18 18:48 - 243071608 _____ (Sony Creative Software Inc.) C:\Users\Hausaufgaben\Downloads\vegaspro12.0.770.exe 2014-01-18 18:50 - 2014-01-18 18:57 - 28147000 _____ () C:\Users\Hausaufgaben\Desktop\SonyVegasPro.v12.rar 2014-01-18 18:50 - 2014-01-18 18:49 - 28147000 _____ () C:\Users\Hausaufgaben\Downloads\SonyVegasPro.v12.rar 2014-01-18 17:10 - 2014-01-18 17:09 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Minecraft Skin Viewer 2014-01-18 16:32 - 2014-01-18 16:29 - 48168194 _____ () C:\Users\Hausaufgaben\Downloads\Hexxit_Server_v1.0.10.zip 2014-01-18 16:14 - 2013-11-29 19:16 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\INTRO TEMPLATE MOVIE MAKER 2014-01-18 15:47 - 2014-01-18 15:46 - 40343735 _____ () C:\Users\Hausaufgaben\Downloads\Sphax PureBDcraft 64x Hexxit Patch 1.5.2 by werri33.zip 2014-01-18 15:46 - 2014-01-02 17:21 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\.technic 2014-01-18 15:45 - 2014-01-18 15:45 - 02295368 _____ () C:\Users\Hausaufgaben\Desktop\Technic Launcher Cracked.exe 2014-01-18 15:45 - 2014-01-18 15:44 - 02295368 _____ () C:\Users\Hausaufgaben\Downloads\Technic Launcher Cracked.exe 2014-01-18 12:08 - 2013-10-19 17:35 - 00008704 _____ () C:\Users\Manh hao\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-01-18 11:57 - 2013-10-19 17:15 - 00000000 ____D () C:\Users\Manh hao\Documents\HyperCam3 2014-01-17 17:55 - 2013-04-02 19:53 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-01-17 17:55 - 2013-04-02 19:53 - 00000000 ____D () C:\ProgramData\Skype 2014-01-17 17:19 - 2014-01-17 17:19 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-01-17 17:18 - 2014-01-17 17:18 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-01-17 16:58 - 2014-01-17 16:43 - 00000000 ____D () C:\ProgramData\BlueStacks 2014-01-17 16:57 - 2014-01-17 16:43 - 00000000 ____D () C:\ProgramData\BlueStacksSetup 2014-01-17 15:06 - 2014-01-17 15:06 - 67234966 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 128x.zip 2014-01-17 15:06 - 2014-01-17 15:06 - 36021856 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 64x.zip 2014-01-17 15:01 - 2014-01-17 15:01 - 21042665 _____ () C:\Users\Manh hao\Downloads\Sphax Patch For Hexxit 32x.zip 2014-01-16 19:03 - 2013-04-20 14:42 - 00000000 ____D () C:\Program Files (x86)\Cinema 4D R12 2014-01-16 18:41 - 2013-04-02 19:53 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-01-16 18:40 - 2014-01-16 18:38 - 35098272 _____ (Skype Technologies S.A.) C:\Users\Hausaufgaben\Downloads\SkypeSetupFull-6.11.59.exe 2014-01-16 18:34 - 2014-01-16 18:34 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-16 18:33 - 2014-01-16 18:34 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-16 18:33 - 2014-01-16 18:33 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-16 18:33 - 2014-01-16 18:33 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-16 18:33 - 2014-01-16 18:33 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-16 18:29 - 2014-01-16 18:28 - 29141928 _____ (Oracle Corporation) C:\Users\Hausaufgaben\Downloads\jre-7u51-windows-i586.exe 2014-01-16 18:17 - 2014-01-16 18:12 - 17142553 _____ () C:\Users\Hausaufgaben\Downloads\Template by AdnoArt.rar 2014-01-16 18:12 - 2014-01-16 18:12 - 04087248 _____ () C:\Users\Hausaufgaben\Downloads\GreyScaleGorillaLightKitPro1.lib4d 2014-01-16 18:09 - 2014-01-16 18:08 - 37154174 _____ () C:\Users\Hausaufgaben\Downloads\minecraft 2.lib4d 2014-01-16 18:08 - 2014-01-08 17:04 - 00009216 ____H () C:\Users\Hausaufgaben\Desktop\photothumb.db 2014-01-16 17:43 - 2014-01-16 17:43 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\MonkeyJam 2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Selina\Desktop\MonkeyJam.lnk 2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Manh hao\Desktop\MonkeyJam.lnk 2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Mama\Desktop\MonkeyJam.lnk 2014-01-16 17:42 - 2014-01-16 17:42 - 00000957 _____ () C:\Users\Hausaufgaben\Desktop\MonkeyJam.lnk 2014-01-16 17:42 - 2014-01-16 17:42 - 00000000 ____D () C:\Program Files (x86)\MonkeyJam 2014-01-16 17:41 - 2014-01-16 17:41 - 01397331 _____ (GiantScreamingRobotMonkeys ) C:\Users\Hausaufgaben\Downloads\MonkeyJamSetup_3.0.exe 2014-01-16 17:35 - 2014-01-01 16:46 - 00000000 ____D () C:\Users\Hausaufgaben\Desktop\Blender And After effects sullexForMc 2014-01-16 08:44 - 2014-01-08 17:04 - 00006144 ____H () C:\Users\Hausaufgaben\Downloads\photothumb.db 2014-01-16 08:41 - 2014-01-16 08:40 - 37739800 _____ (Google Inc.) C:\Users\Hausaufgaben\Downloads\ChromeStandalone32Setup.exe 2014-01-14 18:50 - 2014-01-14 18:32 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Skype 2014-01-14 18:23 - 2014-01-14 18:23 - 01249424 _____ () C:\Users\Mama\Downloads\Minecraftrig-by-skrab-Edited-by-KBDESIGNZ.blend 2014-01-14 18:23 - 2014-01-14 18:23 - 00000792 _____ () C:\Users\Mama\Desktop\Minecraftrig-by-skrab-Edited-by-KBDESIGNZ.lnk 2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Blender Foundation 2014-01-14 18:16 - 2014-01-14 18:16 - 00000000 ____D () C:\Users\Mama\.thumbnails 2014-01-14 18:16 - 2013-03-02 20:05 - 00000000 ____D () C:\Users\Mama 2014-01-14 18:15 - 2014-01-14 18:15 - 00079569 _____ () C:\Users\Mama\Downloads\MinecraftPlayer.zip 2014-01-14 18:07 - 2014-01-14 17:55 - 00045056 ____H () C:\Users\Mama\Desktop\photothumb.db 2014-01-14 18:06 - 2014-01-14 18:00 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Minecraft Skin Viewer 2014-01-14 18:06 - 2014-01-14 17:55 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\PhotoScape 2014-01-14 18:00 - 2014-01-14 18:00 - 00140332 _____ () C:\Users\Mama\Downloads\Minecraft Skin Viewer.zip 2014-01-14 18:00 - 2014-01-14 18:00 - 00140332 _____ () C:\Users\Mama\Desktop\Minecraft Skin Viewer.zip 2014-01-14 18:00 - 2014-01-14 18:00 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\WinRAR 2014-01-14 18:00 - 2013-03-02 20:05 - 00000000 ____D () C:\Users\Mama\AppData\Local\LogMeIn Hamachi 2014-01-14 17:55 - 2013-03-02 20:05 - 00065872 _____ () C:\Users\Mama\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-14 17:06 - 2013-04-28 20:57 - 00000000 ____D () C:\Users\Mama\AppData\Roaming\Mining 2014-01-11 08:54 - 2013-12-02 19:42 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\Adobe 2014-01-10 19:10 - 2013-10-31 10:44 - 01109677 _____ (TeamExtreme) C:\Users\Manh hao\Desktop\Minecraft Launcher.exe 2014-01-10 19:09 - 2013-04-26 16:33 - 00000000 ____D () C:\Users\Manh hao\minecraft 2014-01-08 17:07 - 2014-01-08 17:03 - 00000000 ____D () C:\Users\Hausaufgaben\AppData\Roaming\PhotoScape 2014-01-08 17:03 - 2014-01-08 17:03 - 00001035 _____ () C:\Users\Hausaufgaben\Desktop\PhotoScape.lnk 2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D () C:\Program Files (x86)\PhotoScape 2014-01-08 16:46 - 2014-01-08 16:46 - 21331096 _____ (Mooii) C:\Users\Hausaufgaben\Downloads\PhotoScape_V3.6.5.exe 2014-01-07 17:26 - 2014-01-07 17:24 - 43581054 _____ () C:\Users\Hausaufgaben\Downloads\Tropicraft v5.1.6 for MC v1.6.4.zip 2014-01-07 17:24 - 2014-01-07 17:24 - 02231448 _____ () C:\Users\Hausaufgaben\Downloads\minecraftforge-installer-1.6.4-9.11.1.916.jar 2014-01-07 16:53 - 2014-01-07 16:53 - 00035468 _____ () C:\Users\Hausaufgaben\Downloads\RudoPlays Shader.zip 2014-01-07 16:49 - 2014-01-07 16:49 - 05104927 _____ () C:\Users\Hausaufgaben\Downloads\Minecraft+Shader+Installation.zip 2014-01-07 16:44 - 2014-01-07 16:38 - 00000556 _____ () C:\Users\Hausaufgaben\Desktop\ufgaben.txt 2014-01-07 16:39 - 2014-01-07 16:39 - 02998217 _____ () C:\Users\Hausaufgaben\Downloads\Trauminsel [Survival].rar 2014-01-03 12:55 - 2014-01-03 12:55 - 05127324 _____ () C:\Users\Hausaufgaben\Downloads\faithful32pack.zip 2014-01-03 12:51 - 2014-01-03 12:50 - 16439432 _____ () C:\Users\Hausaufgaben\Downloads\Davids Detailed 64x64.zip 2014-01-03 12:41 - 2014-01-03 12:39 - 45042000 _____ () C:\Users\Hausaufgaben\Downloads\kop_64_1.7.2.zip 2014-01-03 12:34 - 2014-01-03 12:34 - 01957959 _____ () C:\Users\Hausaufgaben\Downloads\VKNikoVK.zip 2014-01-03 11:56 - 2014-01-03 11:56 - 15635763 _____ () C:\Users\Hausaufgaben\Desktop\New intro Template (Movie Maker).mp4 2014-01-03 11:56 - 2014-01-03 11:55 - 15635763 _____ () C:\Users\Hausaufgaben\Downloads\New intro Template (Movie Maker).mp4 2014-01-02 17:23 - 2013-10-28 19:16 - 00000000 ____D () C:\Users\Manh hao\Desktop\hhh 2014-01-02 13:12 - 2014-01-02 13:11 - 00000000 ____D () C:\Users\Manh hao\Desktop\New Server 2014-01-02 12:03 - 2014-01-02 11:56 - 21836334 _____ () C:\Users\Manh hao\Downloads\Server.rar Files to move or delete: ==================== C:\Users\Hausaufgaben\AppData\Roaming\CamLayout.ini C:\Users\Hausaufgaben\AppData\Roaming\CamShapes.ini Some content of TEMP: ==================== C:\Users\Hausaufgaben\AppData\Local\temp\Creative Cloud Helper.exe C:\Users\Hausaufgaben\AppData\Local\temp\CreativeCloudSet-Up.exe C:\Users\Mama\AppData\Local\temp\SkypeSetup.exe C:\Users\Manh hao\AppData\Local\temp\Execute2App.exe C:\Users\Manh hao\AppData\Local\temp\i4jdel0.exe C:\Users\Manh hao\AppData\Local\temp\jansi-32-git-Bukkit-1.6.2-R1.0-9-g9cd35ee-b2908jnks.dll C:\Users\Manh hao\AppData\Local\temp\jansi-64-git-Bukkit-1.5.2-R1.0-27-gdc25312-b2815jnks.dll C:\Users\Manh hao\AppData\Local\temp\jansi-64-git-Bukkit-1.6.2-R1.0-9-g9cd35ee-b2908jnks.dll C:\Users\Manh hao\AppData\Local\temp\jansi-64-git-Bukkit-1.6.4-R2.0-26-g31d7c5f-b2943jnks.dll C:\Users\Manh hao\AppData\Local\temp\jwq2ott-.dll C:\Users\Manh hao\AppData\Local\temp\Kies2RemoveAll.exe C:\Users\Manh hao\AppData\Local\temp\msvcp90.dll C:\Users\Manh hao\AppData\Local\temp\msvcr90.dll C:\Users\Manh hao\AppData\Local\temp\SkypeSetup.exe C:\Users\Selina\AppData\Local\temp\i4jdel0.exe C:\Users\Selina\AppData\Local\temp\SkypeSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-25 21:11 ==================== End Of Log ============================ --- --- --- und hier Die Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-10-2013 Ran by Manh hao at 2013-10-26 12:44:32 Running from C:\Users\Manh hao\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== µTorrent (x32 Version: 3.3.0.29111) 7-Zip 9.20 (x32) Adobe Creative Cloud (x32 Version: 2.0.0.183) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.202) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Advanced System Protector (x32 Version: 2.1.1000.10844) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) AppsHat Mobile Apps (HKCU Version: 1.0.0.0) Ask Toolbar (x32 Version: 1.15.18.0) Atheros WiFi Driver Installation (x32 Version: 3.0) Avira Free Antivirus (x32 Version: 13.0.0.3185) Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.4.37268) Bandicam (x32 Version: 1.8.6.321) Bandisoft MPEG-1 Decoder (x32) BitGuard (x32) Blender (Version: 2.66a) Bonjour (Version: 3.0.0.10) Bundled software uninstaller (x32) Canon MX510 series MP Drivers Cheat Engine 6.2 (x32) Cinema 4D version R12 (x32 Version: R12) Craften Terminal 3.3.4897.28268 (x32 Version: 3.3.4897.28268) CyberLink YouCam 5 (x32 Version: 5.0.1129) D3DX10 (x32 Version: 15.4.2368.0902) DAEMON Tools Lite (x32 Version: 4.47.1.0333) Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287) FilesFrog Update Checker (x32) Fotogalerie (x32 Version: 16.4.3508.0205) Fraps (x32) Free YouTube Download Manager (x32 Version: 1.0.0.4) Game Booster 3 (x32 Version: 3.4) Google Chrome (x32 Version: 30.0.1599.101) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54) Google Update Helper (x32 Version: 1.3.21.165) Grand Theft Auto IV (x32 Version: 1.0.0013.131) Grand Theft Auto IV (x32 Version: 1.00.0000) HyperCam 3 (x32 Version: 3.5.1211.29) iDemo (x32 Version: 1.3.1) iExplorer 3.1.0.2 (x32) iFunbox (v2.1.2228.731), iFunbox DevTeam (x32 Version: v2.1.2228.731) Intel(R) Processor Graphics (x32 Version: 9.17.10.2932) ipswDownloader 2.0 (x32 Version: 2.0) iTunes (Version: 11.0.5.5) Java 7 Update 15 (x32 Version: 7.0.150) Java 7 Update 17 (64-bit) (Version: 7.0.170) Java Auto Updater (x32 Version: 2.1.9.0) LogMeIn Hamachi (x32 Version: 2.2.0.58) McAfee Security Scan Plus (Version: 3.8.130.8) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320) Microsoft .NET Framework 4 Extended (Version: 4.0.30320) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0) Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Movie Maker (x32 Version: 16.4.3508.0205) Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0) Mozilla Maintenance Service (x32 Version: 24.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1109.0912) No-IP DUC (x32 Version: 4.0.1) Notepad++ (x32 Version: 6.3.1) OpenOffice 4.0.1 (x32 Version: 4.01.9714) Photo Common (x32 Version: 16.4.3508.0205) Photo Gallery (x32 Version: 16.4.3508.0205) Pokémon Trading Card Game Online (x32 Version: 1.0.0) QuickShare (x32 Version: 1.146.60.12450) QuickTime (x32 Version: 7.72.80.56) Reflection (x32 Version: 1.0.1) Reflector (Version: 1.2.3) ROBLOX Player (x32) Rockstar Games Social Club (x32 Version: 1.00.0000) Safari (x32 Version: 5.34.57.2) Samsung Kies (x32 Version: 2.6.0.13091_9) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0) Skype™ 6.7 (x32 Version: 6.7.102) TeamSpeak 3 Client (HKCU Version: 3.0.10) TubeBox Smartbar (x32 Version: 1.6.1.864) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Windows Live Communications Platform (x32 Version: 16.4.3508.0205) Windows Live Essentials (x32 Version: 16.4.3508.0205) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3508.0205) Windows Live Messenger (x32 Version: 16.4.3508.0205) Windows Live Photo Common (x32 Version: 16.4.3508.0205) Windows Live PIMT Platform (x32 Version: 16.4.3508.0205) Windows Live SOXE (x32 Version: 16.4.3508.0205) Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205) Windows Live UX Platform (x32 Version: 16.4.3508.0205) Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205) WinPcap 4.1.3 (x32 Version: 4.1.0.2980) WinRAR 4.20 (64-bit) (Version: 4.20.0) ==================== Restore Points ========================= 12-10-2013 16:53:53 Konfiguriert Grand Theft Auto IV 13-10-2013 08:27:28 Windows Modules Installer 19-10-2013 07:46:45 OpenOffice 4.0.1 wird installiert ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-10-26 10:10 - 00010584 ____A C:\Windows\system32\Drivers\etc\hosts 198.71.80.192 www.imeetzu.com 198.71.80.192 imeetzu.com 198.71.80.192 www.omegle.com 198.71.80.192 omegle.com 198.71.80.192 www.runescape.com 198.71.80.192 runescape.com 198.71.80.192 google.com 198.71.80.192 www.google.ae 198.71.80.192 www.google.com.af 198.71.80.192 www.google.com.ag 198.71.80.192 www.google.off.ai 198.71.80.192 www.google.am 198.71.80.192 www.google.com.ar 198.71.80.192 www.google.as 198.71.80.192 www.google.at 198.71.80.192 www.google.com.au 198.71.80.192 www.google.az 198.71.80.192 www.google.ba 198.71.80.192 www.google.com.bd 198.71.80.192 www.google.be 198.71.80.192 www.google.bg 198.71.80.192 www.google.com.bh 198.71.80.192 www.google.bi 198.71.80.192 www.google.com.bo 198.71.80.192 www.google.com.br 198.71.80.192 www.google.bs 198.71.80.192 www.google.co.bw 198.71.80.192 www.google.com.bz 198.71.80.192 www.google.ca There are 335 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {006B2AF6-5F24-4A60-85AB-33589BA0C86E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2013-09-27] () Task: {0B377082-372A-460F-8E01-A0443EECB7B2} - System32\Tasks\{3C6C8AAD-79F6-4B6F-B3C9-D3D8F24CE673} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Task: {1D206C2B-673C-4CBD-A2F0-09262EA4756C} - System32\Tasks\{5FBB87BF-6D59-4991-B95A-33AA1363574D} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Task: {22B6E24A-2B5C-4430-B61A-A22AE3B7B819} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2823766941-1517505164-3398274235-1003 Task: {2450BF80-EECF-4ED9-A9C4-B841EFD05086} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-08-31] () Task: {2A4C69CC-04D5-4D65-8DB5-5B667BD8306F} - System32\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2013-09-27] () Task: {46D402CF-13CD-44D6-A19E-0699CC9B120A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.) Task: {46DEF105-2B4D-496C-A89F-071380058FEC} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe Task: {571EE918-E355-4470-B875-32E398691DDB} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe Task: {589BC977-4536-4E72-A09B-C714B11DFE1D} - System32\Tasks\Windows Update Check - 0x0D1402B8 => C:\ProgramData\AppleDev0\rzsbkotiu.exe [2013-04-26] (Elite Bypassers) Task: {59BEBB7E-3759-4212-8B0F-288FB729F4A7} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-02-08] () Task: {676B9DBE-15B7-4789-A644-51C0A19B7870} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.) Task: {686BF8D5-6E15-468B-B131-4E9F6375DFF2} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-10-23] () Task: {733E9FD4-B414-4277-AC0B-02DDF1DBD2C3} - System32\Tasks\{3CC28608-C036-41C3-98A2-546BB03EA941} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Task: {A4CFEA5C-F843-4156-8EA9-00275B3CEED0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-08] (Google Inc.) Task: {AA2C5F6F-B6FF-44A7-ABE9-4475D00EB6C9} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Mama => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated) Task: {AC216A19-31E5-4B12-B0D8-8F9F4C544CDF} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Papa => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated) Task: {AC4F3E75-1166-4560-A71B-FC3A3BAB29EE} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Manh hao\AppData\Local\FilesFrog Update Checker\update_checker.exe [2013-10-17] (Somoto) Task: {AF7B0A45-0D7F-4724-AB58-6E6DA4BADDA8} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe Task: {B46EEE2A-E542-4607-94BC-0CAD2F2838F8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-08] (Google Inc.) Task: {B6C79ADC-A164-401A-83AF-E8B3CBE8BB76} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-10-22] () Task: {C9E8F188-B3E9-4E33-83F0-22A60EB2BD71} - System32\Tasks\DealPly => C:\Users\Manh hao\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-02-27] () Task: {CD872EF5-4893-4078-9E29-8261E6F05B15} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe Task: {D19918A2-F1C4-4808-B2B0-045E9C516599} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Manh hao => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated) Task: {DA07D46A-4A59-4298-8081-6B92C75417C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DC563907-3844-4FCD-BFF2-09C45F85FD6E} - System32\Tasks\{D56DCA6A-FCA2-48D3-837B-5690EEC3AADC} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsProgressBar Task: {DC5950C9-FE5A-4BFB-BB9F-F1F4A4158A85} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Selina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated) Task: {E0532C83-0F74-42AA-BE8D-893D8FB01598} - System32\Tasks\{25703773-878B-449E-9B99-1BE5B8352EFA} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsInstall Task: {E0DDF08F-C648-4C94-9437-C99D03267068} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-04-09] (Systweak) Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core.job => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA.job => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe Task: C:\Windows\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Loaded Modules (whitelisted) ============= 2013-06-20 00:45 - 2013-06-20 00:45 - 03317616 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll 2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2012-12-14 03:42 - 2012-12-14 03:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Faulty Device Manager Devices ============= Name: PCI-Gerät Description: PCI-Gerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Ethernet-Controller Description: Ethernet-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: SM-Bus-Controller Description: SM-Bus-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Generic Bluetooth Adapter Description: Generic Bluetooth Adapter Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: GenericAdapter Service: BTHUSB Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Event log errors: ========================= Application errors: ================== Error: (10/26/2013 00:34:21 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/26/2013 00:33:01 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT) Description: Die Datei QueryInterface(57) konnte nicht geladen werden. Fehlercode: 0x1 Error: (10/26/2013 10:44:03 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: schtasks.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce792c3 Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0017966f ID des fehlerhaften Prozesses: 0xdc0 Startzeit der fehlerhaften Anwendung: 0xschtasks.exe0 Pfad der fehlerhaften Anwendung: schtasks.exe1 Pfad des fehlerhaften Moduls: schtasks.exe2 Berichtskennung: schtasks.exe3 Error: (10/26/2013 10:44:02 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: schtasks.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce792c3 Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0017966f ID des fehlerhaften Prozesses: 0xdc0 Startzeit der fehlerhaften Anwendung: 0xschtasks.exe0 Pfad der fehlerhaften Anwendung: schtasks.exe1 Pfad des fehlerhaften Moduls: schtasks.exe2 Berichtskennung: schtasks.exe3 Error: (10/26/2013 10:44:00 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: schtasks.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce792c3 Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0017966f ID des fehlerhaften Prozesses: 0x1b88 Startzeit der fehlerhaften Anwendung: 0xschtasks.exe0 Pfad der fehlerhaften Anwendung: schtasks.exe1 Pfad des fehlerhaften Moduls: schtasks.exe2 Berichtskennung: schtasks.exe3 Error: (10/26/2013 10:43:57 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: schtasks.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce792c3 Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0017966f ID des fehlerhaften Prozesses: 0x1b88 Startzeit der fehlerhaften Anwendung: 0xschtasks.exe0 Pfad der fehlerhaften Anwendung: schtasks.exe1 Pfad des fehlerhaften Moduls: schtasks.exe2 Berichtskennung: schtasks.exe3 Error: (10/26/2013 10:42:05 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cmd.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78e2b Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0017966f ID des fehlerhaften Prozesses: 0x131c Startzeit der fehlerhaften Anwendung: 0xcmd.exe0 Pfad der fehlerhaften Anwendung: cmd.exe1 Pfad des fehlerhaften Moduls: cmd.exe2 Berichtskennung: cmd.exe3 Error: (10/26/2013 10:42:02 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cmd.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce78e2b Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0017966f ID des fehlerhaften Prozesses: 0x131c Startzeit der fehlerhaften Anwendung: 0xcmd.exe0 Pfad der fehlerhaften Anwendung: cmd.exe1 Pfad des fehlerhaften Moduls: cmd.exe2 Berichtskennung: cmd.exe3 Error: (10/26/2013 10:41:58 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: timeout.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc013 Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0017966f ID des fehlerhaften Prozesses: 0x898 Startzeit der fehlerhaften Anwendung: 0xtimeout.exe0 Pfad der fehlerhaften Anwendung: timeout.exe1 Pfad des fehlerhaften Moduls: timeout.exe2 Berichtskennung: timeout.exe3 Error: (10/26/2013 10:41:55 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: timeout.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc013 Name des fehlerhaften Moduls: bitguard.dll, Version: 2.6.1694.246, Zeitstempel: 0x5253f78e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0017966f ID des fehlerhaften Prozesses: 0x898 Startzeit der fehlerhaften Anwendung: 0xtimeout.exe0 Pfad der fehlerhaften Anwendung: timeout.exe1 Pfad des fehlerhaften Moduls: timeout.exe2 Berichtskennung: timeout.exe3 System errors: ============= Error: (10/26/2013 00:35:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/26/2013 00:33:57 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (10/26/2013 00:33:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1066 Error: (10/26/2013 00:33:02 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%310. Error: (10/26/2013 00:32:44 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BitGuard" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/26/2013 00:32:44 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BitGuard erreicht. Error: (10/26/2013 00:32:33 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (10/26/2013 10:41:08 AM) (Source: DCOM) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (10/26/2013 10:08:59 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BitGuard" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/26/2013 10:08:59 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BitGuard erreicht. Microsoft Office Sessions: ========================= Error: (10/26/2013 00:34:21 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/26/2013 00:33:01 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT) Description: QueryInterface(57)0x1 Error: (10/26/2013 10:44:03 AM) (Source: Application Error)(User: ) Description: schtasks.exe6.1.7601.175144ce792c3bitguard.dll2.6.1694.2465253f78ec00000050017966fdc001ced22785347ff9C:\Windows\SysWOW64\schtasks.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dllc39ab62e-3e1a-11e3-92c2-efa5c2ef6c7e Error: (10/26/2013 10:44:02 AM) (Source: Application Error)(User: ) Description: schtasks.exe6.1.7601.175144ce792c3bitguard.dll2.6.1694.2465253f78ec00000050017966fdc001ced22785347ff9C:\Windows\SysWOW64\schtasks.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dllc3025e1d-3e1a-11e3-92c2-efa5c2ef6c7e Error: (10/26/2013 10:44:00 AM) (Source: Application Error)(User: ) Description: schtasks.exe6.1.7601.175144ce792c3bitguard.dll2.6.1694.2465253f78ec00000050017966f1b8801ced22782490fe3C:\Windows\SysWOW64\schtasks.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dllc1f7c3fe-3e1a-11e3-92c2-efa5c2ef6c7e Error: (10/26/2013 10:43:57 AM) (Source: Application Error)(User: ) Description: schtasks.exe6.1.7601.175144ce792c3bitguard.dll2.6.1694.2465253f78ec00000050017966f1b8801ced22782490fe3C:\Windows\SysWOW64\schtasks.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dllc059948e-3e1a-11e3-92c2-efa5c2ef6c7e Error: (10/26/2013 10:42:05 AM) (Source: Application Error)(User: ) Description: cmd.exe6.1.7601.175144ce78e2bbitguard.dll2.6.1694.2465253f78ec00000050017966f131c01ced2273dace21cC:\Windows\SysWOW64\cmd.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll7d9255de-3e1a-11e3-92c2-efa5c2ef6c7e Error: (10/26/2013 10:42:02 AM) (Source: Application Error)(User: ) Description: cmd.exe6.1.7601.175144ce78e2bbitguard.dll2.6.1694.2465253f78ec00000050017966f131c01ced2273dace21cC:\Windows\SysWOW64\cmd.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll7b9c1384-3e1a-11e3-92c2-efa5c2ef6c7e Error: (10/26/2013 10:41:58 AM) (Source: Application Error)(User: ) Description: timeout.exe6.1.7600.163854a5bc013bitguard.dll2.6.1694.2465253f78ec00000050017966f89801ced2273757d902C:\Windows\SysWOW64\timeout.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll79469a1f-3e1a-11e3-92c2-efa5c2ef6c7e Error: (10/26/2013 10:41:55 AM) (Source: Application Error)(User: ) Description: timeout.exe6.1.7600.163854a5bc013bitguard.dll2.6.1694.2465253f78ec00000050017966f89801ced2273757d902C:\Windows\SysWOW64\timeout.exec:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll773628a3-3e1a-11e3-92c2-efa5c2ef6c7e ==================== Memory info =========================== Percentage of memory in use: 44% Total physical RAM: 4043.86 MB Available physical RAM: 2250.54 MB Total Pagefile: 8085.9 MB Available Pagefile: 5970.65 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:283.89 GB) (Free:93.66 GB) NTFS Drive e: (GTA IV Disc 1) (CDROM) (Total:7.03 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 82E28B67) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=284 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 03 Ran by Hausaufgaben at 2014-02-01 12:42:41 Running from C:\Users\Hausaufgaben\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== µTorrent (x32 Version: 3.3.0.29111 - BitTorrent Inc.) 7-Zip 9.20 (x32 Version: - ) Adobe After Effects CC (x32 Version: 12.1 - Adobe Systems Incorporated) Adobe Creative Cloud (x32 Version: 2.3.0.322 - Adobe Systems Incorporated) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.202 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Apowersoft kostenloser Bildschirmrekorder V1.2.4 (x32 Version: 1.2.4 - Apowersoft) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) Atheros WiFi Driver Installation (x32 Version: 3.0 - Atheros) Avira Free Antivirus (x32 Version: 13.0.0.3185 - Avira) Bandicam (x32 Version: 1.9.3.492 - Bandisoft.com) Bandisoft MPEG-1 Decoder (x32 Version: - Bandisoft.com) Blender (Version: 2.69 - Blender Foundation) Bonjour (Version: 3.0.0.10 - Apple Inc.) CamStudio 2.7.2 (Version: 2.7.2 - CamStudio Open Source) Canon MX510 series MP Drivers (Version: - ) Cheat Engine 6.2 (x32 Version: - Dark Byte) Cinema 4D version R12 (x32 Version: R12 - Salat Production) Craften Terminal 3.3.4897.28268 (x32 Version: 3.3.4897.28268 - Craften Dev Team) CyberLink YouCam 5 (x32 Version: 5.0.1129 - CyberLink Corp.) CyberLink YouCam 5 (x32 Version: 5.0.1129 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (x32 Version: 4.47.1.0333 - Disc Soft Ltd) Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287 - Skype Limited) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Fraps (x32 Version: - ) Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec) Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec) Hidden Game Booster 3 (x32 Version: 3.4 - IObit) Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.) Google Earth (x32 Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden Grand Theft Auto IV (x32 Version: 1.00.0000 - Rockstar Games) HyperCam 3 (x32 Version: 3.5.1211.29 - Solveig Multimedia) iClone v4.3 PRO (x32 Version: 4.3.1929.1 - Reallusion Inc.) iDemo (x32 Version: 1.3.1 - Plutinosoft LLC) iExplorer 3.1.0.2 (x32 Version: - Macroplant LLC) iFunbox (v2.1.2228.731), iFunbox DevTeam (x32 Version: v2.1.2228.731 - ) Intel(R) Processor Graphics (x32 Version: 9.17.10.2932 - Intel Corporation) ipswDownloader 2.0 (x32 Version: 2.0 - Sergey 'iOrange' Kudlay) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 17 (64-bit) (Version: 7.0.170 - Oracle) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden LogMeIn Hamachi (x32 Version: 2.2.0.114 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.114 - LogMeIn, Inc.) Hidden McAfee Security Scan Plus (Version: 3.8.130.8 - McAfee, Inc.) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden Minecraft1.7.2 (x32 Version: - ) MonkeyJam 3_050529 (x32 Version: - GiantScreamingRobotMonkeys) Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 24.0 - Mozilla) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden No-IP DUC (x32 Version: 4.0.1 - Vitalwerks Internet Solutions LLC) Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0 - Nokia) Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden Notepad++ (x32 Version: 6.3.1 - ) OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation) PC Connectivity Solution (x32 Version: 12.0.109.0 - Nokia) Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden PhotoScape (x32 Version: - ) Pokémon Trading Card Game Online (x32 Version: 1.0.0 - The Pokémon Company International) QuickShare (x32 Version: 1.146.60.12450 - Linkury Inc.) <==== ATTENTION QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) Reflection (x32 Version: 1.0.1 - Squirrels) Reflector (Version: 1.2.3 - Squirrels) Reflector (Version: 1.3.3.1 - Squirrels) ROBLOX Player (x32 Version: - ROBLOX Corporation) Rockstar Games Social Club (x32 Version: 1.00.0000 - Rockstar Games) Safari (x32 Version: 5.34.57.2 - Apple Inc.) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.) Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synthesia (x32 Version: 9 - Synthesia LLC) TubeBox Smartbar (x32 Version: 1.6.1.864 - ReSoft Ltd.) <==== ATTENTION Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Vegas Pro 12.0 (64-bit) (Version: 12.0.770 - Sony) VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN) Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0 - Nokia) WinPcap 4.1.3 (x32 Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinRAR 4.20 (64-bit) (Version: 4.20.0 - win.rar GmbH) ==================== Restore Points ========================= 12-10-2013 16:53:53 Konfiguriert Grand Theft Auto IV 13-10-2013 08:27:28 Windows Modules Installer 19-10-2013 07:46:45 OpenOffice 4.0.1 wird installiert 26-10-2013 16:23:13 ComboFix created restore point 20-11-2013 17:55:05 Installed Reflector 05-12-2013 18:24:02 Gerätetreiber-Paketinstallation: Apowersoft Audio-, Video- und Gamecontroller 20-12-2013 20:01:36 Installiert iClone 16-01-2014 17:30:18 Installed Java 7 Update 51 25-01-2014 20:19:16 Geplanter Prüfpunkt 01-02-2014 11:35:26 Removed Apple Application Support ==================== Hosts content: ========================== 2009-07-14 03:34 - 2014-01-31 21:19 - 00010584 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {006B2AF6-5F24-4A60-85AB-33589BA0C86E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2013-09-27] () Task: {0B377082-372A-460F-8E01-A0443EECB7B2} - System32\Tasks\{3C6C8AAD-79F6-4B6F-B3C9-D3D8F24CE673} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Ultimate Account hacker - V 1.5.1.exe Task: {1D206C2B-673C-4CBD-A2F0-09262EA4756C} - System32\Tasks\{5FBB87BF-6D59-4991-B95A-33AA1363574D} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Ultimate Account hacker - V 1.5.1.exe Task: {2450BF80-EECF-4ED9-A9C4-B841EFD05086} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-08-31] () Task: {2A4C69CC-04D5-4D65-8DB5-5B667BD8306F} - System32\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2013-09-27] () Task: {46D402CF-13CD-44D6-A19E-0699CC9B120A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.) Task: {46DEF105-2B4D-496C-A89F-071380058FEC} - \RegClean Pro_DEFAULT No Task File Task: {571EE918-E355-4470-B875-32E398691DDB} - \RegClean Pro_UPDATES No Task File Task: {589BC977-4536-4E72-A09B-C714B11DFE1D} - System32\Tasks\Windows Update Check - 0x0D1402B8 => C:\ProgramData\AppleDev0\rzsbkotiu.exe [2013-10-26] (Elite Bypassers) Task: {59BEBB7E-3759-4212-8B0F-288FB729F4A7} - \Scheduled Update for Ask Toolbar No Task File Task: {676B9DBE-15B7-4789-A644-51C0A19B7870} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-06] (Facebook Inc.) Task: {686BF8D5-6E15-468B-B131-4E9F6375DFF2} - \Software Updater Ui No Task File Task: {733E9FD4-B414-4277-AC0B-02DDF1DBD2C3} - System32\Tasks\{3CC28608-C036-41C3-98A2-546BB03EA941} => C:\Users\Manh hao\Desktop\Minecraft 1.5.1 Ultimate Account hacker - V 1.5.1.exe Task: {A2D387CA-C392-4B99-9069-0D2656F6C6AD} - System32\Tasks\AdobeAAMUpdater-1.0-Manhhao-PC-Manh hao => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-10] (Adobe Systems Incorporated) Task: {A4CFEA5C-F843-4156-8EA9-00275B3CEED0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-08] (Google Inc.) Task: {AF7B0A45-0D7F-4724-AB58-6E6DA4BADDA8} - \RegClean Pro No Task File Task: {B46EEE2A-E542-4607-94BC-0CAD2F2838F8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-08] (Google Inc.) Task: {B6C79ADC-A164-401A-83AF-E8B3CBE8BB76} - \Software Updater No Task File Task: {C9E8F188-B3E9-4E33-83F0-22A60EB2BD71} - \DealPly No Task File Task: {CD872EF5-4893-4078-9E29-8261E6F05B15} - \Express FilesUpdate No Task File Task: {DA07D46A-4A59-4298-8081-6B92C75417C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DC563907-3844-4FCD-BFF2-09C45F85FD6E} - System32\Tasks\{D56DCA6A-FCA2-48D3-837B-5690EEC3AADC} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsProgressBar Task: {E0532C83-0F74-42AA-BE8D-893D8FB01598} - System32\Tasks\{25703773-878B-449E-9B99-1BE5B8352EFA} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsInstall Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005Core.job => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2823766941-1517505164-3398274235-1005UA.job => C:\Users\Selina\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\update-S-1-5-21-2823766941-1517505164-3398274235-1005.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Loaded Modules (whitelisted) ============= 2013-12-13 12:20 - 2013-12-13 12:20 - 03359600 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll 2009-08-23 18:24 - 2009-08-23 18:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll 2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-02-01 11:35 - 2014-02-01 11:35 - 00310272 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\lwjgl64.dll 2014-02-01 11:35 - 2014-02-01 11:35 - 00653832 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\avutil-ttv-51.dll 2014-02-01 11:35 - 2014-02-01 11:35 - 00361103 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\swresample-ttv-0.dll 2014-02-01 11:35 - 2014-02-01 11:35 - 00688161 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\libmp3lame-ttv.dll 2014-02-01 11:35 - 2014-02-01 11:35 - 01133056 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\twitchsdk.dll 2014-02-01 11:35 - 2014-02-01 11:35 - 00382464 _____ () C:\Users\Hausaufgaben\AppData\Roaming\.minecraft\versions\1.7.4\1.7.4-natives-5655599744915\OpenAL64.dll 2013-01-28 13:08 - 2013-01-28 13:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-01-28 13:08 - 2013-01-28 13:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-05-25 07:44 - 2012-04-26 13:38 - 20758016 _____ () C:\Program Files (x86)\i-Funbox DevTeam\libcef.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver" ==================== Faulty Device Manager Devices ============= Name: PCI-Gerät Description: PCI-Gerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Ethernet-Controller Description: Ethernet-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: SM-Bus-Controller Description: SM-Bus-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Generic Bluetooth Adapter Description: Generic Bluetooth Adapter Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: GenericAdapter Service: BTHUSB Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Event log errors: ========================= Application errors: ================== Error: (02/01/2014 10:03:22 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/01/2014 10:02:30 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: hamachi-2-ui.exe, Version: 2.2.0.114, Zeitstempel: 0x52e10b6b Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000002b ID des fehlerhaften Prozesses: 0xb20 Startzeit der fehlerhaften Anwendung: 0xhamachi-2-ui.exe0 Pfad der fehlerhaften Anwendung: hamachi-2-ui.exe1 Pfad des fehlerhaften Moduls: hamachi-2-ui.exe2 Berichtskennung: hamachi-2-ui.exe3 Error: (02/01/2014 10:02:26 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Creative Cloud.exe, Version: 2.3.0.322, Zeitstempel: 0x52b21807 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000002c ID des fehlerhaften Prozesses: 0xba4 Startzeit der fehlerhaften Anwendung: 0xCreative Cloud.exe0 Pfad der fehlerhaften Anwendung: Creative Cloud.exe1 Pfad des fehlerhaften Moduls: Creative Cloud.exe2 Berichtskennung: Creative Cloud.exe3 Error: (02/01/2014 10:02:14 AM) (Source: Avira Antivirus) (User: NT-AUTORITÄT) Description: Die Datei QueryInterface(57) konnte nicht geladen werden. Fehlercode: 0x1 Error: (02/01/2014 09:25:22 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/01/2014 09:24:53 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: hamachi-2-ui.exe, Version: 2.2.0.114, Zeitstempel: 0x52e10b6b Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000002c ID des fehlerhaften Prozesses: 0xc68 Startzeit der fehlerhaften Anwendung: 0xhamachi-2-ui.exe0 Pfad der fehlerhaften Anwendung: hamachi-2-ui.exe1 Pfad des fehlerhaften Moduls: hamachi-2-ui.exe2 Berichtskennung: hamachi-2-ui.exe3 Error: (02/01/2014 09:24:15 AM) (Source: Avira Antivirus) (User: NT-AUTORITÄT) Description: Die Datei QueryInterface(57) konnte nicht geladen werden. Fehlercode: 0x1 Error: (02/01/2014 08:42:52 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: jusched.exe, Version: 2.1.9.8, Zeitstempel: 0x51d2fcd3 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x7ef0ced0 ID des fehlerhaften Prozesses: 0xb34 Startzeit der fehlerhaften Anwendung: 0xjusched.exe0 Pfad der fehlerhaften Anwendung: jusched.exe1 Pfad des fehlerhaften Moduls: jusched.exe2 Berichtskennung: jusched.exe3 Error: (02/01/2014 08:37:57 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: APSDaemon.exe, Version: 2.2.9.2, Zeitstempel: 0x516e136b Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x76a93475 ID des fehlerhaften Prozesses: 0x12f0 Startzeit der fehlerhaften Anwendung: 0xAPSDaemon.exe0 Pfad der fehlerhaften Anwendung: APSDaemon.exe1 Pfad des fehlerhaften Moduls: APSDaemon.exe2 Berichtskennung: APSDaemon.exe3 Error: (02/01/2014 08:37:57 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: rzsbkotiu.exe, Version: 1.3.3.7, Zeitstempel: 0x5164f32a Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x76a93475 ID des fehlerhaften Prozesses: 0x104c Startzeit der fehlerhaften Anwendung: 0xrzsbkotiu.exe0 Pfad der fehlerhaften Anwendung: rzsbkotiu.exe1 Pfad des fehlerhaften Moduls: rzsbkotiu.exe2 Berichtskennung: rzsbkotiu.exe3 System errors: ============= Error: (02/01/2014 10:03:06 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (02/01/2014 10:02:15 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1066 Error: (02/01/2014 10:02:15 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%310. Error: (02/01/2014 10:01:42 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (02/01/2014 09:25:21 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (02/01/2014 09:24:16 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1066 Error: (02/01/2014 09:24:16 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem Fehler beendet: %%310. Error: (02/01/2014 09:23:42 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (02/01/2014 08:30:40 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (02/01/2014 08:30:23 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1066 Microsoft Office Sessions: ========================= Error: (02/01/2014 10:03:22 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/01/2014 10:02:30 AM) (Source: Application Error)(User: ) Description: hamachi-2-ui.exe2.2.0.11452e10b6bntdll.dll6.1.7601.1822951fb1072c00000050000002bb2001cf1f2c50ee9612C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exeC:\Windows\SysWOW64\ntdll.dll944e5c4f-8b1f-11e3-b2da-ac7c4a688e7e Error: (02/01/2014 10:02:26 AM) (Source: Application Error)(User: ) Description: Creative Cloud.exe2.3.0.32252b21807ntdll.dll6.1.7601.1822951fb1072c00000050000002cba401cf1f2c4bbe5639C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exeC:\Windows\SysWOW64\ntdll.dll917124a6-8b1f-11e3-b2da-ac7c4a688e7e Error: (02/01/2014 10:02:14 AM) (Source: Avira Antivirus)(User: NT-AUTORITÄT) Description: QueryInterface(57)0x1 Error: (02/01/2014 09:25:22 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/01/2014 09:24:53 AM) (Source: Application Error)(User: ) Description: hamachi-2-ui.exe2.2.0.11452e10b6bntdll.dll6.1.7601.1822951fb1072c00000050000002cc6801cf1f2709cb0536C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exeC:\Windows\SysWOW64\ntdll.dll52bc3dfd-8b1a-11e3-b2e0-d4ee8b5e2b7e Error: (02/01/2014 09:24:15 AM) (Source: Avira Antivirus)(User: NT-AUTORITÄT) Description: QueryInterface(57)0x1 Error: (02/01/2014 08:42:52 AM) (Source: Application Error)(User: ) Description: jusched.exe2.1.9.851d2fcd3unknown0.0.0.000000000c00000057ef0ced0b3401cf1f2082818ca0C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exeunknown73d9acb1-8b14-11e3-98f8-f398e3f4697d Error: (02/01/2014 08:37:57 AM) (Source: Application Error)(User: ) Description: APSDaemon.exe2.2.9.2516e136bunknown0.0.0.000000000c000000576a9347512f001cf1f208260395cC:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exeunknownc428396a-8b13-11e3-98f8-f398e3f4697d Error: (02/01/2014 08:37:57 AM) (Source: Application Error)(User: ) Description: rzsbkotiu.exe1.3.3.75164f32aunknown0.0.0.000000000c000000576a93475104c01cf1f20823a2357C:\ProgramData\AppleDev0\rzsbkotiu.exeunknownc428125a-8b13-11e3-98f8-f398e3f4697d CodeIntegrity Errors: =================================== Date: 2013-10-26 18:41:05.648 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-10-26 18:41:05.601 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 62% Total physical RAM: 4043.86 MB Available physical RAM: 1527.94 MB Total Pagefile: 8085.9 MB Available Pagefile: 5398.9 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:283.89 GB) (Free:47.73 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 82E28B67) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=284 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
02.02.2014, 06:42 | #4 | |
/// the machine /// TB-Ausbilder | HILFE Youtube und google gegen Schuhwebsite ausgetauschtCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu HILFE Youtube und google gegen Schuhwebsite ausgetauscht |
google, heulen, heute, hilfe, japanisch, youtube, öffnen |