Malwarebytes findet infizierte Objekte

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.09.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Lukas :: LUKAS-PC [Administrator]

09.02.2014 21:41:29
MBAM-log-2014-02-09 (21-46-14).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 234938
Laufzeit: 3 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 6
C:\Users\Lukas\AppData\Local\Temp\appshat-distribution.exe (PUP.Optional.Somoto.A) -> Keine Aktion durchgeführt.
C:\Users\Lukas\AppData\Local\Temp\BI_RunOnce.exe (PUP.Optional.Somoto.A) -> Keine Aktion durchgeführt.
C:\Users\Lukas\AppData\Local\Temp\DeltaTB.exe (PUP.Optional.DeltaTB) -> Keine Aktion durchgeführt.
C:\Users\Lukas\AppData\Local\Temp\OptimizerPro.exe (PUP.Optional.OptimizePro.A) -> Keine Aktion durchgeführt.
C:\Users\Lukas\AppData\Local\Temp\pricepeep_130001_0101.exe (PUP.Optional.PricePeep.A) -> Keine Aktion durchgeführt.
C:\Users\Lukas\AppData\Local\Temp\WajamC.exe (PUP.Optional.Wajam) -> Keine Aktion durchgeführt.

(Ende)
         

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.10.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Lukas :: LUKAS-PC [Administrator]

10.02.2014 17:05:34
MBAM-log-2014-02-10 (18-06-15).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 423231
Laufzeit: 49 Minute(n), 48 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\Users\Lukas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WJ2K6NCO\wajam_install[1].exe (PUP.Optional.Wajam) -> Keine Aktion durchgeführt.
C:\Users\Lukas\Downloads\nc111nt\nc.exe (PUP.Netcat) -> Keine Aktion durchgeführt.

(Ende)
         

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 18:10 on 10/02/2014 (Lukas)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-02-2014 03
Ran by Lukas at 2014-02-10 18:12:23
Running from C:\Users\Lukas\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
ANNO 1404 (x32 Version: 1.03.0000 - Ubisoft)
Apple Application Support (x32 Version: 2.3.3 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ASUS Xonar DG Audio Driver (Version:  - )
Audacity 2.0.2 (x32 Version: 2.0.2 - Audacity Team)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Blender (Version: 2.66 - Blender Foundation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Cisco Packet Tracer 5.3.2 (x32 Version:  - Cisco Systems, Inc.)
Core Temp 1.0 RC6 (Version: 1.0 - Alcpu)
Crysis(R) (x32 Version: 1.00.0000 - Electronic Arts)
CrystalDiskInfo 6.0.0 (x32 Version: 6.0.0 - Crystal Dew World)
DiRT 3 (x32 Version:  - Codemasters Racing Studio)
DiRT2 (x32 Version: 1.0.0002.133 - Codemasters) Hidden
DiRT2 (x32 Version: 1.00.0000 - Codemasters)
EAX4 Unified Redist (x32 Version: 4.001 - Creative Labs)
Everything 1.2.1.371 (x32 Version:  - )
f.lux (HKCU Version:  - )
Foxit Reader (x32 Version: 6.0.3.524 - Foxit Corporation)
Fraps (x32 Version:  - )
Freddy's Texture Patch BETA (HKCU Version: 0.52 - Fred Metger)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128 - DVDVideoSoft Ltd.)
gamelauncher-ps2-psg (HKCU Version:  - Sony Online Entertainment)
GameSpy Comrade (x32 Version: 1.5.0.156 - GameSpy)
Geeks3D FurMark 1.11.0 (x32 Version:  - Geeks3D)
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Gothic (x32 Version: 1.32 - JoWooD Software Productions AG)
Gothic_Patch (x32 Version:  - )
Gothic1_Orcaxe-Orcsword-Fix (x32 Version: 1.1 - ModRes)
iTunes (Version: 11.0.2.26 - Apple Inc.)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KeePass Password Safe 2.22 (x32 Version:  - Dominik Reichl)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation)
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSI Afterburner 2.3.1 (x32 Version: 2.3.1 - MSI Co., LTD)
Need for Speed™ Carbon (x32 Version:  - )
NetSpeedMonitor 2.5.4.0 x64 (Version: 2.5.4.0 - Florian Gilles)
Notepad++ (x32 Version: 6.3.3 - Notepad++ Team)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.140.952 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
Oblivion (x32 Version: 1.2.0416 - Bethesda Softworks)
Oblivion mod manager 1.1.12 (x32 Version:  - Timeslip)
OpenAL (x32 Version:  - )
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
OWASP ZAP 2.0.0 (x32 Version:  - psiinon@gmail.com)
PlanetSide 2 (HKCU Version: 1.0.3.183 - Sony Online Entertainment)
PunkBuster Services (x32 Version: 0.986 - Even Balance, Inc.)
Rapture3D 2.4.8 Game (x32 Version:  - Blue Ripple Sound)
Realtek Ethernet Controller Driver (x32 Version: 7.49.927.2011 - Realtek)
Risen (x32 Version: 1.00.0000 - Deep Silver)
Risen 2 - Dark Waters (x32 Version:  - Piranha Bytes)
Sid Meier's Civilization 4 (x32 Version: 1.61 - Firaxis Games) Hidden
Skype Click to Call (x32 Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.3 (x32 Version: 6.3.105 - Skype Technologies S.A.)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (Version: 3.0.12 - TeamSpeak Systems GmbH)
The Witcher Enhanced Edition (x32 Version: 1.4.5.1280 - CD Projekt Red)
TI-Nspire(TM) CAS Student Software (x32 Version: 3.2.0.1219 - Texas Instruments Inc.)
TmNationsForever (x32 Version:  - Nadeo)
Tom Clancy's Splinter Cell Double Agent (x32 Version: 1.00.0000 - Ubisoft)
tools-freebsd (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-linux (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-netware (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-solaris (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
tools-windows (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
Trine 1.08 (x32 Version:  - Frozenbyte, Inc.)
Trine 2 (x32 Version:  - Frozenbyte)
TuxGuitar (x32 Version: 1.2 - Herac)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)
VMware Player (Version: 6.0.1 - VMware, Inc.) Hidden
VMware Player (x32 Version: 6.0.1 - VMware, Inc)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0 - Microsoft Corporation)
WinPcap 4.1.3 (x32 Version: 4.1.0.2980 - Riverbed Technology, Inc.)
Wireshark 1.10.3 (64-bit) (x32 Version: 1.10.3 - The Wireshark developer community, hxxp://www.wireshark.org)

==================== Restore Points  =========================

04-01-2014 13:04:12 DirectX wurde installiert
05-01-2014 18:18:00 Windows Modules Installer
05-01-2014 18:20:56 Windows Modules Installer
05-01-2014 18:33:47 Windows Modules Installer
07-01-2014 18:46:14 Windows Update
12-01-2014 19:03:48 avast! antivirus system restore point
15-01-2014 18:54:12 Windows Update
15-01-2014 20:17:49 Windows Update
18-01-2014 10:38:17 Installed Java 7 Update 51
23-01-2014 13:22:12 Windows Update
28-01-2014 17:43:30 Windows Update
06-02-2014 17:34:27 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-11-03 15:46 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {9359B2C8-8694-424E-B66F-EC0C701CA53D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-09] (Google Inc.)
Task: {BBC79C35-09F7-44AB-BE06-D27B85CA3EAB} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-12] (AVAST Software)
Task: {F034BAF8-1C15-4646-BEE8-58D95222629C} - System32\Tasks\{50F1A25D-9405-4EA7-AB15-3B33F00914FA} => C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell Chaos Theory\System\splintercell3.exe
Task: {F4623339-62DF-440A-949F-C7CCB416031F} - System32\Tasks\{F1E594A3-0516-4D9A-9945-4ED0CE9C38B3} => C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell Chaos Theory\System\splintercell3.exe
Task: {F826BFAA-C790-43A0-AABF-EB7BB746E9AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-09] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-11-02 22:27 - 2008-07-11 15:04 - 00200704 ____N () C:\Windows\SysWOW64\HsMgr.exe
2012-11-02 22:27 - 2008-07-11 15:03 - 00282112 ____N () C:\Windows\system\HsMgr64.exe
2014-02-10 17:15 - 2014-02-10 17:15 - 00050477 _____ () C:\Users\Lukas\Desktop\Defogger.exe
2014-02-09 16:12 - 2014-02-09 12:31 - 02172928 _____ () C:\Program Files\AVAST Software\Avast\defs\14020900\algo.dll
2014-02-10 17:00 - 2014-02-10 09:23 - 02172928 _____ () C:\Program Files\AVAST Software\Avast\defs\14021000\algo.dll
2013-10-18 12:46 - 2013-10-18 12:46 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2012-11-02 22:27 - 2012-06-06 08:56 - 00143360 ____N () C:\Program Files\ASUS Xonar DG Audio\Customapp\VmixP8.dll
2013-12-11 16:31 - 2013-12-11 16:31 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-02-06 19:22 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-06 19:22 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-06 19:22 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-06 19:22 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-06 19:22 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: VMware Virtual Ethernet Adapter for VMnet8
Description: VMware Virtual Ethernet Adapter for VMnet8
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VMware Virtual Ethernet Adapter for VMnet1
Description: VMware Virtual Ethernet Adapter for VMnet1
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/10/2014 05:01:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/09/2014 09:12:29 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/09/2014 00:11:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2014 08:21:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2014 02:36:34 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/08/2014 00:25:42 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/07/2014 09:50:11 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/07/2014 09:31:59 PM) (Source: Help Index) (User: )
Description: Für das Produkt "VS\100\de-DE" wurden keine gültigen Indexdateien gefunden.

Error: (02/07/2014 09:31:57 PM) (Source: Help Index) (User: )
Description: Für das Produkt "VS\100\de-DE" wurden keine gültigen Indexdateien gefunden.

Error: (02/07/2014 06:30:00 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (02/09/2014 09:56:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Server" wurde mit folgendem Fehler beendet: 
%%1062

Error: (02/09/2014 09:56:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/09/2014 09:56:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHttpAutoProxySvc" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/09/2014 02:55:26 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.

Error: (02/09/2014 02:55:17 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.

Error: (02/09/2014 02:55:01 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.

Error: (02/09/2014 02:54:52 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.

Error: (02/09/2014 02:33:52 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.

Error: (02/09/2014 02:33:45 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.

Error: (02/09/2014 02:33:38 PM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.


Microsoft Office Sessions:
=========================
Error: (02/10/2014 05:01:13 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/09/2014 09:12:29 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/09/2014 00:11:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2014 08:21:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2014 02:36:34 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (02/08/2014 00:25:42 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/07/2014 09:50:11 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (02/07/2014 09:31:59 PM) (Source: Help Index)(User: )
Description: Für das Produkt "VS\100\de-DE" wurden keine gültigen Indexdateien gefunden.

Error: (02/07/2014 09:31:57 PM) (Source: Help Index)(User: )
Description: Für das Produkt "VS\100\de-DE" wurden keine gültigen Indexdateien gefunden.

Error: (02/07/2014 06:30:00 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 50%
Total physical RAM: 4078.3 MB
Available physical RAM: 2014.54 MB
Total Pagefile: 8154.78 MB
Available Pagefile: 6023.08 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:268.49 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E59F1DED)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-02-2014 03
Ran by Lukas (administrator) on LUKAS-PC on 10-02-2014 18:12:04
Running from C:\Users\Lukas\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
(CMedia) C:\Program Files\ASUS Xonar DG Audio\Customapp\ASUSAUDIOCENTER.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Users\Lukas\Desktop\Defogger.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Cmaudio8788] - C:\Windows\Syswow64\cmicnfgp.dll [12935168 2012-11-20] (C-Media Corporation)
HKLM\...\Run: [Cmaudio8788GX] - C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-12] (AVAST Software)

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:8081
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{C665D4D5-3551-48D8-A246-F51C74BFBA7C}: [NameServer]8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\eq41rqzz.default
FF NetworkProxy: "backup.ftp", "91.187.132.13"
FF NetworkProxy: "backup.ftp_port", 8080
FF NetworkProxy: "backup.socks", "91.187.132.13"
FF NetworkProxy: "backup.socks_port", 8080
FF NetworkProxy: "backup.ssl", "91.187.132.13"
FF NetworkProxy: "backup.ssl_port", 8080
FF NetworkProxy: "ftp", "localhost"
FF NetworkProxy: "ftp_port", 8081
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "localhost"
FF NetworkProxy: "socks_port", 8081
FF NetworkProxy: "ssl", "localhost"
FF NetworkProxy: "ssl_port", 8081
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\eq41rqzz.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-10-03]
FF Extension: Exif Viewer - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\eq41rqzz.default\Extensions\exif_viewer@mozilla.doslash.org.xpi [2013-02-18]
FF Extension: Grooveshark Unlocker - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\eq41rqzz.default\Extensions\groovesharkUnlocker@overlord1337.xpi [2013-10-04]
FF Extension: Telekom YouTube Turbo - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\eq41rqzz.default\Extensions\info@maltegoetz.de.xpi [2013-04-14]
FF Extension: SciLor's Grooveshark(tm) Unlocker for Germany - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\eq41rqzz.default\Extensions\SciLorsGrooveUnlocker@scilor.com.xpi [2013-10-09]
FF Extension: Stealthy - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\eq41rqzz.default\Extensions\stealthyextension@gmail.com.xpi [2013-01-10]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-02-06]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\PepperFlash\11.8.800.97\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Google Docs) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-02-16]
CHR Extension: (Google Drive) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-02-16]
CHR Extension: (WOT) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2013-03-18]
CHR Extension: (YouTube) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-16]
CHR Extension: (Adblock Plus) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-11-28]
CHR Extension: (Google-Suche) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-16]
CHR Extension: (SciLor's Grooveshark(tm) Unlocker) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\feegenemlbjkbnfpgdmjddbeiecdbpob [2013-10-14]
CHR Extension: (Google Wallet) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (NotScripts) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2013-02-16]
CHR Extension: (Google Mail) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-16]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-03-14]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-12] (AVAST Software)
S3 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2012-12-24] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-11] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-11] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-12] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-12] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-12] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-02-07] ()
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2734080 2013-04-11] (C-Media Inc)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-11-03] ()
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2010-03-29] (Texas Instruments)
R3 vmkbd2; C:\Windows\system32\drivers\VMkbd.sys [32848 2013-10-18] (VMware, Inc.)
R2 VMparport; C:\Windows\system32\drivers\VMparport.sys [31824 2013-10-18] (VMware, Inc.)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-10 18:12 - 2014-02-10 18:12 - 00013820 _____ () C:\Users\Lukas\Desktop\FRST.txt
2014-02-10 18:11 - 2014-02-10 18:12 - 00000000 ____D () C:\FRST
2014-02-10 18:10 - 2014-02-10 18:10 - 00000472 _____ () C:\Users\Lukas\Desktop\defogger_disable.log
2014-02-10 18:10 - 2014-02-10 18:10 - 00000000 _____ () C:\Users\Lukas\defogger_reenable
2014-02-10 17:15 - 2014-02-10 17:15 - 02170880 _____ (Farbar) C:\Users\Lukas\Desktop\FRST64.exe
2014-02-10 17:15 - 2014-02-10 17:15 - 00380416 _____ () C:\Users\Lukas\Desktop\snh3k2ep.exe
2014-02-10 17:15 - 2014-02-10 17:15 - 00050477 _____ () C:\Users\Lukas\Desktop\Defogger.exe
2014-02-09 21:39 - 2014-02-09 21:39 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Malwarebytes
2014-02-09 21:38 - 2014-02-09 21:38 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-09 21:38 - 2014-02-09 21:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-09 21:38 - 2014-02-09 21:38 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-09 21:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-09 21:37 - 2014-02-09 21:37 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-09 21:17 - 2014-02-09 21:17 - 00847304 _____ (Google Inc.) C:\Users\Lukas\Downloads\ChromeSetup.exe
2014-02-07 21:28 - 2014-02-07 21:28 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft Corporation
2014-01-31 21:50 - 2014-01-31 21:50 - 00597304 _____ () C:\Users\Lukas\Downloads\flux-setup.exe
2014-01-31 21:50 - 2014-01-31 21:50 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2014-01-31 21:50 - 2014-01-31 21:50 - 00000000 ____D () C:\Users\Lukas\AppData\Local\FluxSoftware
2014-01-18 11:39 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-18 11:39 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-18 11:39 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-18 11:39 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-18 11:38 - 2014-01-18 11:39 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-15 19:57 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 19:57 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 19:57 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 19:57 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 19:57 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 19:57 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 19:57 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 19:57 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 19:57 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-12 20:05 - 2014-01-12 20:05 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys

==================== One Month Modified Files and Folders =======

2014-02-10 18:12 - 2014-02-10 18:12 - 00013820 _____ () C:\Users\Lukas\Desktop\FRST.txt
2014-02-10 18:12 - 2014-02-10 18:11 - 00000000 ____D () C:\FRST
2014-02-10 18:10 - 2014-02-10 18:10 - 00000472 _____ () C:\Users\Lukas\Desktop\defogger_disable.log
2014-02-10 18:10 - 2014-02-10 18:10 - 00000000 _____ () C:\Users\Lukas\defogger_reenable
2014-02-10 18:10 - 2012-11-02 21:39 - 00000000 ____D () C:\Users\Lukas
2014-02-10 18:04 - 2012-11-02 21:36 - 01684072 _____ () C:\Windows\WindowsUpdate.log
2014-02-10 17:20 - 2013-01-09 19:22 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-10 17:15 - 2014-02-10 17:15 - 02170880 _____ (Farbar) C:\Users\Lukas\Desktop\FRST64.exe
2014-02-10 17:15 - 2014-02-10 17:15 - 00380416 _____ () C:\Users\Lukas\Desktop\snh3k2ep.exe
2014-02-10 17:15 - 2014-02-10 17:15 - 00050477 _____ () C:\Users\Lukas\Desktop\Defogger.exe
2014-02-10 17:07 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-10 17:07 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-10 17:00 - 2013-04-27 12:09 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-10 17:00 - 2013-01-09 19:22 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-10 16:59 - 2012-11-18 14:50 - 00000000 ____D () C:\ProgramData\VMware
2014-02-10 16:59 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-10 16:59 - 2009-07-14 05:51 - 00072101 _____ () C:\Windows\setupact.log
2014-02-09 21:56 - 2010-11-21 04:47 - 00059554 _____ () C:\Windows\PFRO.log
2014-02-09 21:39 - 2014-02-09 21:39 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Malwarebytes
2014-02-09 21:38 - 2014-02-09 21:38 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-09 21:38 - 2014-02-09 21:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-09 21:38 - 2014-02-09 21:38 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-09 21:37 - 2014-02-09 21:37 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Lukas\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-09 21:17 - 2014-02-09 21:17 - 00847304 _____ (Google Inc.) C:\Users\Lukas\Downloads\ChromeSetup.exe
2014-02-09 16:35 - 2013-10-19 11:17 - 00000000 ____D () C:\Users\Lukas\Documents\Schule
2014-02-08 14:36 - 2013-07-09 19:59 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-07 21:28 - 2014-02-07 21:28 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft Corporation
2014-02-07 21:09 - 2012-11-25 18:45 - 00000000 ____D () C:\Users\Lukas\Documents\Visual Studio 2010
2014-02-06 18:34 - 2013-10-30 12:05 - 00001302 _____ () C:\Users\Lukas\Desktop\TheDarkMod.lnk
2014-02-06 18:33 - 2013-01-31 20:25 - 00000000 ____D () C:\Program Files (x86)\Everything
2014-02-03 18:21 - 2012-11-03 12:11 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\KeePass
2014-02-01 18:08 - 2013-07-20 18:25 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\vlc
2014-01-31 21:50 - 2014-01-31 21:50 - 00597304 _____ () C:\Users\Lukas\Downloads\flux-setup.exe
2014-01-31 21:50 - 2014-01-31 21:50 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2014-01-31 21:50 - 2014-01-31 21:50 - 00000000 ____D () C:\Users\Lukas\AppData\Local\FluxSoftware
2014-01-18 11:54 - 2010-11-21 07:50 - 00710640 _____ () C:\Windows\system32\perfh007.dat
2014-01-18 11:54 - 2010-11-21 07:50 - 00154652 _____ () C:\Windows\system32\perfc007.dat
2014-01-18 11:54 - 2009-07-14 06:13 - 01652692 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-18 11:39 - 2014-01-18 11:38 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-18 11:39 - 2013-10-21 17:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-18 11:39 - 2013-06-24 18:08 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-17 15:06 - 2009-07-14 05:45 - 00376712 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 21:19 - 2013-08-14 13:14 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 21:18 - 2013-01-01 19:00 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-12 20:05 - 2014-01-12 20:05 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-12 20:05 - 2013-04-27 12:09 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-12 20:05 - 2013-04-27 12:09 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-12 20:05 - 2013-04-27 12:09 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-01-12 20:05 - 2013-04-27 12:09 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-12 20:05 - 2013-04-27 12:09 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-12 20:05 - 2013-04-27 12:09 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-12 20:05 - 2012-11-02 22:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-11 18:29 - 2012-11-18 14:56 - 00000000 ____D () C:\Users\Lukas\AppData\Local\VMware
2014-01-11 18:01 - 2012-11-18 14:56 - 00000000 ____D () C:\Users\Lukas\AppData\Roaming\VMware

Some content of TEMP:
====================
C:\Users\Lukas\AppData\Local\Temp\1vmu33nx.dll
C:\Users\Lukas\AppData\Local\Temp\AskSLib.dll
C:\Users\Lukas\AppData\Local\Temp\AutoRun.exe
C:\Users\Lukas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Lukas\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Lukas\AppData\Local\Temp\drm_dyndata_7270014.dll
C:\Users\Lukas\AppData\Local\Temp\drm_dyndata_7340014.dll
C:\Users\Lukas\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Lukas\AppData\Local\Temp\EAInstall.dll
C:\Users\Lukas\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Lukas\AppData\Local\Temp\Foxit Updater.exe
C:\Users\Lukas\AppData\Local\Temp\install.exe
C:\Users\Lukas\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Lukas\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Lukas\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Lukas\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Lukas\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Lukas\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Lukas\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Lukas\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe
C:\Users\Lukas\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Lukas\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Lukas\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Lukas\AppData\Local\Temp\nvStInst.exe
C:\Users\Lukas\AppData\Local\Temp\removeKCL.EXE
C:\Users\Lukas\AppData\Local\Temp\removeKTID.EXE
C:\Users\Lukas\AppData\Local\Temp\remTIDShortcut.EXE
C:\Users\Lukas\AppData\Local\Temp\secuniasi1713105574006983182.dll
C:\Users\Lukas\AppData\Local\Temp\vlc-2.0.7-win64.exe
C:\Users\Lukas\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Lukas\AppData\Local\Temp\vlc-2.1.2-win64.exe
C:\Users\Lukas\AppData\Local\Temp\writeLogFile.EXE
C:\Users\Lukas\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-04 20:00

==================== End Of Log ============================