Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Hijacker SuchMaschine

Hijacker SuchMaschine


Plagegeister aller Art und deren Bekämpfung: Hijacker SuchMaschine

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 02.03.2014, 10:00   #1
NeoLazarus
 
Hijacker SuchMaschine - Standard

Hijacker SuchMaschine


Moin Comm,

Hab nun schon lange rum gesucht und weder hier noch irgendwo anders einen treffer gelandet. habe seit ein paar stunden nen Hijacker namens SuchMaschine. Es Blockiert derzeit mein Firefox Startbildschirm und macht sich auch an herkömmlichen google suchanfragen zuschaffen. Sprich also wenn ich untypisch manuel auf google gehe spuckt die SuchMaschine die ergebnisse aus. Kann mir kein reim drauf machen wo ich das ding her hab, aur durch die installation von aion, da es das einzige ist was ich heute am pc getan habe.
Da ich keinerlei treffer habe auser zu ähnlichen problemen schein ich einer der ersten zusein die den spass mit dem ding ham.
Bisher konntet ihr mir immer gut helfen auch wenn ich vor heute nicht aktiv war auf dem forum, trotz alledem ham mir eure threads immer geholfen wenn ich an nem pc gesessen hab der infiziert war und nicht meiner war. Ich hoffe das Ihr mir auch diesmal helfen könnt.

danke vorab


MfG Lazarus

Alt 02.03.2014, 10:17   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Hijacker SuchMaschine - Standard

Hijacker SuchMaschine


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 02.03.2014, 10:26   #3
NeoLazarus
 
Hijacker SuchMaschine - Standard

Hijacker SuchMaschine


danke schon mal frst läuft gerade



FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2014 01
Ran by NeoLazarus (administrator) on NEOLAZARUS-PC on 02-03-2014 10:22:19
Running from C:\Users\NeoLazarus\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) P:\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) P:\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) P:\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
() C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) P:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Akamai Technologies, Inc.) C:\Users\NeoLazarus\AppData\Local\Akamai\netsession_win.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) P:\Avira\AntiVir Desktop\avgnt.exe
(Rocket Division Software) P:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Safer-Networking Ltd.) P:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Akamai Technologies, Inc.) C:\Users\NeoLazarus\AppData\Local\Akamai\netsession_win.exe
(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
(Safer-Networking Ltd.) P:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) P:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
() C:\Windows\SysWOW64\WinMsgBalloonServer.exe
() C:\Windows\SysWOW64\WinMsgBalloonClient.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Video\LogiTray.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Video\FxSvr2.exe
(Safer-Networking Ltd.) P:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Malwarebytes Corporation) P:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7560296 2011-12-12] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] - P:\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - P:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Cpu Level Up help] - C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe [887936 2009-12-28] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Bonus.SSR.FR11] - P:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [933640 2012-01-19] (ABBYY.)
HKLM-x32\...\Run: [Aeria Ignite] - C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM-x32\...\Run: [4StoryPrePatch] - V:\Games\GameforgeLive\Games\DEU_deu\4Story\PrePatch.exe [327680 2012-11-29] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [LogitechVideoRepair] - C:\Program Files (x86)\Logitech\Video\ISStart.exe [458752 2005-06-08] (Logitech Inc.)
HKLM-x32\...\Run: [LogitechVideoTray] - C:\Program Files (x86)\Logitech\Video\LogiTray.exe [217088 2005-06-08] (Logitech Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [Akamai NetSession Interface] - C:\Users\NeoLazarus\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [Ulzeec] - C:\Users\NeoLazarus\AppData\Roaming\Ypit\obog.exe
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [Spybot-S&D Cleaning] - P:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-07-26] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-26] (Samsung)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564016 2013-07-26] (Samsung)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-26] (Samsung)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [AlcoholAutomount] - P:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe [203928 2009-09-30] (Alcohol Soft Development Team)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [LogitechSoftwareUpdate] - C:\Program Files (x86)\Logitech\Video\ManifestEngine.exe [196608 2005-06-08] (Logitech Inc.)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\MountPoints2: {095e1840-8a5d-11e3-9af5-806e6f6e6963} - E:\autorun.exe
HKU\S-1-5-21-4096282830-586336012-1309685241-1000\...\MountPoints2: {095e197b-8a5d-11e3-9af5-50465d6ade77} - I:\autorun.exe
Startup: C:\Users\NeoLazarus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WISO Bewerbung-Reminder.lnk
ShortcutTarget: WISO Bewerbung-Reminder.lnk -> P:\Program Files (x86)\Buhl\Bewerbung 2008\KCReminder.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD792293E722DCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope {7D531178-0AF6-4EA1-A72C-AE45413C8F33} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {7D531178-0AF6-4EA1-A72C-AE45413C8F33} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - DefaultScope {7D531178-0AF6-4EA1-A72C-AE45413C8F33} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {7D531178-0AF6-4EA1-A72C-AE45413C8F33} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - P:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E7AE22BD-A2A3-4C6F-B5E8-D2E7CC15CABB}: [NameServer]62.109.121.1 62.109.121.2

FireFox:
========
FF ProfilePath: C:\Users\NeoLazarus\AppData\Roaming\Mozilla\Firefox\Profiles\k2kpszdv.default
FF DefaultSearchEngine: SuchMaschine
FF SearchEngineOrder.1: SuchMaschine
FF SelectedSearchEngine: SuchMaschine
FF Homepage: about:home
FF Keyword.URL: hxxp://www.sm.de/?q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Users\NeoLazarus\AppData\Roaming\Mozilla\Firefox\Profiles\k2kpszdv.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: YouTube Unblocker - C:\Users\NeoLazarus\AppData\Roaming\Mozilla\Firefox\Profiles\k2kpszdv.default\Extensions\youtubeunblocker@unblocker.yt [2014-02-22]
FF Extension: {5a75c6fb-9880-4094-92a1-82a6d3da78b2} - C:\Users\NeoLazarus\AppData\Roaming\Mozilla\Firefox\Profiles\k2kpszdv.default\Extensions\{5a75c6fb-9880-4094-92a1-82a6d3da78b2}.xpi [2013-10-31]
FF Extension: Real Player Notifier Pro - C:\Users\NeoLazarus\AppData\Roaming\Mozilla\Firefox\Profiles\k2kpszdv.default\Extensions\{a2742021-4aaf-4364-91b7-6a976cbe0733}.xpi [2013-11-05]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; P:\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; P:\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [96896 2009-12-28] (ASUSTeK Computer Inc.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-01-31] ()
R2 SDScannerService; P:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; P:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; P:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 StarWindServiceAE; P:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-04-12] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG)
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2010-09-06] (Devguru Co., Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-31] (Disc Soft Ltd)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-04-12] ()
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2014-01-31] (Duplex Secure Ltd.)
U3 ai4f55ug; C:\Windows\System32\Drivers\ai4f55ug.sys [0 ] (Advanced Micro Devices)
U3 az1t7ris; C:\Windows\System32\Drivers\az1t7ris.sys [0 ] (Advanced Micro Devices)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-02 10:22 - 2014-03-02 10:22 - 00016247 _____ () C:\Users\NeoLazarus\Desktop\FRST.txt
2014-03-02 10:22 - 2014-03-02 10:22 - 00000000 ____D () C:\FRST
2014-03-02 09:21 - 2014-03-02 09:21 - 02156544 _____ (Farbar) C:\Users\NeoLazarus\Desktop\FRST64.exe
2014-03-02 03:46 - 2014-03-02 03:46 - 00001196 _____ () C:\Users\NeoLazarus\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
2014-03-02 03:45 - 2014-03-02 03:45 - 25889832 _____ () C:\Users\NeoLazarus\Downloads\vlc-2.1.3-win64.exe
2014-03-02 02:39 - 2014-03-02 02:39 - 00000000 ____D () C:\Users\NeoLazarus\Downloads\Gameforge Live
2014-02-28 18:51 - 2014-02-28 18:55 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Local\Darksiders
2014-02-20 18:38 - 2014-02-20 18:39 - 00000000 ____D () C:\Users\NeoLazarus\Downloads\driver
2014-02-20 18:21 - 2014-02-20 18:21 - 05181736 _____ () C:\Users\NeoLazarus\Downloads\driver.rar
2014-02-20 18:08 - 2014-02-20 18:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-02-20 17:56 - 2014-02-20 17:56 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2014-02-16 21:22 - 2014-02-16 21:22 - 00000000 ____D () C:\Users\NeoLazarus\Downloads\Download.am
2014-02-16 18:00 - 2014-02-17 20:51 - 00000000 ____D () C:\ProgramData\Overwolf
2014-02-15 06:31 - 2014-02-15 06:31 - 00003248 _____ () C:\Windows\System32\Tasks\RunOW
2014-02-15 06:31 - 2014-02-15 06:31 - 00000801 _____ () C:\Users\NeoLazarus\Desktop\Shaiya-DE.lnk
2014-02-15 06:30 - 2014-02-15 06:30 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portal of Etain
2014-02-15 06:28 - 2014-03-02 01:20 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Local\Overwolf
2014-02-15 06:28 - 2014-02-15 06:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 19:40 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-13 19:40 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 19:40 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 19:40 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 19:40 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 19:40 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 19:40 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 19:40 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-13 19:40 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 19:40 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 19:40 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 19:40 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 19:40 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 19:40 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 19:40 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 19:40 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 19:40 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 19:40 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-13 19:40 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-13 19:40 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-13 19:40 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-13 19:40 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 19:40 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-13 19:40 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-13 19:40 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-13 19:40 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-13 19:40 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 19:40 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 19:39 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 19:39 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 19:38 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 19:38 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 19:38 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 19:38 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 19:38 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 19:38 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 19:38 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 19:38 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 19:38 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 19:38 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 19:38 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 19:38 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 19:38 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 19:38 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 19:38 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 19:38 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 19:38 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 19:38 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 19:38 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 19:38 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 19:38 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 19:38 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 19:38 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 19:38 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 19:38 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 19:38 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 19:38 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 19:38 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 19:38 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 19:38 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 19:38 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 19:38 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 19:38 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 19:38 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 19:38 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 19:38 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 19:38 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 19:38 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 19:38 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-09 03:03 - 2014-02-09 03:03 - 00003118 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00003092 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00003090 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00003062 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00003060 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2014-02-09 03:03 - 2014-02-09 03:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2014-02-09 03:03 - 2014-02-09 03:03 - 00000000 ____D () C:\Program Files\Microsoft Mouse and Keyboard Center
2014-02-09 02:58 - 2014-02-09 02:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2014-02-08 14:26 - 2014-02-08 14:26 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\Ubisoft
2014-02-01 10:44 - 2014-02-08 14:26 - 00000000 ____D () C:\Users\NeoLazarus\Documents\Assassin's Creed Revelations
2014-01-31 21:02 - 2014-01-31 21:02 - 00001207 _____ () C:\Users\NeoLazarus\Desktop\Uplay.lnk
2014-01-31 21:02 - 2014-01-31 21:02 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-01-31 18:55 - 2014-01-31 18:55 - 00003192 _____ () C:\Windows\System32\Tasks\{EB0483F3-2663-43FC-B3ED-A31B1DDEC0BC}
2014-01-31 12:55 - 2014-02-01 11:51 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Local\Ubisoft Game Launcher
2014-01-31 12:55 - 2014-02-01 10:44 - 00000000 ____D () C:\ProgramData\Ubisoft
2014-01-31 11:04 - 2014-02-01 10:33 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-01-31 11:04 - 2014-01-31 11:04 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\PunkBuster
2014-01-31 11:02 - 2014-03-02 02:17 - 00182609 _____ () C:\Windows\DirectX.log
2014-01-31 10:52 - 2014-01-31 10:52 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-01-31 10:46 - 2014-01-31 10:52 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite

==================== One Month Modified Files and Folders =======

2014-03-02 10:22 - 2014-03-02 10:22 - 00016247 _____ () C:\Users\NeoLazarus\Desktop\FRST.txt
2014-03-02 10:22 - 2014-03-02 10:22 - 00000000 ____D () C:\FRST
2014-03-02 10:11 - 2014-01-11 13:41 - 00013730 _____ () C:\Windows\setupact.log
2014-03-02 09:51 - 2013-03-31 17:54 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-02 09:37 - 2013-03-30 18:52 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-02 09:35 - 2013-03-30 19:07 - 00000000 ____D () C:\Program Files (x86)\AMD
2014-03-02 09:33 - 2013-11-07 14:27 - 00000000 ____D () C:\Program Files\GIMP 2
2014-03-02 09:21 - 2014-03-02 09:21 - 02156544 _____ (Farbar) C:\Users\NeoLazarus\Desktop\FRST64.exe
2014-03-02 09:10 - 2013-10-31 13:18 - 00000000 ____D () C:\ProgramData\Freemake
2014-03-02 09:09 - 2013-08-30 21:29 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec
2014-03-02 07:01 - 2014-01-06 18:46 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\vlc
2014-03-02 07:00 - 2009-07-14 18:58 - 00699462 _____ () C:\Windows\system32\perfh007.dat
2014-03-02 07:00 - 2009-07-14 18:58 - 00149602 _____ () C:\Windows\system32\perfc007.dat
2014-03-02 07:00 - 2009-07-14 06:13 - 01620812 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-02 06:59 - 2014-01-07 04:15 - 00000000 ___HD () C:\Users\NeoLazarus\hmpf
2014-03-02 06:26 - 2013-03-30 18:28 - 01263037 _____ () C:\Windows\WindowsUpdate.log
2014-03-02 04:05 - 2013-04-12 23:13 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-02 03:59 - 2013-04-12 23:13 - 00000000 ____D () C:\Users\NeoLazarus\Desktop\diverses
2014-03-02 03:46 - 2014-03-02 03:46 - 00001196 _____ () C:\Users\NeoLazarus\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
2014-03-02 03:45 - 2014-03-02 03:45 - 25889832 _____ () C:\Users\NeoLazarus\Downloads\vlc-2.1.3-win64.exe
2014-03-02 02:39 - 2014-03-02 02:39 - 00000000 ____D () C:\Users\NeoLazarus\Downloads\Gameforge Live
2014-03-02 02:17 - 2014-01-31 11:02 - 00182609 _____ () C:\Windows\DirectX.log
2014-03-02 01:27 - 2009-07-14 05:45 - 00019568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-02 01:27 - 2009-07-14 05:45 - 00019568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-02 01:20 - 2014-02-15 06:28 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Local\Overwolf
2014-03-02 01:20 - 2013-03-30 18:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-02 01:20 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 18:55 - 2014-02-28 18:51 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Local\Darksiders
2014-02-26 15:35 - 2013-04-30 19:26 - 01594156 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-26 12:05 - 2013-03-30 18:46 - 00230044 _____ () C:\Windows\PFRO.log
2014-02-25 14:30 - 2013-10-26 15:16 - 00000000 __SHD () C:\Users\NeoLazarus\wc
2014-02-22 02:52 - 2013-03-31 17:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-22 02:52 - 2013-03-31 17:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-22 02:52 - 2013-03-31 17:54 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-20 18:39 - 2014-02-20 18:38 - 00000000 ____D () C:\Users\NeoLazarus\Downloads\driver
2014-02-20 18:21 - 2014-02-20 18:21 - 05181736 _____ () C:\Users\NeoLazarus\Downloads\driver.rar
2014-02-20 18:08 - 2014-02-20 18:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2014-02-20 17:56 - 2014-02-20 17:56 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2014-02-17 20:51 - 2014-02-16 18:00 - 00000000 ____D () C:\ProgramData\Overwolf
2014-02-16 21:22 - 2014-02-16 21:22 - 00000000 ____D () C:\Users\NeoLazarus\Downloads\Download.am
2014-02-16 21:19 - 2013-08-14 21:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 21:17 - 2013-04-28 17:27 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 20:53 - 2013-04-12 23:41 - 00000000 ____D () C:\Users\NeoLazarus\Documents\my games
2014-02-16 17:58 - 2013-07-19 17:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 12:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 06:31 - 2014-02-15 06:31 - 00003248 _____ () C:\Windows\System32\Tasks\RunOW
2014-02-15 06:31 - 2014-02-15 06:31 - 00000801 _____ () C:\Users\NeoLazarus\Desktop\Shaiya-DE.lnk
2014-02-15 06:31 - 2013-03-31 19:12 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-02-15 06:30 - 2014-02-15 06:30 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portal of Etain
2014-02-15 06:28 - 2014-02-15 06:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-09 14:14 - 2013-03-30 22:26 - 00066240 _____ () C:\Users\NeoLazarus\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-09 14:13 - 2009-07-14 05:45 - 00295688 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-09 03:03 - 2014-02-09 03:03 - 00003118 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00003092 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00003090 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00003062 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00003060 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2014-02-09 03:03 - 2014-02-09 03:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2014-02-09 03:03 - 2014-02-09 03:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2014-02-09 03:03 - 2014-02-09 03:03 - 00000000 ____D () C:\Program Files\Microsoft Mouse and Keyboard Center
2014-02-09 02:58 - 2014-02-09 02:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2014-02-08 14:27 - 2014-01-10 15:57 - 00280976 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-02-08 14:27 - 2014-01-10 15:50 - 00280976 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-02-08 14:26 - 2014-02-08 14:26 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\Ubisoft
2014-02-08 14:26 - 2014-02-01 10:44 - 00000000 ____D () C:\Users\NeoLazarus\Documents\Assassin's Creed Revelations
2014-02-08 14:26 - 2014-01-10 15:57 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Local\PunkBuster
2014-02-08 14:26 - 2014-01-10 15:50 - 00280976 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-02-06 13:16 - 2014-02-13 19:38 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 19:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 19:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 19:38 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 19:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 19:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 19:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 19:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-13 19:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-13 19:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 19:38 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 19:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 19:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 19:38 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 19:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 19:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 19:38 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 19:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 19:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 19:38 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 19:38 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 19:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 19:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 19:38 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-13 19:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-13 19:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 19:38 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 19:38 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 19:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 19:38 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 19:38 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 19:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 19:38 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 19:38 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 19:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 19:38 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 19:38 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 19:38 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 19:38 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-01 11:51 - 2014-01-31 12:55 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Local\Ubisoft Game Launcher
2014-02-01 10:44 - 2014-01-31 12:55 - 00000000 ____D () C:\ProgramData\Ubisoft
2014-02-01 10:33 - 2014-01-31 11:04 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-01-31 21:02 - 2014-01-31 21:02 - 00001207 _____ () C:\Users\NeoLazarus\Desktop\Uplay.lnk
2014-01-31 21:02 - 2014-01-31 21:02 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-01-31 18:55 - 2014-01-31 18:55 - 00003192 _____ () C:\Windows\System32\Tasks\{EB0483F3-2663-43FC-B3ED-A31B1DDEC0BC}
2014-01-31 11:04 - 2014-01-31 11:04 - 00000000 ____D () C:\Users\NeoLazarus\AppData\Roaming\PunkBuster
2014-01-31 11:04 - 2014-01-10 15:50 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-31 10:52 - 2014-01-31 10:52 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-01-31 10:52 - 2014-01-31 10:46 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-01-31 10:46 - 2013-11-20 21:46 - 00381440 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys

Some content of TEMP:
====================
C:\Users\NeoLazarus\AppData\Local\Temp\AutoRun.exe
C:\Users\NeoLazarus\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\NeoLazarus\AppData\Local\Temp\avgnt.exe
C:\Users\NeoLazarus\AppData\Local\Temp\DTLite4481-0347.exe
C:\Users\NeoLazarus\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe
C:\Users\NeoLazarus\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\NeoLazarus\AppData\Local\Temp\sfamcc00001.dll
C:\Users\NeoLazarus\AppData\Local\Temp\sfextra.dll
C:\Users\NeoLazarus\AppData\Local\Temp\sqlite3.exe
C:\Users\NeoLazarus\AppData\Local\Temp\ubi95A5.tmp.exe
C:\Users\NeoLazarus\AppData\Local\Temp\vlc-2.1.4-win64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 13:29

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-03-2014 01
Ran by NeoLazarus at 2014-03-02 10:22:54
Running from C:\Users\NeoLazarus\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

4Story DE 4.0.167 (HKLM-x32\...\4Story_DE_is1) (Version:  - )
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
ABBYY FineReader 11 (HKLM-x32\...\{F1100000-0011-0000-0001-074957833700}) (Version: 11.0.460 - ABBYY)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.8 - Adobe Systems Incorporated)
Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden
AI Suite (HKLM-x32\...\{310BC5E2-31AF-49BB-904D-E71EB93645DC}) (Version: 1.06.22 - )
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alliance of Valiant Arms DE (HKLM-x32\...\Alliance of Valiant Arms DE) (Version:  - )
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version:  - Reloaded Productions)
Ashampoo Burning Studio 12 v.12.0.5 (HKLM-x32\...\{91B33C97-93EB-244C-F687-71D85E45A206}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG)
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 7.18.03 - ASUSTeK Computer Inc.)
ATI Catalyst Install Manager (HKLM\...\{62140B07-129A-2BD0-81D2-2A1A7408ADC8}) (Version: 3.0.762.0 - ATI Technologies, Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cool & Quiet (HKLM-x32\...\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version:  - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Darksiders (HKLM-x32\...\Steam App 50620) (Version:  - Vigil Games)
DarksidersInstaller (HKLM-x32\...\{B93EEE50-9C8F-45DF-95E4-3D85A6E242F3}) (Version: 1.00.1000 - Ihr Firmenname)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Duel of Champions (HKLM-x32\...\MMDoC-PDCLive) (Version:  - Ubisoft)
EAX(tm) Unified (SHELL) (HKLM-x32\...\EAX(tm) Unified (SHELL)) (Version:  - )
EPU-4 Engine (HKLM-x32\...\{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}) (Version: 1.02.01 - )
FINAL FANTASY VIII (HKLM-x32\...\FINAL FANTASY VIII) (Version:  - )
Haushaltsbuch8 (HKLM-x32\...\{8A9D2059-1482-4E99-A176-477B96747EAC}) (Version: 8.7.56 - Reiners-Software)
IP Camera Adapter (HKLM-x32\...\{F43D5CA6-1F22-436D-AF64-B254E7F1FC3D}) (Version: 1.0.0 - Pas)
Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Logitech QuickCam-Software (HKLM-x32\...\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}) (Version: 8.47.0000 - Logitech, Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.6361.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MPC-HC 1.6.7.7114 (9eb64ec) (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.6.7.7114 - MPC-HC Team)
Need for Speed Underground 2 (HKLM-x32\...\{909F8EBC-EC7F-48FF-0085-475D818F0F31}) (Version:  - )
NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.115.743 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 314.22 (Version: 314.22 - NVIDIA Corporation) Hidden
NVIDIA Update 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.12.12 - NVIDIA Corporation) Hidden
OutlookAddInNet3Setup (HKLM-x32\...\{5B4383F2-37EE-4E97-AD81-F5FF76F286DA}) (Version: 1.0.0 - Samsung)
PC Probe II (HKLM-x32\...\{F7338FA3-DAB5-49B2-900D-0AFB5760C166}) (Version: 1.04.92 - ASUSTeK Computer Inc.)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r4600) (Version:  - )
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.2.1540.10 - AMD)
RAIDXpert (x32 Version: 3.2.1540.10 - AMD) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.52.203.2012 - Realtek)
Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6526 - Realtek Semiconductor Corp.)
S.K.I.L.L. - Special Force 2 (HKLM-x32\...\Special Force 2 Beta_is1) (Version:  - )
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.) Hidden
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
Shaiya-DE (HKLM-x32\...\Shaiya-DE) (Version:  - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
Star Wars: The Force Unleashed (HKLM-x32\...\Star Wars: The Force Unleashed_is1) (Version: 1.0 - Activision)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH)
Total War: ROME II (HKLM-x32\...\Steam App 214950) (Version:  - Creative Assembly)
Uplay (HKLM-x32\...\Uplay) (Version: 4.2 - Ubisoft)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version:  - )
Warcraft III: All Products (HKCU\...\Warcraft III) (Version:  - )
Warhammer® 40,000™: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version:  - Relic Entertainment)
WISO Bewerbung 2008 (HKLM-x32\...\{FD065B02-AE17-4496-8C0F-FFD3A9FD9460}) (Version: 6.1.0.56 - Buhl Data Service GmbH)
World of Battles-DE (HKLM-x32\...\World of Battles-DE) (Version:  - )
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1) (Version:  - Wargaming.net)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)
World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version:  - Wargaming.net)

==================== Restore Points  =========================

25-02-2014 13:32:42 Windows Update
26-02-2014 14:33:47 Windows Update
02-03-2014 01:15:40 DirectX wurde installiert
02-03-2014 08:07:36 Removed Overwolf
02-03-2014 08:34:26 Removed The Compressonator 1.50
02-03-2014 08:36:12 Entfernt Tom Clancy's EndWar
02-03-2014 08:37:11 Entfernt Nail'd

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-01-10 20:06 - 00450639 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {26EBF24B-A760-474C-A0D7-625A7A979E48} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {271C2BB3-D415-4437-B38C-61FCD0721EE7} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {52630A9F-8D5B-4C41-9FD4-93653299C06B} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2009-12-28] (ASUSTeK Computer Inc.)
Task: {654C548B-4CD9-4FEC-989F-45A1D888A94A} - System32\Tasks\ASUS\Cpu Level Up Hook Lanunch => C:\Program Files\ASUS\Ai Suite\CpuLevelUpHookLaunch.exe [2009-12-28] ()
Task: {7226E8AE-ED2B-46C6-BB4B-FEC6E1B8EA1F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => P:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {740E251B-E589-4F75-ABB8-D0F26E1E8A25} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {751B27CC-699C-494D-BE17-08BF9128BD91} - System32\Tasks\RunOW => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe
Task: {78C8450B-AF4F-4EB4-B6A2-A13D0330DB3A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => P:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {81601ED1-DD10-49F6-8680-21B83BC8072E} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe
Task: {993DB066-9189-4B82-B9D4-F590C75B77CC} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {A089050A-2DF3-4055-A75F-4AAD659363E0} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {B9FD1A7B-9381-4F5F-B326-B4D8D6D73B75} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.01.12\AsLoader.exe [2010-01-13] (ASUSTeK Computer Inc.)
Task: {CB192FB2-DB5F-40B6-9799-4268425917E6} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe
Task: {CD781A22-268F-463D-BE2B-AF6071FD5CD8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-22] (Adobe Systems Incorporated)
Task: {CF00F544-7964-4C8F-BAAF-6899E9CDE465} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => P:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {E0FBC156-DCE4-45CA-A5CB-4DDD0E248856} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03] (ASUSTeK Computer Inc.)
Task: {EADD482E-0D68-40FE-8C44-61814A9D7DC6} - System32\Tasks\Freemium1ClickMaint => C:\Users\NeoLazarus\Downloads\1Click.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-03-30 18:44 - 2013-03-15 05:16 - 00086304 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2009-12-15 17:40 - 2009-12-15 17:40 - 00065536 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
2014-01-10 15:50 - 2014-01-31 11:04 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2009-12-15 17:40 - 2009-12-15 17:40 - 00122880 _____ () C:\Windows\SysWOW64\WinMsgBalloonServer.exe
2009-12-15 17:41 - 2009-12-15 17:41 - 00139264 _____ () C:\Windows\SysWOW64\WinMsgBalloonClient.exe
2013-03-30 18:39 - 2013-01-25 09:25 - 00397704 _____ () P:\Avira\AntiVir Desktop\sqlite3.dll
2009-12-15 23:44 - 2009-12-15 23:44 - 00516096 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\libxml2.dll
2013-03-30 18:41 - 2012-11-13 14:06 - 00108960 _____ () P:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-03-30 18:41 - 2012-11-13 14:06 - 00416160 _____ () P:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-03-30 18:41 - 2012-11-13 14:06 - 00158624 _____ () P:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-03-30 18:41 - 2012-08-23 09:38 - 00574840 _____ () P:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-03-30 18:41 - 2012-11-13 14:06 - 00528288 _____ () P:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2013-03-30 18:55 - 2009-03-19 22:35 - 00208896 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AiNap.dll
2013-03-30 18:55 - 2009-03-19 22:35 - 00008704 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\vvc.dll
2013-03-30 18:55 - 2009-01-15 14:55 - 00565248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll
2013-03-30 18:55 - 2009-03-25 16:53 - 00053248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
2013-03-30 18:41 - 2012-11-13 14:06 - 00554400 _____ () P:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2014-01-08 17:40 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-01-08 17:40 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files (x86)\Steam\libavutil-52.dll
2013-03-25 13:23 - 2014-02-11 03:34 - 00751616 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-03-29 10:53 - 2014-02-25 22:57 - 01135296 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-03-26 15:16 - 2014-01-11 00:33 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-12-11 08:51 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-03-29 10:53 - 2014-02-25 22:57 - 00119488 _____ () C:\Program Files (x86)\Steam\bin\audio.dll
2012-09-07 14:37 - 2013-06-15 00:49 - 00071680 _____ () C:\Program Files (x86)\Steam\bin\mssmp3.asi
2013-07-12 09:42 - 2013-06-15 00:49 - 00153088 _____ () C:\Program Files (x86)\Steam\bin\mssvoice.asi
2014-02-15 06:28 - 2014-02-15 06:28 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-02-22 02:52 - 2014-02-22 02:52 - 16265096 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/02/2014 06:41:39 AM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 8a8

Startzeit: 01cf35ad3a8df0d3

Endzeit: 0

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID: 4a4ae31e-a1cd-11e3-8df3-50465d6ade77

Error: (03/02/2014 03:09:30 AM) (Source: Application Hang) (User: )
Description: Programm DarksidersPC.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1354

Startzeit: 01cf35bc3727df68

Endzeit: 40

Anwendungspfad: V:\Games\Darksiders\steamapps\common\Darksiders\DarksidersPC.exe

Berichts-ID:

Error: (03/02/2014 03:06:54 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AION.bin, Version: 4313.403.1112.7589, Zeitstempel: 0x5281fb0e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x74a1c9f5
ID des fehlerhaften Prozesses: 0xf00
Startzeit der fehlerhaften Anwendung: 0xAION.bin0
Pfad der fehlerhaften Anwendung: AION.bin1
Pfad des fehlerhaften Moduls: AION.bin2
Berichtskennung: AION.bin3

Error: (03/02/2014 03:06:48 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AION.bin, Version: 4313.403.1112.7589, Zeitstempel: 0x5281fb0e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xf00
Startzeit der fehlerhaften Anwendung: 0xAION.bin0
Pfad der fehlerhaften Anwendung: AION.bin1
Pfad des fehlerhaften Moduls: AION.bin2
Berichtskennung: AION.bin3

Error: (03/02/2014 02:37:40 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AION.bin, Version: 4313.403.1112.7589, Zeitstempel: 0x5281fb0e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x74a1c9f5
ID des fehlerhaften Prozesses: 0x1688
Startzeit der fehlerhaften Anwendung: 0xAION.bin0
Pfad der fehlerhaften Anwendung: AION.bin1
Pfad des fehlerhaften Moduls: AION.bin2
Berichtskennung: AION.bin3

Error: (03/02/2014 02:37:35 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AION.bin, Version: 4313.403.1112.7589, Zeitstempel: 0x5281fb0e
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1688
Startzeit der fehlerhaften Anwendung: 0xAION.bin0
Pfad der fehlerhaften Anwendung: AION.bin1
Pfad des fehlerhaften Moduls: AION.bin2
Berichtskennung: AION.bin3

Error: (03/02/2014 02:10:11 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/02/2014 01:20:45 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/01/2014 10:35:49 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/28/2014 06:50:56 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall


System errors:
=============
Error: (03/02/2014 10:12:56 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:56 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:56 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:56 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:55 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:55 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:55 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:55 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:55 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.

Error: (03/02/2014 10:12:53 AM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.


Microsoft Office Sessions:
=========================
Error: (03/02/2014 06:41:39 AM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.175678a801cf35ad3a8df0d30C:\Windows\Explorer.EXE4a4ae31e-a1cd-11e3-8df3-50465d6ade77

Error: (03/02/2014 03:09:30 AM) (Source: Application Hang)(User: )
Description: DarksidersPC.exe1.0.0.1135401cf35bc3727df6840V:\Games\Darksiders\steamapps\common\Darksiders\DarksidersPC.exe

Error: (03/02/2014 03:06:54 AM) (Source: Application Error)(User: )
Description: AION.bin4313.403.1112.75895281fb0eunknown0.0.0.000000000c000000574a1c9f5f0001cf35b869bad4f2V:\Games\AION\Download\bin32\AION.binunknown52e6bbe1-a1af-11e3-8df3-50465d6ade77

Error: (03/02/2014 03:06:48 AM) (Source: Application Error)(User: )
Description: AION.bin4313.403.1112.75895281fb0eunknown0.0.0.000000000c000000500000000f0001cf35b869bad4f2V:\Games\AION\Download\bin32\AION.binunknown4f50b670-a1af-11e3-8df3-50465d6ade77

Error: (03/02/2014 02:37:40 AM) (Source: Application Error)(User: )
Description: AION.bin4313.403.1112.75895281fb0eunknown0.0.0.000000000c000000574a1c9f5168801cf35b716553e06V:\Games\AION\Download\bin32\AION.binunknown3d8c5634-a1ab-11e3-8df3-50465d6ade77

Error: (03/02/2014 02:37:35 AM) (Source: Application Error)(User: )
Description: AION.bin4313.403.1112.75895281fb0eunknown0.0.0.000000000c000000500000000168801cf35b716553e06V:\Games\AION\Download\bin32\AION.binunknown3ac8a0d7-a1ab-11e3-8df3-50465d6ade77

Error: (03/02/2014 02:10:11 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/02/2014 01:20:45 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/01/2014 10:35:49 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (02/28/2014 06:50:56 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 8174.12 MB
Available physical RAM: 5113.68 MB
Total Pagefile: 16346.41 MB
Available Pagefile: 12852.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:135.28 GB) (Free:39.26 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (GS0314DVD) (CDROM) (Total:7.54 GB) (Free:0 GB) UDF
Drive e: (ACR) (CDROM) (Total:8.1 GB) (Free:0 GB) CDFS
Drive g: (Games) (Fixed) (Total:465.76 GB) (Free:420.31 GB) NTFS
Drive i: (ACR) (CDROM) (Total:8.1 GB) (Free:0 GB) CDFS
Drive p: (Programme) (Fixed) (Total:330.48 GB) (Free:217.55 GB) NTFS
Drive v: (Video Musik Dokumente Bilder) (Fixed) (Total:465.76 GB) (Free:315.98 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 059131EC)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: AB784F54)

Partition: GPT Partition Type.

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E41C2B8D)

Partition: GPT Partition Type.

==================== End Of Log ============================



-.- help? anyone can me help??
__________________
Geändert von NeoLazarus (02.03.2014 um 11:09 Uhr)

Alt 03.03.2014, 08:42   #4
schrauber
/// the machine
/// TB-Ausbilder
 
Hijacker SuchMaschine - Standard

Hijacker SuchMaschine


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Hijacker SuchMaschine
aktiv, bildschirm, blockiert, ergebnisse, firefox, forum, frage, fragen, gesucht, google, heute, hijacker, infiziert, installation, lange, lazarus, manuel, namens, probleme, rum, spass, startbildschirm, suchmaschine, threads, trotz, typisch


« Superfish, Firefox öffnet ein zweites Mal, Browser langsam | WINDOWS 7 - Defogger erstellt keine ''defogger_disable.txt'' »


Ähnliche Themen: Hijacker SuchMaschine


  1. Ärger mit snapdo Suchmaschine
    Plagegeister aller Art und deren Bekämpfung - 11.04.2015 (11)
  2. Merkwürdige Suchmaschine
    Plagegeister aller Art und deren Bekämpfung - 31.03.2015 (1)
  3. sm.de Suchmaschine
    Plagegeister aller Art und deren Bekämpfung - 23.08.2014 (16)
  4. QV06 Suchmaschine
    Log-Analyse und Auswertung - 04.10.2013 (5)
  5. wisersearch - Suchmaschine
    Log-Analyse und Auswertung - 21.09.2013 (9)
  6. wisersearch Suchmaschine enternen
    Plagegeister aller Art und deren Bekämpfung - 18.09.2013 (9)
  7. Schädlingsbefall snap.do Suchmaschine
    Plagegeister aller Art und deren Bekämpfung - 21.06.2013 (12)
  8. vlc.de nun mit SuchMaschine.de-Startseite
    Plagegeister aller Art und deren Bekämpfung - 13.05.2013 (5)
  9. search.b1.org Suchmaschine / Hijacked?
    Log-Analyse und Auswertung - 27.04.2013 (9)
  10. U-Search und Startsear - in der Suchmaschine
    Plagegeister aller Art und deren Bekämpfung - 25.10.2012 (19)
  11. Suchmaschine leitet zu Rocketnews weiter
    Plagegeister aller Art und deren Bekämpfung - 04.06.2012 (11)
  12. Hijacker deaktivier Taskmanager und Registry-Editor - Hijacker nicht entfernbar
    Plagegeister aller Art und deren Bekämpfung - 17.08.2010 (2)
  13. Suchmaschine gehackt?!
    Plagegeister aller Art und deren Bekämpfung - 12.11.2006 (6)
  14. Hijacker: Suchmaschine auf Startseite
    Log-Analyse und Auswertung - 24.06.2004 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Hijacker SuchMaschine - Moin Comm, Hab nun schon lange rum gesucht und weder hier noch irgendwo anders einen treffer gelandet. habe seit ein paar stunden nen Hijacker namens SuchMaschine. Es Blockiert derzeit mein - Hijacker SuchMaschine...
Archiv
Du betrachtest: Hijacker SuchMaschine auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131