Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Programmstart langsam

Programmstart langsam


Log-Analyse und Auswertung: Programmstart langsam

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 10.03.2014, 14:31   #9
Raasuul
 
Programmstart langsam - Standard

Programmstart langsam


Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
Can not extract cabC:\Program Files\ESET\ESET Online Scanner\OnlineScanner.cabErr:Der Vorgang wurde erfolgreich beendet.
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b6a3c53f053852428d8cc7ae72c5b112
# engine=17370
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-08 11:47:57
# local_time=2014-03-09 12:47:57 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 54163 145953668 0 0
# scanned=512
# found=0
# cleaned=0
# scan_time=98
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b6a3c53f053852428d8cc7ae72c5b112
# engine=17370
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-09 01:14:36
# local_time=2014-03-09 02:14:36 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 106162 146002067 0 0
# scanned=591202
# found=1
# cleaned=0
# scan_time=22375
sh=CA884EFDF7E248E5F50504A45E4B0B901FB68A88 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Qoobox\Quarantine\C\Users\xsterni\AppData\Local\Google\Chrome\User Data\Default\Extensions\lclemeknkkfldgcomkdemnhobjbhbfgj\1.0\i_fy7Tc.js.vir"
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b6a3c53f053852428d8cc7ae72c5b112
# engine=17373
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-10 12:24:57
# local_time=2014-03-10 01:24:57 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 21830 146042288 0 0
# scanned=325399
# found=1
# cleaned=0
# scan_time=18159
sh=CA884EFDF7E248E5F50504A45E4B0B901FB68A88 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Qoobox\Quarantine\C\Users\xsterni\AppData\Local\Google\Chrome\User Data\Default\Extensions\lclemeknkkfldgcomkdemnhobjbhbfgj\1.0\i_fy7Tc.js.vir"
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.80  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky Internet Security   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 CCleaner     
 Java 7 Update 51  
 Java SE Development Kit 7 Update 25 
 Adobe Flash Player 	12.0.0.70  
 Mozilla Firefox (27.0.1) 
 Google Chrome 33.0.1750.117  
 Google Chrome 33.0.1750.146  
````````Process Check: objlist.exe by Laurent````````  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avp.exe  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avpui.exe  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 klwtblfs.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-03-2014 01
Ran by xsterni (administrator) on XSTERNI-PC on 10-03-2014 04:22:42
Running from C:\Users\xsterni\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(H+H Software GmbH) C:\Program Files\Virtual CD v10\System\VC10SecS.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(CANON INC.) C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Wondershare) C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(H+H Software GmbH) C:\Program Files\Virtual CD v10\System\VC10Play.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe
(Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [2296600 2013-07-31] (Logitech, Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11930696 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1637528 2012-10-09] (CANON INC.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap.dll [982232 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [WSHelperSetup.exe] - C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
HKLM\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
HKLM\...\Run: [Nero MediaHome 4] - C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKLM\...\Run: [VC10Player] - C:\Program Files\Virtual CD v10\System\VC10Play.exe [411976 2011-10-19] (H+H Software GmbH)
HKLM\...\Run: [NvBackend] - C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-748098522-1427644883-3744607763-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-748098522-1427644883-3744607763-1000\...\Run: [ApplePhotoStreams] - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)
HKU\S-1-5-21-748098522-1427644883-3744607763-1000\...\Run: [WSHelperSetup.exe] - C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
HKU\S-1-5-21-748098522-1427644883-3744607763-1000\...\Run: [Nero MediaHome 4] - C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
Startup: C:\Users\xsterni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled ()
Startup: C:\Users\xsterni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {637D6E3C-DF93-48A5-8362-159A8AC56B11} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&meta=
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\xsterni\AppData\Roaming\Mozilla\Firefox\Profiles\am4k9dic.default-1393156618842
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files\Virtual Earth 3D\ ()
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\xsterni\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: PAYBACK Toolbar - C:\Users\xsterni\AppData\Roaming\Mozilla\Firefox\Profiles\am4k9dic.default-1393156618842\Extensions\toolbar-ff@payback.de.xpi [2014-02-26]
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-08-11]
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-02-14]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-02-14]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-02-14]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-02-14]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-02-14]

========================== Services (Whitelisted) =================

R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG)
S2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-10-26] (Nero AG)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14658848 2013-12-10] (NVIDIA Corporation)
R2 VC10SecS; C:\Program Files\Virtual CD v10\System\VC10SecS.exe [144712 2011-10-19] (H+H Software GmbH)

==================== Drivers (Whitelisted) ====================

S4 AsIO; C:\Windows\System32\drivers\AsIO.sys [12400 2007-12-17] ()
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-08-07] (DT Soft Ltd)
S3 HH10Help.sys; C:\Windows\system32\drivers\HH10Help.sys [13952 2010-03-10] (H+H Software GmbH)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2014-02-18] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2014-02-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576096 2014-02-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2014-02-18] (Kaspersky Lab ZAO)
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [48640 2009-08-23] (Atheros Communications, Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-05] (NVIDIA Corporation)
S3 catchme; \??\C:\Users\xsterni\AppData\Local\Temp\catchme.sys [X]
R5 vdrv1000; C:\Windows\System32\Drivers\vdrv1000.sys [186392 2011-04-19] (H+H Software GmbH)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-10 04:22 - 2014-03-10 04:22 - 00017504 _____ () C:\Users\xsterni\Desktop\FRST.txt
2014-03-10 04:22 - 2014-03-10 04:22 - 00000000 ____D () C:\Users\xsterni\Desktop\FRST-OlderVersion
2014-03-10 03:41 - 2014-03-10 03:41 - 00001020 _____ () C:\Users\xsterni\Desktop\checkup.txt
2014-03-09 00:43 - 2014-03-09 00:43 - 00000000 ____D () C:\Program Files\ESET
2014-03-09 00:41 - 2014-03-09 00:40 - 00987442 _____ () C:\Users\xsterni\Desktop\SecurityCheck.exe
2014-03-09 00:41 - 2014-03-09 00:39 - 02347384 _____ (ESET) C:\Users\xsterni\Desktop\esetsmartinstaller_enu.exe
2014-03-09 00:40 - 2014-03-09 00:40 - 00987442 _____ () C:\Users\xsterni\Downloads\SecurityCheck.exe
2014-03-09 00:39 - 2014-03-09 00:39 - 02347384 _____ (ESET) C:\Users\xsterni\Downloads\esetsmartinstaller_enu.exe
2014-03-08 09:34 - 2014-03-08 09:34 - 00000000 ____D () C:\Windows\system32\%Report%
2014-03-07 17:32 - 2014-03-07 17:32 - 00000000 ____D () C:\Windows\ERUNT
2014-03-07 16:47 - 2014-03-07 16:50 - 00000000 ____D () C:\AdwCleaner
2014-03-07 15:41 - 2014-03-07 15:41 - 01037734 _____ (Thisisu) C:\Users\xsterni\Downloads\JRT.exe
2014-03-07 15:40 - 2014-03-07 15:40 - 01244192 _____ () C:\Users\xsterni\Downloads\adwcleaner.exe
2014-03-06 19:14 - 2013-08-13 17:49 - 00000318 _____ () C:\Users\xsterni\Desktop\Curse Client.appref-ms
2014-03-06 15:21 - 2014-03-06 15:21 - 00019840 _____ () C:\ComboFix.txt
2014-03-06 15:07 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-06 15:07 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-06 15:07 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-06 15:07 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-06 15:07 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-06 15:07 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-06 15:07 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-06 15:07 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-06 15:05 - 2014-03-06 15:21 - 00000000 ____D () C:\Qoobox
2014-03-06 15:04 - 2014-03-06 15:21 - 00000000 ____D () C:\Windows\erdnt
2014-03-06 15:02 - 2014-03-06 15:02 - 05187267 ____R (Swearware) C:\Users\xsterni\Downloads\ComboFix.exe
2014-03-05 15:50 - 2014-03-10 04:22 - 01145856 _____ (Farbar) C:\Users\xsterni\Desktop\FRST.exe
2014-03-05 15:49 - 2014-03-10 04:22 - 00000000 ____D () C:\FRST
2014-03-05 15:49 - 2014-03-05 15:49 - 00020143 _____ () C:\Users\xsterni\Downloads\FRST.txt
2014-03-05 15:48 - 2014-03-05 15:48 - 01145344 _____ (Farbar) C:\Users\xsterni\Downloads\FRST.exe
2014-03-05 04:49 - 2014-03-05 04:49 - 00011253 _____ () C:\Users\xsterni\Documents\hijackthis.log
2014-03-05 04:46 - 2014-03-05 04:47 - 00388608 _____ (Trend Micro Inc.) C:\Users\xsterni\Downloads\HiJackThis204.exe
2014-03-04 05:12 - 2014-03-04 05:16 - 00000000 ____D () C:\Users\xsterni\Desktop\wmi
2014-03-04 05:09 - 2014-03-04 05:09 - 00604992 _____ (Microsoft Corporation) C:\Users\xsterni\Downloads\WMIDiag.exe
2014-02-26 01:07 - 2014-02-26 01:07 - 00000000 ____D () C:\Users\xsterni\AppData\Local\Blizzard
2014-02-23 21:14 - 2014-02-23 21:14 - 02762128 _____ () C:\Users\xsterni\Downloads\mypwin250de.exe
2014-02-23 13:37 - 2014-02-23 13:37 - 00000000 ____D () C:\ProgramData\Cateia Games
2014-02-23 09:22 - 2014-03-07 16:30 - 00002692 _____ () C:\Windows\PFRO.log
2014-02-22 14:41 - 2014-02-22 14:41 - 00001783 _____ () C:\Users\Public\Desktop\Spiel Kingdom Tales.lnk
2014-02-22 14:41 - 2014-02-22 14:41 - 00001244 _____ () C:\Users\Public\Desktop\Weitere fantastische Spiele.lnk
2014-02-22 14:40 - 2014-02-22 14:40 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kingdom Tales
2014-02-22 12:42 - 2014-03-09 19:13 - 00007728 _____ () C:\Windows\setupact.log
2014-02-22 12:42 - 2014-02-22 12:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 02:29 - 2014-02-22 02:29 - 00000896 _____ () C:\Users\xsterni\Desktop\HD Tune.lnk
2014-02-22 02:29 - 2014-02-22 02:29 - 00000000 ____D () C:\Program Files\HD Tune
2014-02-22 02:28 - 2014-02-22 02:28 - 00642632 _____ (EFD Software ) C:\Users\xsterni\Downloads\hdtune_255.exe
2014-02-22 02:14 - 2014-02-22 02:14 - 00001127 _____ () C:\Users\xsterni\Desktop\Auslogics DiskDefrag.lnk
2014-02-22 02:14 - 2014-02-22 02:14 - 00000000 ____D () C:\ProgramData\Auslogics
2014-02-22 02:14 - 2014-02-22 02:14 - 00000000 ____D () C:\Program Files\Auslogics
2014-02-22 02:13 - 2014-02-22 02:13 - 06204024 _____ (Auslogics Labs Pty Ltd ) C:\Users\xsterni\Downloads\disk-defrag45setup.exe
2014-02-21 19:50 - 2014-02-21 19:50 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Malwarebytes
2014-02-21 19:49 - 2014-02-21 19:50 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-21 19:49 - 2014-02-21 19:49 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\xsterni\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-21 19:49 - 2014-02-21 19:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-21 19:49 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-21 19:43 - 2014-02-21 19:43 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-02-21 19:42 - 2014-02-21 19:48 - 00000000 ____D () C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-02-21 19:42 - 2014-02-21 19:42 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-02-21 19:40 - 2014-02-21 19:40 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\xsterni\Downloads\SpyHunter-Installer.exe
2014-02-21 16:22 - 2014-02-21 16:22 - 04781360 _____ (SPAMfighter ApS) C:\Users\xsterni\Downloads\slow-pcfighter_Web.exe
2014-02-20 20:43 - 2014-02-26 01:07 - 00000000 ____D () C:\Program Files\Hearthstone
2014-02-20 20:43 - 2014-02-20 20:43 - 00001115 _____ () C:\Users\Public\Desktop\Hearthstone.lnk
2014-02-20 20:41 - 2014-03-10 03:57 - 00000000 ____D () C:\Users\xsterni\AppData\Local\Battle.net
2014-02-20 20:41 - 2014-03-05 04:27 - 00000000 ____D () C:\Program Files\Battle.net
2014-02-20 20:41 - 2014-02-20 20:48 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Battle.net
2014-02-20 20:41 - 2014-02-20 20:43 - 00000000 ____D () C:\Program Files\Common Files\Blizzard Entertainment
2014-02-20 20:41 - 2014-02-20 20:41 - 00001104 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-02-20 20:40 - 2014-02-20 20:40 - 05971128 _____ (Blizzard Entertainment) C:\Users\xsterni\Downloads\Hearthstone-Beta-Setup-deDE(1).exe
2014-02-20 20:23 - 2014-02-20 20:24 - 05971128 _____ (Blizzard Entertainment) C:\Users\xsterni\Downloads\Hearthstone-Beta-Setup-deDE.exe
2014-02-20 09:20 - 2014-02-20 09:20 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-02-20 09:19 - 2014-02-08 17:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-02-20 09:07 - 2014-02-08 19:27 - 23683360 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 17560352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 10180896 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-20 09:07 - 2014-02-08 19:27 - 09728064 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 09690424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 02956576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 02410784 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 01049888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233489.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233489.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 00863520 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 00844576 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 00305600 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim32.dll
2014-02-20 09:07 - 2014-02-08 19:27 - 00148528 _____ (NVIDIA Corporation) C:\Windows\system32\nvinit.dll
2014-02-20 08:30 - 2014-02-20 08:30 - 00001051 _____ () C:\Users\xsterni\Desktop\DeepBurner.lnk
2014-02-20 08:30 - 2014-02-20 08:30 - 00001051 _____ () C:\Users\NeroMediaHomeUser.4\Desktop\DeepBurner.lnk
2014-02-20 08:30 - 2014-02-20 08:30 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\DeepBurner
2014-02-20 08:30 - 2014-02-20 08:30 - 00000000 ____D () C:\Program Files\Astonsoft
2014-02-20 08:29 - 2014-02-20 08:29 - 02782994 _____ () C:\Users\xsterni\Downloads\DeepBurner19.exe
2014-02-19 09:54 - 2014-02-19 09:54 - 00138592 _____ () C:\Users\xsterni\Documents\cc_20140219_095431.reg
2014-02-19 09:48 - 2014-02-19 09:48 - 04721920 _____ (Piriform Ltd) C:\Users\xsterni\Downloads\ccsetup410.exe
2014-02-19 09:48 - 2014-02-19 09:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-19 09:47 - 2014-02-19 09:47 - 00710848 _____ ( ) C:\Users\xsterni\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup410.exe
2014-02-18 10:05 - 2014-02-18 10:05 - 00000000 ____D () C:\Users\xsterni\Downloads\VCD_2014_2_18 (1)
2014-02-18 10:05 - 2014-02-18 10:05 - 00000000 ____D () C:\Users\xsterni\Downloads\VCD_2014_2_12 (1)
2014-02-18 10:04 - 2014-02-18 10:05 - 00000000 ____D () C:\Users\xsterni\Downloads\VCD_2014_2_10 (1)
2014-02-18 09:36 - 2014-02-08 21:56 - 437797414 _____ () C:\Users\xsterni\Downloads\RobbiTobbiunddasFliewatüütTeil1-3_ep7_A2ORT2MR62IX8Y.aax
2014-02-15 00:14 - 2014-02-15 00:15 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 22:51 - 2014-02-14 22:51 - 00002276 _____ () C:\Users\xsterni\Desktop\Sicherer Zahlungsverkehr.lnk
2014-02-14 22:50 - 2014-02-14 22:50 - 00001094 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-02-14 22:49 - 2014-02-18 23:07 - 00576096 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-14 22:49 - 2014-02-18 23:07 - 00094304 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-14 22:49 - 2014-02-14 22:49 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-02-14 22:49 - 2014-02-14 22:49 - 00000000 ____D () C:\Program Files\Kaspersky Lab
2014-02-14 22:22 - 2014-02-14 22:29 - 256314176 _____ () C:\Users\xsterni\Downloads\kis14.0.0.4651abDE_5155.exe
2014-02-13 00:22 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 00:22 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 00:22 - 2014-02-06 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 00:22 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 00:22 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 00:22 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 00:22 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 00:22 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 00:22 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 00:22 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 00:22 - 2014-02-06 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 00:22 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 00:22 - 2014-02-06 10:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 00:22 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 00:22 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 00:22 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 00:22 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 00:22 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 00:22 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 00:22 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 00:22 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 00:11 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 13:32 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 13:32 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 13:32 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 13:32 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 13:32 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 13:32 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 13:32 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 13:32 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 13:32 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 13:32 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 13:32 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 13:32 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 13:32 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 13:32 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-12 04:28 - 2014-02-12 04:30 - 81050880 _____ (Macrovision Corporation) C:\Users\xsterni\Downloads\VCD10Upd10502EG.exe
2014-02-10 22:13 - 2014-02-10 22:13 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Schnee
2014-02-10 22:13 - 2014-02-10 22:13 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\AlawarEntertainment
2014-02-09 22:50 - 2014-02-09 22:50 - 00000000 ____D () C:\Users\xsterni\Desktop\Die Monster AG

==================== One Month Modified Files and Folders =======

2014-03-10 04:24 - 2014-03-10 04:22 - 00017504 _____ () C:\Users\xsterni\Desktop\FRST.txt
2014-03-10 04:22 - 2014-03-10 04:22 - 00000000 ____D () C:\Users\xsterni\Desktop\FRST-OlderVersion
2014-03-10 04:22 - 2014-03-05 15:50 - 01145856 _____ (Farbar) C:\Users\xsterni\Desktop\FRST.exe
2014-03-10 04:22 - 2014-03-05 15:49 - 00000000 ____D () C:\FRST
2014-03-10 03:57 - 2014-02-20 20:41 - 00000000 ____D () C:\Users\xsterni\AppData\Local\Battle.net
2014-03-10 03:48 - 2013-10-28 14:30 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-10 03:41 - 2014-03-10 03:41 - 00001020 _____ () C:\Users\xsterni\Desktop\checkup.txt
2014-03-10 03:39 - 2013-08-07 22:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-10 02:23 - 2013-08-07 19:44 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\TS3Client
2014-03-09 23:16 - 2013-08-07 18:10 - 01853272 _____ () C:\Windows\WindowsUpdate.log
2014-03-09 21:56 - 2013-08-12 03:25 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-09 19:21 - 2009-07-14 05:34 - 00021088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-09 19:21 - 2009-07-14 05:34 - 00021088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-09 19:20 - 2013-11-17 22:48 - 00926720 ___SH () C:\Users\xsterni\Desktop\Thumbs.db
2014-03-09 19:20 - 2013-10-28 14:30 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-09 19:13 - 2014-02-22 12:42 - 00007728 _____ () C:\Windows\setupact.log
2014-03-09 19:12 - 2013-08-07 18:48 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-09 19:12 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-09 14:32 - 2013-09-03 21:58 - 00000000 ____D () C:\Windows\Minidump
2014-03-09 00:43 - 2014-03-09 00:43 - 00000000 ____D () C:\Program Files\ESET
2014-03-09 00:40 - 2014-03-09 00:41 - 00987442 _____ () C:\Users\xsterni\Desktop\SecurityCheck.exe
2014-03-09 00:40 - 2014-03-09 00:40 - 00987442 _____ () C:\Users\xsterni\Downloads\SecurityCheck.exe
2014-03-09 00:39 - 2014-03-09 00:41 - 02347384 _____ (ESET) C:\Users\xsterni\Desktop\esetsmartinstaller_enu.exe
2014-03-09 00:39 - 2014-03-09 00:39 - 02347384 _____ (ESET) C:\Users\xsterni\Downloads\esetsmartinstaller_enu.exe
2014-03-09 00:22 - 2013-08-13 17:48 - 00000000 ____D () C:\Users\xsterni\AppData\Local\Deployment
2014-03-08 10:04 - 2014-01-02 20:46 - 00001048 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-03-08 09:34 - 2014-03-08 09:34 - 00000000 ____D () C:\Windows\system32\%Report%
2014-03-07 17:32 - 2014-03-07 17:32 - 00000000 ____D () C:\Windows\ERUNT
2014-03-07 16:50 - 2014-03-07 16:47 - 00000000 ____D () C:\AdwCleaner
2014-03-07 16:30 - 2014-02-23 09:22 - 00002692 _____ () C:\Windows\PFRO.log
2014-03-07 16:30 - 2013-08-08 04:06 - 00000000 ____D () C:\Windows\Panther
2014-03-07 15:41 - 2014-03-07 15:41 - 01037734 _____ (Thisisu) C:\Users\xsterni\Downloads\JRT.exe
2014-03-07 15:41 - 2013-11-29 16:22 - 00164864 ___SH () C:\Users\xsterni\Downloads\Thumbs.db
2014-03-07 15:40 - 2014-03-07 15:40 - 01244192 _____ () C:\Users\xsterni\Downloads\adwcleaner.exe
2014-03-06 19:12 - 2013-08-07 22:11 - 00000000 ____D () C:\Users\xsterni\AppData\Local\Apps\2.0
2014-03-06 15:21 - 2014-03-06 15:21 - 00019840 _____ () C:\ComboFix.txt
2014-03-06 15:21 - 2014-03-06 15:05 - 00000000 ____D () C:\Qoobox
2014-03-06 15:21 - 2014-03-06 15:04 - 00000000 ____D () C:\Windows\erdnt
2014-03-06 15:21 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-03-06 15:21 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-06 15:20 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-03-06 15:02 - 2014-03-06 15:02 - 05187267 ____R (Swearware) C:\Users\xsterni\Downloads\ComboFix.exe
2014-03-05 15:49 - 2014-03-05 15:49 - 00020143 _____ () C:\Users\xsterni\Downloads\FRST.txt
2014-03-05 15:48 - 2014-03-05 15:48 - 01145344 _____ (Farbar) C:\Users\xsterni\Downloads\FRST.exe
2014-03-05 04:49 - 2014-03-05 04:49 - 00011253 _____ () C:\Users\xsterni\Documents\hijackthis.log
2014-03-05 04:47 - 2014-03-05 04:46 - 00388608 _____ (Trend Micro Inc.) C:\Users\xsterni\Downloads\HiJackThis204.exe
2014-03-05 04:27 - 2014-02-20 20:41 - 00000000 ____D () C:\Program Files\Battle.net
2014-03-04 10:31 - 2013-10-28 14:32 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-04 05:16 - 2014-03-04 05:12 - 00000000 ____D () C:\Users\xsterni\Desktop\wmi
2014-03-04 05:09 - 2014-03-04 05:09 - 00604992 _____ (Microsoft Corporation) C:\Users\xsterni\Downloads\WMIDiag.exe
2014-03-03 04:19 - 2009-07-14 05:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-28 00:20 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-26 11:39 - 2010-11-20 22:01 - 01602916 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-26 01:07 - 2014-02-26 01:07 - 00000000 ____D () C:\Users\xsterni\AppData\Local\Blizzard
2014-02-26 01:07 - 2014-02-20 20:43 - 00000000 ____D () C:\Program Files\Hearthstone
2014-02-23 21:17 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-23 21:14 - 2014-02-23 21:14 - 02762128 _____ () C:\Users\xsterni\Downloads\mypwin250de.exe
2014-02-23 13:37 - 2014-02-23 13:37 - 00000000 ____D () C:\ProgramData\Cateia Games
2014-02-22 14:41 - 2014-02-22 14:41 - 00001783 _____ () C:\Users\Public\Desktop\Spiel Kingdom Tales.lnk
2014-02-22 14:41 - 2014-02-22 14:41 - 00001244 _____ () C:\Users\Public\Desktop\Weitere fantastische Spiele.lnk
2014-02-22 14:40 - 2014-02-22 14:40 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kingdom Tales
2014-02-22 14:40 - 2009-07-14 04:20 - 00000000 ___RD () C:\Program Files (x86)
2014-02-22 12:42 - 2014-02-22 12:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 02:29 - 2014-02-22 02:29 - 00000896 _____ () C:\Users\xsterni\Desktop\HD Tune.lnk
2014-02-22 02:29 - 2014-02-22 02:29 - 00000000 ____D () C:\Program Files\HD Tune
2014-02-22 02:28 - 2014-02-22 02:28 - 00642632 _____ (EFD Software ) C:\Users\xsterni\Downloads\hdtune_255.exe
2014-02-22 02:14 - 2014-02-22 02:14 - 00001127 _____ () C:\Users\xsterni\Desktop\Auslogics DiskDefrag.lnk
2014-02-22 02:14 - 2014-02-22 02:14 - 00000000 ____D () C:\ProgramData\Auslogics
2014-02-22 02:14 - 2014-02-22 02:14 - 00000000 ____D () C:\Program Files\Auslogics
2014-02-22 02:13 - 2014-02-22 02:13 - 06204024 _____ (Auslogics Labs Pty Ltd ) C:\Users\xsterni\Downloads\disk-defrag45setup.exe
2014-02-21 19:50 - 2014-02-21 19:50 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Malwarebytes
2014-02-21 19:50 - 2014-02-21 19:49 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-21 19:49 - 2014-02-21 19:49 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\xsterni\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-21 19:49 - 2014-02-21 19:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-21 19:48 - 2014-02-21 19:42 - 00000000 ____D () C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-02-21 19:43 - 2014-02-21 19:43 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-02-21 19:42 - 2014-02-21 19:42 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-02-21 19:40 - 2014-02-21 19:40 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\xsterni\Downloads\SpyHunter-Installer.exe
2014-02-21 16:34 - 2013-08-13 17:44 - 00000000 ____D () C:\Users\xsterni\Desktop\Steffi Games
2014-02-21 16:22 - 2014-02-21 16:22 - 04781360 _____ (SPAMfighter ApS) C:\Users\xsterni\Downloads\slow-pcfighter_Web.exe
2014-02-21 12:01 - 2013-11-22 23:10 - 00000000 ____D () C:\Users\NeroMediaHomeUser.4
2014-02-21 09:39 - 2013-08-07 22:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-21 09:39 - 2013-08-07 22:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-20 20:48 - 2014-02-20 20:41 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Battle.net
2014-02-20 20:43 - 2014-02-20 20:43 - 00001115 _____ () C:\Users\Public\Desktop\Hearthstone.lnk
2014-02-20 20:43 - 2014-02-20 20:41 - 00000000 ____D () C:\Program Files\Common Files\Blizzard Entertainment
2014-02-20 20:42 - 2013-08-07 18:38 - 00000000 ____D () C:\Users\xsterni
2014-02-20 20:41 - 2014-02-20 20:41 - 00001104 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-02-20 20:40 - 2014-02-20 20:40 - 05971128 _____ (Blizzard Entertainment) C:\Users\xsterni\Downloads\Hearthstone-Beta-Setup-deDE(1).exe
2014-02-20 20:24 - 2014-02-20 20:23 - 05971128 _____ (Blizzard Entertainment) C:\Users\xsterni\Downloads\Hearthstone-Beta-Setup-deDE.exe
2014-02-20 18:03 - 2013-10-31 10:06 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-02-20 09:20 - 2014-02-20 09:20 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-02-20 09:20 - 2013-08-07 18:47 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-20 08:57 - 2013-10-31 10:06 - 00001895 _____ () C:\Users\xsterni\Desktop\CDBurnerXP.lnk
2014-02-20 08:30 - 2014-02-20 08:30 - 00001051 _____ () C:\Users\xsterni\Desktop\DeepBurner.lnk
2014-02-20 08:30 - 2014-02-20 08:30 - 00001051 _____ () C:\Users\NeroMediaHomeUser.4\Desktop\DeepBurner.lnk
2014-02-20 08:30 - 2014-02-20 08:30 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\DeepBurner
2014-02-20 08:30 - 2014-02-20 08:30 - 00000000 ____D () C:\Program Files\Astonsoft
2014-02-20 08:29 - 2014-02-20 08:29 - 02782994 _____ () C:\Users\xsterni\Downloads\DeepBurner19.exe
2014-02-19 13:36 - 2009-07-14 05:33 - 00368824 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-19 10:54 - 2013-08-07 19:31 - 00087592 _____ () C:\Users\xsterni\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-19 10:07 - 2013-08-12 15:51 - 00000000 ____D () C:\Program Files\SpeedFan
2014-02-19 09:54 - 2014-02-19 09:54 - 00138592 _____ () C:\Users\xsterni\Documents\cc_20140219_095431.reg
2014-02-19 09:50 - 2013-10-23 13:58 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Media Player Classic
2014-02-19 09:50 - 2013-08-07 21:57 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\DAEMON Tools Lite
2014-02-19 09:48 - 2014-02-19 09:48 - 04721920 _____ (Piriform Ltd) C:\Users\xsterni\Downloads\ccsetup410.exe
2014-02-19 09:48 - 2014-02-19 09:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-19 09:47 - 2014-02-19 09:47 - 00710848 _____ ( ) C:\Users\xsterni\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup410.exe
2014-02-18 23:07 - 2014-02-14 22:49 - 00576096 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-18 23:07 - 2014-02-14 22:49 - 00094304 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-18 23:07 - 2013-10-17 15:47 - 00135776 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-02-18 23:07 - 2013-10-17 15:47 - 00025184 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-02-18 23:07 - 2013-06-06 17:38 - 00144992 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-02-18 10:11 - 2013-08-14 16:03 - 00000000 ____D () C:\Users\xsterni\Documents\Audible
2014-02-18 10:05 - 2014-02-18 10:05 - 00000000 ____D () C:\Users\xsterni\Downloads\VCD_2014_2_18 (1)
2014-02-18 10:05 - 2014-02-18 10:05 - 00000000 ____D () C:\Users\xsterni\Downloads\VCD_2014_2_12 (1)
2014-02-18 10:05 - 2014-02-18 10:04 - 00000000 ____D () C:\Users\xsterni\Downloads\VCD_2014_2_10 (1)
2014-02-17 11:48 - 2013-08-07 19:06 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-15 00:15 - 2014-02-15 00:14 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 22:51 - 2014-02-14 22:51 - 00002276 _____ () C:\Users\xsterni\Desktop\Sicherer Zahlungsverkehr.lnk
2014-02-14 22:50 - 2014-02-14 22:50 - 00001094 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-02-14 22:49 - 2014-02-14 22:49 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-02-14 22:49 - 2014-02-14 22:49 - 00000000 ____D () C:\Program Files\Kaspersky Lab
2014-02-14 22:43 - 2013-08-07 19:29 - 00000000 ____D () C:\ProgramData\COMODO
2014-02-14 22:41 - 2013-08-07 19:30 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-02-14 22:29 - 2014-02-14 22:22 - 256314176 _____ () C:\Users\xsterni\Downloads\kis14.0.0.4651abDE_5155.exe
2014-02-13 09:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-13 00:22 - 2013-08-14 20:14 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 00:12 - 2013-08-07 23:43 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-13 00:06 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-02-12 04:30 - 2014-02-12 04:28 - 81050880 _____ (Macrovision Corporation) C:\Users\xsterni\Downloads\VCD10Upd10502EG.exe
2014-02-10 22:13 - 2014-02-10 22:13 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Schnee
2014-02-10 22:13 - 2014-02-10 22:13 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\AlawarEntertainment
2014-02-09 22:59 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-09 22:50 - 2014-02-09 22:50 - 00000000 ____D () C:\Users\xsterni\Desktop\Die Monster AG
2014-02-09 20:40 - 2013-08-14 16:04 - 00000000 ____D () C:\Users\xsterni\AppData\Local\Audible
2014-02-09 20:34 - 2013-10-11 20:14 - 00000000 ____D () C:\Users\xsterni\AppData\Local\Canon Easy-PhotoPrint EX
2014-02-09 02:10 - 2013-08-15 15:11 - 00000000 ____D () C:\Users\xsterni\AppData\Roaming\Skype
2014-02-08 21:56 - 2014-02-18 09:36 - 437797414 _____ () C:\Users\xsterni\Downloads\RobbiTobbiunddasFliewatüütTeil1-3_ep7_A2ORT2MR62IX8Y.aax
2014-02-08 19:27 - 2014-02-20 09:07 - 23683360 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 17560352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 10180896 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-08 19:27 - 2014-02-20 09:07 - 09728064 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 09690424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 02956576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 02410784 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 01049888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233489.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233489.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 00863520 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 00844576 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 00305600 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim32.dll
2014-02-08 19:27 - 2014-02-20 09:07 - 00148528 _____ (NVIDIA Corporation) C:\Windows\system32\nvinit.dll
2014-02-08 19:27 - 2013-08-07 19:12 - 15740232 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-02-08 19:27 - 2013-08-07 18:47 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-08 19:27 - 2013-02-25 23:22 - 14669032 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-02-08 19:27 - 2013-02-25 23:22 - 02713728 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2014-02-08 19:27 - 2013-02-25 23:22 - 00832424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshim.dll
2014-02-08 19:27 - 2013-02-25 23:22 - 00019204 _____ () C:\Windows\system32\nvinfo.pb
2014-02-08 18:11 - 2013-08-07 18:48 - 04348704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-02-08 18:11 - 2013-08-07 18:48 - 03045664 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-02-08 18:11 - 2013-08-07 18:48 - 02555168 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-02-08 18:11 - 2013-08-07 18:48 - 00664864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-02-08 18:11 - 2013-08-07 18:48 - 00376096 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-02-08 18:11 - 2013-08-07 18:48 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-02-08 17:18 - 2014-02-20 09:19 - 00599840 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe

Some content of TEMP:
====================
C:\Users\xsterni\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 00:18

==================== End Of Log ============================
--- --- ---


Danke Dir schon mal.

Noch als Frage wie kann ich mein System noch erfolgreich vor so einem Angriff schützen, reicht Kaspersky oder doch lieber was einzelnes?

Gruß Raasuul

 

Themen zu Programmstart langsam
arten, bitte um hilfe, daraus, hijack, hijack this, hilfe, langsam, langsamer, programme, programmstart, pup.optional.installcore.a, pup.optional.searchnewtab.a, pup.optional.websearchinfo, rechner, spyhunter, spyhunter entfernen, starte, starten, this, win32/adware.multiplug.h


« RunDLL Problem beim starten von C:\ Program Files (x86) \ Home Tab \ TBUpdater.dll Das angegebene Modul wurde nicht gefunden. | Win 7: Browser öffnet Tabs automatisch »


Ähnliche Themen: Programmstart langsam


  1. Sehr langsamer Programmstart
    Log-Analyse und Auswertung - 18.07.2014 (23)
  2. Extrem lange Ladezeiten bei Programmstart.
    Netzwerk und Hardware - 26.06.2014 (2)
  3. Fehleranzeige: Ungültiges Bild bei Programmstart
    Plagegeister aller Art und deren Bekämpfung - 15.11.2013 (7)
  4. Programmstart braucht sehr lange
    Plagegeister aller Art und deren Bekämpfung - 07.05.2013 (1)
  5. BKA-Trojaner: Programmstart im abgesicherten Modus vor Systemwiederherstellung
    Plagegeister aller Art und deren Bekämpfung - 25.01.2013 (5)
  6. Win 7 Pro 64bit lahmt bei Programmstart
    Log-Analyse und Auswertung - 28.06.2012 (1)
  7. cpu auf 100 bei programmstart
    Log-Analyse und Auswertung - 12.06.2010 (7)
  8. Programmstart diverser Progs und AV-Seiten werden geblockt, Internet langsam
    Plagegeister aller Art und deren Bekämpfung - 17.12.2008 (11)
  9. neustart des pc - programmstart in registry
    Mülltonne - 05.12.2008 (0)
  10. bei programmstart stürzt explorer ab
    Log-Analyse und Auswertung - 17.07.2008 (1)
  11. Programmstart - welche Programme brauche ich unbedingt?
    Alles rund um Windows - 18.03.2008 (1)
  12. Browser startet bei Programmstart
    Plagegeister aller Art und deren Bekämpfung - 09.08.2007 (1)
  13. Trojan Horse Meldung bei Programmstart
    Log-Analyse und Auswertung - 09.07.2007 (6)
  14. Erster Programmstart sehr langsam
    Log-Analyse und Auswertung - 30.05.2007 (3)
  15. Popups bei programmstart (firefox, steam, usw...)
    Log-Analyse und Auswertung - 11.10.2006 (4)
  16. Automatische Interneteinwahl bei Programmstart
    Plagegeister aller Art und deren Bekämpfung - 17.10.2005 (5)
  17. NOD32 - Problem mit langsamen Programmstart
    Antiviren-, Firewall- und andere Schutzprogramme - 16.03.2003 (6)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Programmstart langsam - Code: Alles auswählen Aufklappen ATTFilter ESETSmartInstaller@High as downloader log: Can not extract cabC:\Program Files\ESET\ESET Online Scanner\OnlineScanner.cabErr:Der Vorgang wurde erfolgreich beendet. ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 - Programmstart langsam...
Archiv
Du betrachtest: Programmstart langsam auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131