| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Infizierte Objekte: 8 (Nach wöchentlichen Scannen)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
10.03.2014, 23:01
| #1 |
 |  Infizierte Objekte: 8 (Nach wöchentlichen Scannen) Hallo. Ich muss mich mal wieder an sie wenden. Ich habe gerade eben einen Maleware-Scann durchlaufen lassen und habe gleich 8 Infizierte Objekte angezeigt bekommen *schock*. Ich habe bereits im Downloadordner nach hinweisen gesucht, dieser ist jedoch geleert worden, deshalb kann ich ihnen nicht sagen, woher diese Dateien stammen. Werde wohl zukünftlich ein Passwort auf diesem Computer einrichten müssen. Übrigens: Ich habe nach dem Scann keine Aktion durchgeführt. Malewarebytes ist noch Offen. Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.03.10.09 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16798 Alex :: ALEX-PC [Administrator] 10.03.2014 22:47:01 MBAM-log-2014-03-10 (22-53-21).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 255934 Laufzeit: 5 Minute(n), 46 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 3 HKCR\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} (PUP.Optional.MySearchDial.A) -> Keine Aktion durchgeführt. HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 1 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0A2O0R1R1H2Z1S1G0H1F -> Keine Aktion durchgeführt. Infizierte Dateiobjekte der Registrierung: 2 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.MySearchDial.A) -> Bösartig: (hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ch&cd=2XzuyEtN2Y1L1QzuzytD0FyCyDtB0CyBtBtAzz0CtBtAtB0BtN0D0Tzu0SyBzztCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1149192359&ir=) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.MySearchDial.A) -> Bösartig: (hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ch&cd=2XzuyEtN2Y1L1QzuzytD0FyCyDtB0CyBtBtAzz0CtBtAtB0BtN0D0Tzu0SyBzztCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1149192359&ir=) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Users\Alex\AppData\Local\Temp\ICReinstall_CR_Downloader_fuer_future-cop---l.a.p.d..exe (PUP.Optional.InstallCore) -> Keine Aktion durchgeführt. C:\Users\Alex\AppData\Local\Temp\is478594152\17383180_stp\Mysearchdial.exe (PUP.Optional.MySpeedDial.A) -> Keine Aktion durchgeführt. (Ende) |
|
11.03.2014, 07:58
| #2 |
| /// the machine /// TB-Ausbilder    | Infizierte Objekte: 8 (Nach wöchentlichen Scannen) hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
11.03.2014, 13:46
| #3 |
| | Infizierte Objekte: 8 (Nach wöchentlichen Scannen) Danke, dass sie hier angenommen haben.
__________________FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2014
Ran by Alex (administrator) on ALEX-PC on 11-03-2014 13:39:44
Running from C:\Users\Alex\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
HKU\S-1-5-21-992614989-2845173188-1475335217-1003\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-992614989-2845173188-1475335217-1003\...\Run: [Spotify Web Helper] - C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-03-06] (Spotify Ltd)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ch&cd=2XzuyEtN2Y1L1QzuzytD0FyCyDtB0CyBtBtAzz0CtBtAtB0BtN0D0Tzu0SyBzztCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1149192359&ir=
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0202ch&cd=2XzuyEtN2Y1L1QzuzytD0FyCyDtB0CyBtBtAzz0CtBtAtB0BtN0D0Tzu0SyBzztCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1149192359&ir=
SearchScopes: HKCU - DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0202ch&cd=2XzuyEtN2Y1L1QzuzytD0FyCyDtB0CyBtBtAzz0CtBtAtB0BtN0D0Tzu0SyBzztCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1149192359&ir=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0202ch&cd=2XzuyEtN2Y1L1QzuzytD0FyCyDtB0CyBtBtAzz0CtBtAtB0BtN0D0Tzu0SyBzztCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1149192359&ir=
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 155.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default
FF user.js: detected! => C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default\user.js
FF Homepage: hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ch&cd=2XzuyEtN2Y1L1QzuzytD0FyCyDtB0CyBtBtAzz0CtBtAtB0BtN0D0Tzu0SyBzztCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1149192359&ir=
FF SelectedSearchEngine: Mysearchdial
FF DefaultSearchEngine: Mysearchdial
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @idsoftware.com/QuakeLive - C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npnxgameEU.dll (Nexon)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Alex\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Alex\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Alex\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Alex\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Alex\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Alex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\Alex\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Alex\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\Alex\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default\Extensions\staged [2014-02-19]
FF Extension: Adblock Plus - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-15]
FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
Chrome:
=======
CHR HomePage: hxxp://www.youtube.com/
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-25]
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-25]
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-25]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-11-25]
CHR Extension: (Google-Suche) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-25]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-11-25]
CHR Extension: (GFACE Experience Plugin) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol [2013-11-30]
CHR Extension: (AdBlock) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-11-25]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-11-25]
CHR Extension: (Content Blocker) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-11-25]
CHR Extension: (Virtual Keyboard) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-11-25]
CHR Extension: (Google Wallet) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-25]
CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-25]
CHR Extension: (Anti-Banner) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-11-25]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [koalekbhpbggkcfhkkbolikjoaobbppi] - C:\Program Files (x86)\PutLockerDownloader\PutLockerDownloader10.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2012-12-28]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-24] ()
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-01-06] (BitRaider, LLC)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 Intel(R) Small Business Advantage; C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [49376 2012-02-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4784312 2014-01-15] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-10] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2013-10-03] (BitRaider)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-08-28] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-08-28] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 13:39 - 2014-03-11 13:40 - 00023682 _____ () C:\Users\Alex\Downloads\FRST.txt
2014-03-11 13:39 - 2014-03-11 13:39 - 00000000 ____D () C:\FRST
2014-03-11 13:38 - 2014-03-11 13:38 - 02157056 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2014-03-11 00:31 - 2014-03-11 00:36 - 22370505 _____ () C:\Users\Alex\Downloads\sborka.rar
2014-03-11 00:29 - 2014-03-11 00:29 - 20495672 _____ () C:\Users\Alex\Downloads\Sounds [xGrims The Warx].rar
2014-03-11 00:27 - 2014-03-11 00:26 - 19566321 _____ () C:\Users\Alex\Desktop\GENRL.rar
2014-03-11 00:25 - 2014-03-11 00:26 - 19566321 _____ () C:\Users\Alex\Downloads\GENRL.rar
2014-03-11 00:24 - 2014-03-11 00:24 - 00228184 _____ () C:\Users\Alex\Downloads\sounds.rar
2014-03-10 23:50 - 2011-03-20 15:54 - 04208203 _____ () C:\Users\Alex\Desktop\CHUD.rar
2014-03-10 23:49 - 2014-03-10 23:50 - 51317599 _____ () C:\Users\Alex\Downloads\Hud Mods (1).rar
2014-03-10 23:38 - 2014-03-10 23:39 - 51317599 _____ () C:\Users\Alex\Downloads\Hud Mods.rar
2014-03-10 23:28 - 2014-03-10 23:28 - 01047686 _____ () C:\Users\Alex\Downloads\HUD El Coronos by Vadya.rar
2014-03-10 23:22 - 2014-03-10 23:22 - 19751913 _____ () C:\Users\Alex\Downloads\mods.rar
2014-03-10 23:12 - 2014-03-10 23:12 - 25809420 _____ () C:\Users\Alex\Downloads\GENRL
2014-03-10 22:45 - 2014-03-10 22:45 - 00001116 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-10 22:45 - 2014-03-10 22:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-10 22:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-10 22:44 - 2014-03-10 22:44 - 00613200 _____ (Chip Digital GmbH) C:\Users\Alex\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-03-10 22:26 - 2014-03-10 22:26 - 00000230 _____ () C:\Windows\wininit.ini
2014-03-10 20:20 - 2014-03-10 20:23 - 605994476 _____ () C:\Users\Alex\Desktop\Mein Film.wmv
2014-03-10 18:45 - 2014-03-10 18:45 - 00000000 ____D () C:\Users\Alex\AppData\Local\{851C0977-1F12-4B8A-ABB1-86BAA58C9801}
2014-03-10 14:09 - 2014-03-10 14:09 - 00001179 _____ () C:\Users\Alex\Desktop\UniversalBinder.exe - Verknüpfung.lnk
2014-03-10 12:56 - 2014-03-10 12:56 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\.UniversalBinder
2014-03-10 12:55 - 2014-03-10 18:52 - 00000000 ____D () C:\Users\Alex\Desktop\Univeral Keybinder
2014-03-10 00:46 - 2014-03-10 00:46 - 00044621 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel
2014-03-09 11:04 - 2014-03-09 11:04 - 00000000 ____D () C:\Users\Alex\AppData\Local\{61CD2EC2-C1EF-408C-9213-0B95EE0CFAA4}
2014-03-08 16:51 - 2014-03-08 16:51 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-03-08 16:05 - 2014-03-08 16:05 - 11990847 _____ () C:\Users\Alex\Desktop\sa-mp-0.3z-R1-install (3).exe
2014-03-08 13:04 - 2014-03-08 13:04 - 00000000 ____D () C:\Users\Alex\AppData\Local\{E582D165-22CC-416B-B397-D8F3D725DCC0}
2014-03-07 20:39 - 2014-03-07 20:39 - 00000000 ____D () C:\Users\Alex\AppData\Local\{A209B34C-3093-43DF-9A71-EE0574F5789F}
2014-03-07 12:50 - 2014-03-07 13:05 - 00000000 ____D () C:\Users\Alex\Desktop\Yolol
2014-03-07 01:03 - 2014-03-07 01:03 - 00000221 _____ () C:\Users\Alex\Desktop\The Elder Scrolls V Skyrim.url
2014-03-06 23:08 - 2014-03-06 23:08 - 00000000 ____D () C:\Users\Alex\Desktop\Neuer Ordner
2014-03-06 20:05 - 2014-03-06 20:06 - 00000000 ____D () C:\Users\Alex\Desktop\DayZ Server EinlogBild
2014-03-06 19:32 - 2014-03-06 19:32 - 00008405 _____ () C:\Users\Alex\Desktop\Mein Film1.wlmp
2014-03-06 18:44 - 2014-03-06 18:44 - 00000000 ____D () C:\Users\Alex\AppData\Local\{AC9EA3B4-8B79-4985-A447-F721DF0FA63C}
2014-03-06 13:31 - 2014-03-06 13:31 - 00001807 _____ () C:\Users\Alex\Desktop\Spotify.lnk
2014-03-06 13:31 - 2014-03-06 13:31 - 00001793 _____ () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-03-06 13:30 - 2014-03-10 23:34 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Spotify
2014-03-05 19:58 - 2014-03-05 19:58 - 00001828 _____ () C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
2014-03-05 16:18 - 2014-03-05 16:18 - 10534332 _____ () C:\Users\Alex\Desktop\Save vor neuer enb.rar
2014-03-05 16:14 - 2014-03-05 16:16 - 00000000 ____D () C:\Users\Alex\Desktop\Gta - Wichtige Mods usw
2014-03-05 16:13 - 2014-03-05 16:13 - 70115018 _____ () C:\Users\Alex\Desktop\ENB+Streamdinge.rar
2014-03-05 16:11 - 2014-03-05 16:05 - 00243892 _____ () C:\Users\Alex\Desktop\Stream-Tools.rar
2014-03-05 16:06 - 2014-03-05 16:06 - 69972598 _____ () C:\Users\Alex\Desktop\11111.rar
2014-03-05 12:25 - 2014-03-05 12:25 - 00000981 _____ () C:\Users\Alex\Desktop\gta sa neu - Verknüpfung.lnk
2014-03-04 21:48 - 2014-03-04 21:48 - 34988803 _____ () C:\Users\Alex\Desktop\BESCHEDE ENB!!!!!!!!!!!!!!!.rar
2014-03-04 21:18 - 2014-03-04 21:26 - 970950647 _____ () C:\Users\Alex\Desktop\gta sa HD!!!!!!!!!!!!.rar
2014-03-04 20:48 - 2014-03-04 20:54 - 00000000 ____D () C:\Users\Alex\Desktop\gta!
2014-03-04 20:47 - 2014-03-04 20:44 - 191391379 _____ () C:\Users\Alex\Desktop\Modpack G5.7z
2014-03-04 16:04 - 2014-03-04 16:05 - 00000000 ____D () C:\Users\Alex\Desktop\Cleos
2014-03-04 12:05 - 2014-03-06 19:27 - 00000000 ____D () C:\Users\Alex\AppData\Local\Windows Live
2014-03-04 12:05 - 2014-03-04 12:05 - 00000000 ____D () C:\Users\Alex\AppData\Local\{6B163F72-7EC1-4087-95CF-9AA38C8BC108}
2014-03-03 23:23 - 2014-03-03 23:23 - 00019642 _____ () C:\Users\Alex\Desktop\]OP[iTroll_v2.cs
2014-03-03 21:10 - 2014-03-03 21:10 - 00000995 _____ () C:\Users\Alex\Desktop\Bandicam.lnk
2014-03-03 21:09 - 2014-03-03 21:10 - 00000000 ____D () C:\Program Files (x86)\Bandicam
2014-03-03 14:14 - 2014-03-03 14:14 - 00000730 _____ () C:\Users\Alex\Desktop\samp.exe - Verknüpfung.lnk
2014-03-03 14:00 - 2014-03-03 14:00 - 00069827 _____ () C:\Users\Alex\Downloads\1220357907_SAStreamMemFix2.0 (2).rar
2014-03-03 13:39 - 2014-03-03 13:35 - 944711399 _____ () C:\Users\Alex\Desktop\GTA+San+Andreas+by+TheSaazZzzz.zip
2014-03-03 13:21 - 2013-02-12 22:55 - 12022145 _____ () C:\Users\Alex\Desktop\sa-mp-0.3x-R1-2-install.exe
2014-03-02 18:17 - 2014-03-02 18:17 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Renegade X
2014-03-02 18:16 - 2014-03-02 18:17 - 00000000 ____D () C:\Program Files (x86)\Renegade X
2014-03-02 14:52 - 2014-03-02 14:58 - 1768010393 _____ () C:\Users\Alex\Downloads\RenegadeX-OpenBeta-01.exe
2014-03-01 13:29 - 2014-03-10 21:44 - 00000651 _____ () C:\Users\Alex\Desktop\MeinBrutalo Namen.txt
2014-03-01 02:24 - 2014-03-01 02:24 - 00000000 ____D () C:\Users\Alex\Documents\Gunz2
2014-03-01 02:15 - 2014-03-01 02:20 - 819108260 _____ () C:\Users\Alex\Documents\LostSagaEU_Full.exe
2014-03-01 02:00 - 2014-03-01 02:00 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-02-26 02:18 - 2014-02-26 02:28 - 00000185 _____ () C:\attach.ini
2014-02-26 02:18 - 2014-02-26 02:18 - 00000020 _____ () C:\form_signin.ini
2014-02-26 02:15 - 2014-02-26 02:27 - 00000236 _____ () C:\mapui.ini
2014-02-25 22:49 - 2014-02-25 23:00 - 00000000 ____D () C:\Users\Alex\Musik
2014-02-21 20:52 - 2014-02-21 20:52 - 00000000 ____D () C:\Users\Alex\Desktop\WoT Medallien
2014-02-19 20:33 - 2014-02-19 20:33 - 00000044 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG
2014-02-19 20:29 - 2014-02-19 20:29 - 00784150 _____ () C:\Users\Alex\Desktop\pSX1.13.zip
2014-02-19 15:17 - 2014-02-19 15:20 - 276927952 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\334.89-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-02-19 15:03 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-02-19 15:03 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-02-18 15:07 - 2014-02-18 15:07 - 00000000 ____D () C:\Users\Alex\Documents\Gamepires
2014-02-18 14:38 - 2014-02-18 14:39 - 00002406 _____ () C:\DelFix.txt
2014-02-18 14:34 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-18 14:34 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-18 14:34 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-18 14:34 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-18 14:34 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-18 14:34 - 2014-02-01 07:45 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-18 14:34 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-18 14:34 - 2013-12-21 10:39 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-18 14:34 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-18 14:33 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-18 14:33 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-18 14:33 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-18 14:33 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-18 14:33 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-18 14:33 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-18 14:33 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-18 14:33 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-18 14:33 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-18 14:32 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-18 14:32 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-18 14:32 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-18 14:32 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-18 14:31 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-18 14:31 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-18 14:31 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-18 14:31 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-17 23:50 - 2014-02-17 23:55 - 00000000 ____D () C:\Users\Alex\AppData\Local\Microsoft Games
2014-02-17 17:10 - 2014-02-17 17:10 - 00030891 _____ () C:\Users\Alex\Desktop\SixthSenseSCHLURP.rar
2014-02-17 12:32 - 2014-02-17 12:33 - 00000626 _____ () C:\Users\Alex\AppData\Roaming\All CPU MeterV3_Settings.ini
2014-02-17 12:00 - 2014-02-18 14:38 - 00000000 ____D () C:\Windows\ERUNT
2014-02-15 22:01 - 2014-02-15 22:12 - 00000000 ____D () C:\Program Files (x86)\Naturalsoft
2014-02-15 11:13 - 2014-02-15 11:13 - 446400727 _____ (JT_Adams's Modwerkstatt ) C:\Users\Alex\Desktop\JTAdams AGQJ Engine 2.2 EN (2).exe
2014-02-13 19:29 - 2014-03-10 00:56 - 00000000 ____D () C:\Users\Alex\Desktop\GFX
2014-02-13 11:32 - 2014-02-15 22:12 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Naturalsoft
2014-02-13 11:31 - 2014-02-15 22:12 - 00000000 ____D () C:\Users\Alex\Documents\Naturalsoft
2014-02-12 14:30 - 2014-02-12 14:30 - 00000000 ____D () C:\Users\Alex\Documents\Codemasters
2014-02-12 14:20 - 2014-02-12 14:20 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-02-12 14:20 - 2014-02-12 14:20 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-02-12 14:20 - 2014-02-12 14:20 - 00121880 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-02-12 14:20 - 2014-02-12 14:20 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-02-12 14:20 - 2014-02-12 14:20 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-02-12 14:16 - 2014-02-12 14:16 - 00000000 ____D () C:\Program Files (x86)\Codemasters
2014-02-11 19:14 - 2014-02-11 19:14 - 00000000 ____D () C:\Users\Alex\AppData\Local\Avg2014
2014-02-11 16:12 - 2014-02-11 16:12 - 00000000 ____D () C:\Users\Alex\Documents\ACR
2014-02-11 16:02 - 2014-02-11 16:27 - 00000000 ____D () C:\Program Files (x86)\ACR
2014-02-11 13:15 - 2014-02-11 13:15 - 00000657 _____ () C:\Users\Public\Desktop\World of Tanks.lnk
2014-02-11 13:14 - 2014-03-10 19:11 - 00000000 ____D () C:\Users\Alex\Desktop\WoT
2014-02-10 15:22 - 2014-02-25 01:07 - 00000000 ____D () C:\Users\Alex\Desktop\Replays
2014-02-09 17:16 - 2014-02-09 17:16 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\steamvr
==================== One Month Modified Files and Folders =======
2014-03-11 13:40 - 2014-03-11 13:39 - 00023682 _____ () C:\Users\Alex\Downloads\FRST.txt
2014-03-11 13:39 - 2014-03-11 13:39 - 00000000 ____D () C:\FRST
2014-03-11 13:38 - 2014-03-11 13:38 - 02157056 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2014-03-11 13:37 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 13:37 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 13:33 - 2013-06-17 11:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 13:33 - 2013-01-04 23:51 - 01180911 _____ () C:\Windows\WindowsUpdate.log
2014-03-11 13:32 - 2013-02-14 12:12 - 00091416 _____ () C:\Windows\setupact.log
2014-03-11 13:31 - 2013-08-28 15:14 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-11 13:30 - 2013-11-25 16:33 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-11 13:30 - 2013-01-05 00:19 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Skype
2014-03-11 13:29 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-11 00:53 - 2013-11-25 16:33 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-11 00:43 - 2014-02-04 22:24 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003UA.job
2014-03-11 00:36 - 2014-03-11 00:31 - 22370505 _____ () C:\Users\Alex\Downloads\sborka.rar
2014-03-11 00:29 - 2014-03-11 00:29 - 20495672 _____ () C:\Users\Alex\Downloads\Sounds [xGrims The Warx].rar
2014-03-11 00:26 - 2014-03-11 00:27 - 19566321 _____ () C:\Users\Alex\Desktop\GENRL.rar
2014-03-11 00:26 - 2014-03-11 00:25 - 19566321 _____ () C:\Users\Alex\Downloads\GENRL.rar
2014-03-11 00:24 - 2014-03-11 00:24 - 00228184 _____ () C:\Users\Alex\Downloads\sounds.rar
2014-03-10 23:52 - 2013-02-14 12:11 - 01852612 _____ () C:\Windows\PFRO.log
2014-03-10 23:51 - 2012-09-08 18:12 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-10 23:50 - 2014-03-10 23:49 - 51317599 _____ () C:\Users\Alex\Downloads\Hud Mods (1).rar
2014-03-10 23:39 - 2014-03-10 23:38 - 51317599 _____ () C:\Users\Alex\Downloads\Hud Mods.rar
2014-03-10 23:34 - 2014-03-06 13:30 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Spotify
2014-03-10 23:28 - 2014-03-10 23:28 - 01047686 _____ () C:\Users\Alex\Downloads\HUD El Coronos by Vadya.rar
2014-03-10 23:22 - 2014-03-10 23:22 - 19751913 _____ () C:\Users\Alex\Downloads\mods.rar
2014-03-10 23:12 - 2014-03-10 23:12 - 25809420 _____ () C:\Users\Alex\Downloads\GENRL
2014-03-10 22:45 - 2014-03-10 22:45 - 00001116 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-10 22:45 - 2014-03-10 22:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-10 22:44 - 2014-03-10 22:44 - 00613200 _____ (Chip Digital GmbH) C:\Users\Alex\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-03-10 22:26 - 2014-03-10 22:26 - 00000230 _____ () C:\Windows\wininit.ini
2014-03-10 22:07 - 2014-01-03 22:36 - 00000000 ____D () C:\Users\Alex\jagexcache
2014-03-10 22:07 - 2014-01-03 10:45 - 00000000 ____D () C:\Program Files (x86)\MAESTIA
2014-03-10 22:03 - 2013-05-27 22:33 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-10 22:02 - 2012-05-08 06:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-10 22:00 - 2013-11-23 19:37 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-03-10 22:00 - 2013-02-24 11:07 - 00000000 ____D () C:\ProgramData\Origin
2014-03-10 21:59 - 2013-01-05 01:27 - 00000000 ____D () C:\Users\Alex\AppData\Local\CrashDumps
2014-03-10 21:58 - 2013-10-04 22:54 - 00290184 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-10 21:58 - 2013-02-25 20:03 - 00290184 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-10 21:58 - 2013-02-25 20:00 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-10 21:44 - 2014-03-01 13:29 - 00000651 _____ () C:\Users\Alex\Desktop\MeinBrutalo Namen.txt
2014-03-10 21:38 - 2013-10-04 22:54 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-10 21:11 - 2013-02-18 18:46 - 00997395 _____ () C:\Windows\DirectX.log
2014-03-10 20:49 - 2013-02-21 15:57 - 00000000 ____D () C:\Users\Alex\AppData\Local\Spotify
2014-03-10 20:23 - 2014-03-10 20:20 - 605994476 _____ () C:\Users\Alex\Desktop\Mein Film.wmv
2014-03-10 19:11 - 2014-02-11 13:14 - 00000000 ____D () C:\Users\Alex\Desktop\WoT
2014-03-10 19:09 - 2013-02-28 19:55 - 00000000 ____D () C:\Program Files (x86)\War Thunder
2014-03-10 18:52 - 2014-03-10 12:55 - 00000000 ____D () C:\Users\Alex\Desktop\Univeral Keybinder
2014-03-10 18:45 - 2014-03-10 18:45 - 00000000 ____D () C:\Users\Alex\AppData\Local\{851C0977-1F12-4B8A-ABB1-86BAA58C9801}
2014-03-10 17:41 - 2013-03-03 23:40 - 00000000 ____D () C:\Users\Alex\Desktop\Desktop zeug usw
2014-03-10 16:43 - 2014-02-04 22:24 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003Core.job
2014-03-10 14:09 - 2014-03-10 14:09 - 00001179 _____ () C:\Users\Alex\Desktop\UniversalBinder.exe - Verknüpfung.lnk
2014-03-10 12:56 - 2014-03-10 12:56 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\.UniversalBinder
2014-03-10 00:56 - 2014-02-13 19:29 - 00000000 ____D () C:\Users\Alex\Desktop\GFX
2014-03-10 00:52 - 2013-01-31 14:33 - 00000000 ____D () C:\Users\Alex\.gimp-2.8
2014-03-10 00:46 - 2014-03-10 00:46 - 00044621 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel
2014-03-09 15:10 - 2013-01-06 17:07 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\TS3Client
2014-03-09 11:04 - 2014-03-09 11:04 - 00000000 ____D () C:\Users\Alex\AppData\Local\{61CD2EC2-C1EF-408C-9213-0B95EE0CFAA4}
2014-03-08 16:51 - 2014-03-08 16:51 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-03-08 16:05 - 2014-03-08 16:05 - 11990847 _____ () C:\Users\Alex\Desktop\sa-mp-0.3z-R1-install (3).exe
2014-03-08 13:04 - 2014-03-08 13:04 - 00000000 ____D () C:\Users\Alex\AppData\Local\{E582D165-22CC-416B-B397-D8F3D725DCC0}
2014-03-07 20:39 - 2014-03-07 20:39 - 00000000 ____D () C:\Users\Alex\AppData\Local\{A209B34C-3093-43DF-9A71-EE0574F5789F}
2014-03-07 16:19 - 2013-10-25 11:30 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Audacity
2014-03-07 16:15 - 2013-07-20 21:11 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Free Audio Editor
2014-03-07 13:05 - 2014-03-07 12:50 - 00000000 ____D () C:\Users\Alex\Desktop\Yolol
2014-03-07 01:03 - 2014-03-07 01:03 - 00000221 _____ () C:\Users\Alex\Desktop\The Elder Scrolls V Skyrim.url
2014-03-06 23:08 - 2014-03-06 23:08 - 00000000 ____D () C:\Users\Alex\Desktop\Neuer Ordner
2014-03-06 20:06 - 2014-03-06 20:05 - 00000000 ____D () C:\Users\Alex\Desktop\DayZ Server EinlogBild
2014-03-06 19:32 - 2014-03-06 19:32 - 00008405 _____ () C:\Users\Alex\Desktop\Mein Film1.wlmp
2014-03-06 19:27 - 2014-03-04 12:05 - 00000000 ____D () C:\Users\Alex\AppData\Local\Windows Live
2014-03-06 18:44 - 2014-03-06 18:44 - 00000000 ____D () C:\Users\Alex\AppData\Local\{AC9EA3B4-8B79-4985-A447-F721DF0FA63C}
2014-03-06 13:31 - 2014-03-06 13:31 - 00001807 _____ () C:\Users\Alex\Desktop\Spotify.lnk
2014-03-06 13:31 - 2014-03-06 13:31 - 00001793 _____ () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-03-05 19:58 - 2014-03-05 19:58 - 00001828 _____ () C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
2014-03-05 19:58 - 2013-10-13 15:39 - 00000000 ____D () C:\Users\Alex\Desktop\GTA San Andreas OFFLINE
2014-03-05 19:57 - 2013-01-08 19:01 - 00000000 ____D () C:\ProgramData\MTA San Andreas All
2014-03-05 16:18 - 2014-03-05 16:18 - 10534332 _____ () C:\Users\Alex\Desktop\Save vor neuer enb.rar
2014-03-05 16:16 - 2014-03-05 16:14 - 00000000 ____D () C:\Users\Alex\Desktop\Gta - Wichtige Mods usw
2014-03-05 16:13 - 2014-03-05 16:13 - 70115018 _____ () C:\Users\Alex\Desktop\ENB+Streamdinge.rar
2014-03-05 16:06 - 2014-03-05 16:06 - 69972598 _____ () C:\Users\Alex\Desktop\11111.rar
2014-03-05 16:05 - 2014-03-05 16:11 - 00243892 _____ () C:\Users\Alex\Desktop\Stream-Tools.rar
2014-03-05 12:25 - 2014-03-05 12:25 - 00000981 _____ () C:\Users\Alex\Desktop\gta sa neu - Verknüpfung.lnk
2014-03-04 21:48 - 2014-03-04 21:48 - 34988803 _____ () C:\Users\Alex\Desktop\BESCHEDE ENB!!!!!!!!!!!!!!!.rar
2014-03-04 21:26 - 2014-03-04 21:18 - 970950647 _____ () C:\Users\Alex\Desktop\gta sa HD!!!!!!!!!!!!.rar
2014-03-04 20:54 - 2014-03-04 20:48 - 00000000 ____D () C:\Users\Alex\Desktop\gta!
2014-03-04 20:44 - 2014-03-04 20:47 - 191391379 _____ () C:\Users\Alex\Desktop\Modpack G5.7z
2014-03-04 20:44 - 2013-06-25 10:11 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Mozilla
2014-03-04 16:05 - 2014-03-04 16:04 - 00000000 ____D () C:\Users\Alex\Desktop\Cleos
2014-03-04 12:05 - 2014-03-04 12:05 - 00000000 ____D () C:\Users\Alex\AppData\Local\{6B163F72-7EC1-4087-95CF-9AA38C8BC108}
2014-03-03 23:23 - 2014-03-03 23:23 - 00019642 _____ () C:\Users\Alex\Desktop\]OP[iTroll_v2.cs
2014-03-03 21:10 - 2014-03-03 21:10 - 00000995 _____ () C:\Users\Alex\Desktop\Bandicam.lnk
2014-03-03 21:10 - 2014-03-03 21:09 - 00000000 ____D () C:\Program Files (x86)\Bandicam
2014-03-03 21:09 - 2013-09-10 07:40 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1
2014-03-03 14:14 - 2014-03-03 14:14 - 00000730 _____ () C:\Users\Alex\Desktop\samp.exe - Verknüpfung.lnk
2014-03-03 14:00 - 2014-03-03 14:00 - 00069827 _____ () C:\Users\Alex\Downloads\1220357907_SAStreamMemFix2.0 (2).rar
2014-03-03 13:35 - 2014-03-03 13:39 - 944711399 _____ () C:\Users\Alex\Desktop\GTA+San+Andreas+by+TheSaazZzzz.zip
2014-03-03 12:43 - 2013-09-23 23:02 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-03-03 12:42 - 2013-09-23 23:04 - 00000000 ____D () C:\Program Files (x86)\Neverwinter
2014-03-03 11:46 - 2013-07-24 22:42 - 00000000 ____D () C:\Program Files (x86)\TERA
2014-03-03 01:48 - 2013-06-15 20:29 - 00000000 ____D () C:\Users\Alex\Documents\GTA San Andreas User Files
2014-03-02 18:17 - 2014-03-02 18:17 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Renegade X
2014-03-02 18:17 - 2014-03-02 18:16 - 00000000 ____D () C:\Program Files (x86)\Renegade X
2014-03-02 14:58 - 2014-03-02 14:52 - 1768010393 _____ () C:\Users\Alex\Downloads\RenegadeX-OpenBeta-01.exe
2014-03-02 14:16 - 2013-12-03 11:29 - 00005452 _____ () C:\Users\Alex\Documents\TombRaider.log
2014-03-02 01:26 - 2013-12-22 17:09 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\.minecraft
2014-03-01 16:07 - 2014-01-24 00:16 - 00000000 ____D () C:\Users\Alex\AppData\Local\ArmA 2 OA
2014-03-01 15:54 - 2014-01-21 18:29 - 00000000 ____D () C:\Users\Alex\Documents\DayZ
2014-03-01 02:24 - 2014-03-01 02:24 - 00000000 ____D () C:\Users\Alex\Documents\Gunz2
2014-03-01 02:20 - 2014-03-01 02:15 - 819108260 _____ () C:\Users\Alex\Documents\LostSagaEU_Full.exe
2014-03-01 02:00 - 2014-03-01 02:00 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-02-28 14:28 - 2014-01-24 18:26 - 00000000 ____D () C:\Users\Alex\Desktop\wot testserver1 (1)
2014-02-27 14:55 - 2013-03-06 21:41 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2014-02-26 02:28 - 2014-02-26 02:18 - 00000185 _____ () C:\attach.ini
2014-02-26 02:27 - 2014-02-26 02:15 - 00000236 _____ () C:\mapui.ini
2014-02-26 02:18 - 2014-02-26 02:18 - 00000020 _____ () C:\form_signin.ini
2014-02-26 01:10 - 2013-11-27 12:08 - 00000000 ____D () C:\Program Files (x86)\gPotato
2014-02-25 23:00 - 2014-02-25 22:49 - 00000000 ____D () C:\Users\Alex\Musik
2014-02-25 22:49 - 2013-01-05 00:12 - 00000000 ____D () C:\Users\Alex
2014-02-25 01:07 - 2014-02-10 15:22 - 00000000 ____D () C:\Users\Alex\Desktop\Replays
2014-02-25 00:38 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-25 00:38 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-22 23:29 - 2013-02-28 19:55 - 00000000 ____D () C:\ProgramData\WarThunder
2014-02-22 18:46 - 2013-09-01 18:42 - 00000000 ____D () C:\Users\Alex\Desktop\World of Tanks
2014-02-22 16:54 - 2013-06-15 20:28 - 442435470 _____ () C:\Users\Alex\Documents\GTA San Andreas User Files.rar
2014-02-21 20:52 - 2014-02-21 20:52 - 00000000 ____D () C:\Users\Alex\Desktop\WoT Medallien
2014-02-21 19:42 - 2014-01-07 22:39 - 00000000 ____D () C:\Users\Alex\Desktop\GFX - Selfmade
2014-02-21 13:33 - 2013-06-17 11:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 13:33 - 2013-02-20 14:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 13:33 - 2013-02-20 14:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-19 20:33 - 2014-02-19 20:33 - 00000044 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG
2014-02-19 20:29 - 2014-02-19 20:29 - 00784150 _____ () C:\Users\Alex\Desktop\pSX1.13.zip
2014-02-19 15:40 - 2012-05-23 08:09 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-19 15:39 - 2012-05-08 06:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-19 15:38 - 2012-05-08 06:56 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-19 15:20 - 2014-02-19 15:17 - 276927952 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\334.89-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-02-18 21:35 - 2013-11-05 22:37 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-02-18 20:35 - 2013-11-05 22:37 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\OBS
2014-02-18 15:07 - 2014-02-18 15:07 - 00000000 ____D () C:\Users\Alex\Documents\Gamepires
2014-02-18 14:41 - 2013-10-17 01:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-18 14:39 - 2014-02-18 14:38 - 00002406 _____ () C:\DelFix.txt
2014-02-18 14:39 - 2012-05-08 08:26 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-18 14:38 - 2014-02-17 12:00 - 00000000 ____D () C:\Windows\ERUNT
2014-02-18 14:36 - 2013-02-18 21:34 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-18 14:36 - 2011-04-12 08:43 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-02-18 14:36 - 2011-04-12 08:43 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-02-18 14:36 - 2009-07-14 06:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-17 23:55 - 2014-02-17 23:50 - 00000000 ____D () C:\Users\Alex\AppData\Local\Microsoft Games
2014-02-17 17:10 - 2014-02-17 17:10 - 00030891 _____ () C:\Users\Alex\Desktop\SixthSenseSCHLURP.rar
2014-02-17 12:33 - 2014-02-17 12:32 - 00000626 _____ () C:\Users\Alex\AppData\Roaming\All CPU MeterV3_Settings.ini
2014-02-17 01:08 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-15 22:12 - 2014-02-15 22:01 - 00000000 ____D () C:\Program Files (x86)\Naturalsoft
2014-02-15 22:12 - 2014-02-13 11:32 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Naturalsoft
2014-02-15 22:12 - 2014-02-13 11:31 - 00000000 ____D () C:\Users\Alex\Documents\Naturalsoft
2014-02-15 11:13 - 2014-02-15 11:13 - 446400727 _____ (JT_Adams's Modwerkstatt ) C:\Users\Alex\Desktop\JTAdams AGQJ Engine 2.2 EN (2).exe
2014-02-14 16:48 - 2013-11-25 16:33 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-14 16:48 - 2013-11-25 16:33 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-14 10:50 - 2009-07-14 05:45 - 00573616 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-13 10:29 - 2013-01-05 00:15 - 00171192 _____ () C:\Users\Alex\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-12 16:38 - 2014-02-04 22:24 - 00004084 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003UA
2014-02-12 16:38 - 2014-02-04 22:24 - 00003688 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003Core
2014-02-12 14:30 - 2014-02-12 14:30 - 00000000 ____D () C:\Users\Alex\Documents\Codemasters
2014-02-12 14:30 - 2013-06-21 13:39 - 00000000 ____D () C:\ProgramData\Codemasters
2014-02-12 14:20 - 2014-02-12 14:20 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-02-12 14:20 - 2014-02-12 14:20 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-02-12 14:20 - 2014-02-12 14:20 - 00121880 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-02-12 14:20 - 2014-02-12 14:20 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-02-12 14:20 - 2014-02-12 14:20 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-02-12 14:16 - 2014-02-12 14:16 - 00000000 ____D () C:\Program Files (x86)\Codemasters
2014-02-12 12:54 - 2013-06-10 23:38 - 00000000 ____D () C:\Users\Alex\AppData\Local\Warframe
2014-02-12 11:06 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-11 19:14 - 2014-02-11 19:14 - 00000000 ____D () C:\Users\Alex\AppData\Local\Avg2014
2014-02-11 16:27 - 2014-02-11 16:02 - 00000000 ____D () C:\Program Files (x86)\ACR
2014-02-11 16:12 - 2014-02-11 16:12 - 00000000 ____D () C:\Users\Alex\Documents\ACR
2014-02-11 13:20 - 2014-01-28 22:24 - 00000000 ____D () C:\Users\Alex\Documents\Euro Truck Simulator 2
2014-02-11 13:15 - 2014-02-11 13:15 - 00000657 _____ () C:\Users\Public\Desktop\World of Tanks.lnk
2014-02-09 17:16 - 2014-02-09 17:16 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\steamvr
Some content of TEMP:
====================
C:\Users\Alex\AppData\Local\Temp\19010uninstall.exe
C:\Users\Alex\AppData\Local\Temp\34538uninstall.exe
C:\Users\Alex\AppData\Local\Temp\bdcam_0.dll
C:\Users\Alex\AppData\Local\Temp\bdcam_1.dll
C:\Users\Alex\AppData\Local\Temp\bdfilters.dll
C:\Users\Alex\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Alex\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Alex\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Alex\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Alex\AppData\Local\Temp\nvStInst.exe
C:\Users\Alex\AppData\Local\Temp\sonarinst.exe
C:\Users\Alex\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Alex\AppData\Local\Temp\Sqlite3.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-17 08:11
==================== End Of Log ============================
Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2014
Ran by Alex at 2014-03-11 13:40:20
Running from C:\Users\Alex\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Kaspersky PURE 3.0 (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky PURE 3.0 (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky PURE 3.0 (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
==================== Installed Programs ======================
Ace of Spades (HKLM-x32\...\Steam App 224540) (Version: - Jagex Limited)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment)
Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden
AION Free-to-Play Version 1.0 (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version: 1.0 - Gameforge)
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{AF88A32E-BC54-2AA3-2FC8-D63D86DF4A7A}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
applicationupdater (HKCU\...\SOE-C:/Users/Alex/AppData/Local/Sony Online Entertainment/ApplicationUpdater) (Version: - Sony Online Entertainment)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 3.6 - Auslogics Software Pty Ltd)
Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.4.505 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Battlefield 1942 (HKLM-x32\...\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}) (Version: - )
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.4 - BitRaider, LLC)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software)
Brick-Force (HKLM-x32\...\Brick-Force) (Version: - Infernum Productions AG)
CamStudio version 2.7 (HKLM-x32\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source)
City of Steam: Arkadia (HKLM-x32\...\Steam App 266070) (Version: - Mechanist Games)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version: - Crytek Studios)
Cube World version 0.0.1 (HKLM-x32\...\{D692A0E0-1BBB-4E9C-826E-4254EE330830}_is1) (Version: 0.0.1 - Picroma)
Cubemen (HKLM-x32\...\Steam App 207250) (Version: - Three Sprockets)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Dead Island (HKLM-x32\...\Steam App 91310) (Version: - Techland)
DEFIANCE (HKLM-x32\...\{2BF4B6A7-9AB3-4A2B-A84E-91B5CBDC0000}_is1) (Version: - Trion Worlds, Inc.)
DefianceRuntimes (HKLM-x32\...\{79B1FF35-9EA8-48ED-98D6-19ABE004BE89}) (Version: 1.0.2 - Trion Worlds, Inc.)
Dethroned! (HKLM-x32\...\Steam App 269390) (Version: - Treehouse Ltd)
Dokan Library 0.6.0 (HKLM-x32\...\DokanLibrary) (Version: - )
Duke Nukem Forever (HKLM-x32\...\Steam App 57900) (Version: - Gearbox Software)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Estranged: Act I (HKLM-x32\...\Steam App 261820) (Version: - Alan Edwardes)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.8.2.5 - SCS Software)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
FormatFactory 3.0.1 (HKLM-x32\...\FormatFactory) (Version: 3.0.1 - Free Time)
Game Booster 3 (HKLM-x32\...\Game Booster_is1) (Version: 3.4 - IObit)
Gameforge Live 1.10.1 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.10.1 - Gameforge)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Garry)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{41101F0C-DBD9-321C-A6B1-E0689B495A4E}) (Version: 5.1.4.17398 - Google)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Grand Theft Auto: San Andreas (HKLM-x32\...\Steam App 12120) (Version: - Rockstar Games)
GRID Demo (HKLM-x32\...\{3C850287-4CD5-4FAD-BE39-A4AF7851A7C6}) (Version: 1.00.0000 - Codemasters)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
IM Lock (HKLM-x32\...\IMLock) (Version: - Comvigo, Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: - Intel(R) Corporation)
Intel(R) Update Manager (x32 Version: 1.0.0.34813 - Intel Corporation) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.738.1 - Intel Corporation) Hidden
Java 7 Update 17 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417017FF}) (Version: 7.0.170 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Jt's AGQJ Engine&Guns Version 2.1 AGQJ for WOT 0.8.11 (HKLM-x32\...\{1AD3289B-A7F7-409B-B8F9-AF255869676B}_is1) (Version: 2.1 AGQJ for WOT 0.8.11 - JT_Adams's Modwerkstatt)
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche)
Just Cause 2: Multiplayer Mod (HKLM-x32\...\Steam App 259080) (Version: - Avalanche Studios)
Kaspersky PURE 3.0 (HKLM-x32\...\InstallWIX_{D0702EE9-9DE4-419A-9C6C-4730B1C985BA}) (Version: 13.0.2.558 - Kaspersky Lab)
Kaspersky PURE 3.0 (x32 Version: 13.0.2.558 - Kaspersky Lab) Hidden
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (HKLM-x32\...\MAGIX_{B03055E4-8381-4834-8CD6-602141C8D702}) (Version: 4.3.2.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (Version: 4.3.2.0 - MAGIX AG) Hidden
MAGIX Music Maker 2014 (HKLM-x32\...\MX.{CC87429C-BC87-4D90-9D5F-C6D9721A6663}) (Version: 20.0.2.35 - MAGIX AG)
MAGIX Music Maker 2014 (Version: 20.0.2.35 - MAGIX AG) Hidden
MAGIX Music Maker 2014 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{F6E484FB-BC48-4A63-8186-E25DF4607B3B}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{887868A2-D6DE-3255-AA92-AA0B5A59B874}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Mozilla Firefox 22.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 22.0 (x86 de)) (Version: 22.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 22.0 - Mozilla)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MTA:SA v1.3.1 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3.1 - Multi Theft Auto)
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
NVIDIA 3D Vision Controller-Treiber 332.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 332.21 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.21 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version: - Sony Online Entertainment)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version: - PokerStars.eu)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Quake Live Mozilla Plugin (HKLM-x32\...\{FA66CFD7-0977-4C45-AACD-A8BB994B1A05}) (Version: 1.0.520 - id Software)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Renegade X (HKLM-x32\...\UDK-4fc3a6b6-3d0e-4dce-b127-8e60191e2b1e) (Version: Open Beta 1 - Totem Arts)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software)
S.K.I.L.L. - Special Force 2 (HKLM-x32\...\Special Force 2 Beta_is1) (Version: - )
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
SpinTires Tech Demo (June 060613) (HKLM-x32\...\{9AF7D6F5-50A5-432C-9F7B-83BCE03B11A0}) (Version: 1.3 - Oovee)
Spotify (HKCU\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB)
Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: 7.0.0.29 - Bioware/EA)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Surgeon Simulator 2013 (HKLM-x32\...\Steam App 233720) (Version: - Bossa Studios)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.25790 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - )
The Elder Scrolls Online Beta (HKLM-x32\...\The Elder Scrolls Online Beta_is1) (Version: 0.3.4 - )
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Mighty Quest For Epic Loot Version 1.220469 (HKLM-x32\...\The Mighty Quest For Epic Loot_is1) (Version: 1.220469 - )
The Pit Demo (HKLM-x32\...\{26EBB310-B2DA-4CF0-85FE-BD0E779768B5}) (Version: 1.0.0 - Kerberos Productions)
The Plan (HKLM-x32\...\Steam App 250600) (Version: - Krillbite Studio)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
TS Notifier (HKLM-x32\...\{18B27ADA-8B84-46B4-8310-586C4FDDCF0A}) (Version: 1.5.5001 - Andreas Gebert)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.221 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
War Thunder Launcher 1.0.1.153 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - 2012 Gaijin Entertainment Corporation)
Warframe (HKLM-x32\...\Steam App 230410) (Version: - )
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
World of Tanks - Common Test (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812CT}_is1) (Version: - Wargaming.net)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version: - Wargaming.net)
Zombie Driver HD (HKLM-x32\...\Steam App 220820) (Version: - Exor Studios)
==================== Restore Points =========================
10-03-2014 20:10:02 DirectX wurde installiert
10-03-2014 21:02:22 Entfernt Age of Wulin
10-03-2014 21:02:59 MechWarrior Online
10-03-2014 21:07:18 Removed RuneScape Launcher 1.2.3
==================== Hosts content: ==========================
2009-07-14 03:34 - 2014-02-17 01:08 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0211AD9F-6C20-4455-96BF-42E583E43FB2} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {1060B6A7-B474-4CBE-AA3C-8E6788F5AB1B} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-12-18] (TuneUp Software)
Task: {42720A60-DC37-432F-B779-544681FEE9E1} - System32\Tasks\{48A9EF00-04F4-4DFE-B8FB-9F9AE3EC46A1} => C:\Users\Alex\Desktop\SWTOR_setup (1).exe
Task: {524B0F5B-2B4D-4D10-AC1B-4680409C7416} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {5BE15411-DB39-4FF9-AA35-0ECA4D9DD6A1} - \Desk 365 RunAsStdUser No Task File
Task: {76B77F1A-CF31-4FBA-8A2D-18D6C37A8A36} - System32\Tasks\Google Updater and Installer => C:\Users\Alex\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-04] (Google Inc.)
Task: {7D384E7A-3993-411D-9ACA-9BDD52817321} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-25] (Google Inc.)
Task: {7F23482B-05F5-4139-AADF-736E0BD611CE} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-07-23] ()
Task: {8005C0D7-3BF7-4CC1-8F1F-06A890C22868} - System32\Tasks\{1F1F4FB0-3932-4BAF-B1CC-B1729A279C99} => C:\Users\Alex\Desktop\gta sa neu\gta_sa.exe
Task: {ABE1557F-5D1F-4750-9A14-E70754112752} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: {C83B5117-32CB-4D91-A9DC-B4EE76B0704F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-25] (Google Inc.)
Task: {CBACF01D-29AF-4D20-BC21-0C104C244700} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003UA => C:\Users\Alex\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-04] (Google Inc.)
Task: {D411F42A-B3B8-4EEC-9A77-2DE04EE6E683} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003Core => C:\Users\Alex\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-04] (Google Inc.)
Task: {EADF1C57-5D72-4ABF-A976-B8EC8FF63CAA} - \Omiga Plus RunAsStdUser No Task File
Task: {ECC2222F-999F-46C5-9E20-8990838F97B4} - System32\Tasks\{96401EEC-B719-45F4-85D3-79C00ABDC861} => C:\Users\Alex\Desktop\SWTOR_setup (1).exe
Task: {FB4C7FDF-E6C8-49EF-BA19-F0B7C2C0E6A9} - System32\Tasks\FRAPS => C:\Users\Alex\Desktop\Fraps\fraps.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003Core.job => C:\Users\Alex\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003UA.job => C:\Users\Alex\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-05-23 08:09 - 2012-12-29 09:40 - 00087480 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-01-10 13:49 - 2011-01-10 13:49 - 00014848 _____ () C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
2013-10-04 22:54 - 2014-03-10 21:38 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-18 10:01 - 2013-12-18 10:01 - 00742200 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2012-12-20 17:19 - 2012-12-20 17:19 - 00479752 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\dblite.dll
2012-12-20 17:19 - 2012-12-20 17:19 - 01310728 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\kpcengine.2.2.dll
2014-02-19 10:38 - 2014-02-19 10:38 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\00a0b4a9df6e4abf30ae2af3624a77ce\IsdiInterop.ni.dll
2012-05-08 06:30 - 2012-02-01 15:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-05-08 10:56 - 2012-07-18 10:55 - 01198912 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-01-05 20:19 - 2012-02-27 13:00 - 00030432 _____ () C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\ProcessPrivileges.dll
2013-01-05 20:19 - 2012-02-27 13:00 - 00215264 _____ () C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\System.ComponentModel.Composition.dll
2013-01-05 20:19 - 2012-02-27 13:00 - 00051424 _____ () C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\Interop.TaskScheduler.dll
2014-03-04 10:58 - 2014-03-02 03:35 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll
2014-03-04 10:58 - 2014-03-02 03:35 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libglesv2.dll
2014-03-04 10:58 - 2014-03-02 03:35 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libegl.dll
2014-03-04 10:58 - 2014-03-02 03:35 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll
2014-03-04 10:58 - 2014-03-02 03:35 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll
2014-03-04 10:58 - 2014-03-02 03:35 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Alex\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/11/2014 01:31:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/11/2014 00:52:55 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
Error: (03/10/2014 11:53:59 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/10/2014 10:06:23 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (03/10/2014 09:59:15 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf3.exe, Version: 1.6.0.0, Zeitstempel: 0x511c9356
Name des fehlerhaften Moduls: bf3.exe, Version: 1.6.0.0, Zeitstempel: 0x511c9356
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00017c70
ID des fehlerhaften Prozesses: 0x1ee4
Startzeit der fehlerhaften Anwendung: 0xbf3.exe0
Pfad der fehlerhaften Anwendung: bf3.exe1
Pfad des fehlerhaften Moduls: bf3.exe2
Berichtskennung: bf3.exe3
Error: (03/10/2014 09:57:57 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: bf3.exe, Version: 1.6.0.0, Zeitstempel: 0x511c9356
Name des fehlerhaften Moduls: bf3.exe, Version: 1.6.0.0, Zeitstempel: 0x511c9356
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00017c70
ID des fehlerhaften Prozesses: 0x1c38
Startzeit der fehlerhaften Anwendung: 0xbf3.exe0
Pfad der fehlerhaften Anwendung: bf3.exe1
Pfad des fehlerhaften Moduls: bf3.exe2
Berichtskennung: bf3.exe3
Error: (03/10/2014 09:05:33 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (03/10/2014 08:01:29 PM) (Source: Application Hang) (User: )
Description: Programm wmplayer.exe, Version 12.0.7601.18150 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3b0
Startzeit: 01cf3c931d6edf8a
Endzeit: 7
Anwendungspfad: C:\Program Files (x86)\Windows Media Player\wmplayer.exe
Berichts-ID: 61904037-a886-11e3-94fd-8c89a5e6efbf
Error: (03/10/2014 07:46:00 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (03/10/2014 07:45:34 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
System errors:
=============
Error: (03/10/2014 07:54:59 PM) (Source: DCOM) (User: )
Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}
Error: (03/10/2014 00:56:46 AM) (Source: DCOM) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (03/08/2014 11:02:07 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Hi-Rez Studios Authenticate and Update Service erreicht.
Error: (03/08/2014 01:17:20 AM) (Source: DCOM) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (03/07/2014 04:39:14 PM) (Source: DCOM) (User: )
Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}
Error: (03/06/2014 01:59:34 AM) (Source: DCOM) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (03/04/2014 09:06:00 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (03/01/2014 02:34:05 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (03/01/2014 02:34:05 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Error: (03/01/2014 02:34:04 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Microsoft Office Sessions:
=========================
Error: (03/11/2014 01:31:04 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/11/2014 00:52:55 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
Error: (03/10/2014 11:53:59 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/10/2014 10:06:23 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (03/10/2014 09:59:15 PM) (Source: Application Error)(User: )
Description: bf3.exe1.6.0.0511c9356bf3.exe1.6.0.0511c9356c000000500017c701ee401cf3ca3825b85baC:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exeC:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exed60654b4-a896-11e3-94fd-8c89a5e6efbf
Error: (03/10/2014 09:57:57 PM) (Source: Application Error)(User: )
Description: bf3.exe1.6.0.0511c9356bf3.exe1.6.0.0511c9356c000000500017c701c3801cf3ca3555b3d9bC:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exeC:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exea79d016b-a896-11e3-94fd-8c89a5e6efbf
Error: (03/10/2014 09:05:33 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (03/10/2014 08:01:29 PM) (Source: Application Hang)(User: )
Description: wmplayer.exe12.0.7601.181503b001cf3c931d6edf8a7C:\Program Files (x86)\Windows Media Player\wmplayer.exe61904037-a886-11e3-94fd-8c89a5e6efbf
Error: (03/10/2014 07:46:00 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (03/10/2014 07:45:34 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
CodeIntegrity Errors:
===================================
Date: 2014-02-17 01:08:26.910
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-02-17 01:08:26.878
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-02-17 01:08:26.846
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-02-17 01:08:26.814
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-25 12:48:51.081
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-25 12:48:51.079
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-25 12:48:51.078
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-25 11:22:29.720
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-25 11:22:29.719
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-25 11:22:29.718
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 33%
Total physical RAM: 8127.46 MB
Available physical RAM: 5420.68 MB
Total Pagefile: 16253.11 MB
Available Pagefile: 13212.43 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:921.41 GB) (Free:187.74 GB) NTFS
Drive e: () (Fixed) (Total:465.76 GB) (Free:442.32 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 1E2AC9C5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=921 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 083BB526)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
12.03.2014, 09:43
| #4 |
| /// the machine /// TB-Ausbilder | Infizierte Objekte: 8 (Nach wöchentlichen Scannen) Funde durch MBAM löschen lassen. Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.03.2014, 12:45
| #5 |
| | Infizierte Objekte: 8 (Nach wöchentlichen Scannen) Guten Morgen, AdwCleaner: Code:
ATTFilter # AdwCleaner v3.021 - Bericht erstellt am 12/03/2014 um 12:29:37
# Aktualisiert 10/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Alex - ALEX-PC
# Gestartet von : C:\Users\Alex\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Alex\AppData\Local\Temp\OCS
Datei Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default\searchplugins\Mysearchdial.xml
Datei Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default\user.js
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\Software\caphyon
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Speedchecker Limited
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16798
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v22.0 (de)
[ Datei : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default\prefs.js ]
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ch&cd=2XzuyEtN2Y1L1QzuzytD0FyCyDtB0CyBtBtAzz0CtBtAtB0BtN0D0Tzu0SyBzztCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDt[...]
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Mysearchdial");
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Mysearchdial");
-\\ Google Chrome v33.0.1750.146
[ Datei : C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [4404 octets] - [12/03/2014 12:27:32]
AdwCleaner[R1].txt - [4464 octets] - [12/03/2014 12:29:13]
AdwCleaner[S0].txt - [3827 octets] - [12/03/2014 12:29:37]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3887 octets] ##########
JRT Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Alex on 12.03.2014 at 12:35:02,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Alex\appdata\local\{61CD2EC2-C1EF-408C-9213-0B95EE0CFAA4}
Successfully deleted: [Empty Folder] C:\Users\Alex\appdata\local\{6B163F72-7EC1-4087-95CF-9AA38C8BC108}
Successfully deleted: [Empty Folder] C:\Users\Alex\appdata\local\{851C0977-1F12-4B8A-ABB1-86BAA58C9801}
Successfully deleted: [Empty Folder] C:\Users\Alex\appdata\local\{A209B34C-3093-43DF-9A71-EE0574F5789F}
Successfully deleted: [Empty Folder] C:\Users\Alex\appdata\local\{AC9EA3B4-8B79-4985-A447-F721DF0FA63C}
Successfully deleted: [Empty Folder] C:\Users\Alex\appdata\local\{E582D165-22CC-416B-B397-D8F3D725DCC0}
~~~ FireFox
Successfully deleted: [Folder] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\8qof1hkw.default\extensions\staged
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.03.2014 at 12:39:36,91
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
13.03.2014, 08:57
| #6 |
| /// the machine /// TB-Ausbilder | Infizierte Objekte: 8 (Nach wöchentlichen Scannen)ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Infizierte Objekte: 8 (Nach wöchentlichen Scannen) |
|
15.03.2014, 16:51
| #7 |
| | Infizierte Objekte: 8 (Nach wöchentlichen Scannen) Entschuldigen sie meine verzögerte Antwort. Ich war verhindert und habe erst jetzt die möglichkeit am Pc zu sein ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=5347dc962704944c9dff455f6ec9cfd1
# engine=17462
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-15 03:31:39
# local_time=2014-03-15 04:31:39 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 82 21286205 146527349 0 0
# scanned=630120
# found=0
# cleaned=0
# scan_time=7929
Code:
ATTFilter Results of screen317's Security Check version 0.99.80 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 Out of date! ``````````````Antivirus/Firewall Check:`````````````` Kaspersky PURE 3.0 Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2014 TuneUp Utilities 2014 (de-DE) TuneUp Utilities 2014 Java 7 Update 51 Adobe Flash Player 12.0.0.77 Adobe Reader XI Mozilla Firefox 22.0 Firefox out of Date! Google Chrome 33.0.1750.152 Google Chrome 33.0.1750.154 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe Intel Intel(R) Small Business Advantage Service Intel.SmallBusinessAdvantage.WindowsService.exe Kaspersky Lab Kaspersky PURE 3.0 avp.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
|
16.03.2014, 17:03
| #8 |
| /// the machine /// TB-Ausbilder | Infizierte Objekte: 8 (Nach wöchentlichen Scannen) da fehlt noch was
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.03.2014, 23:50
| #9 |
| | Infizierte Objekte: 8 (Nach wöchentlichen Scannen) Entschuldigung. FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Alex (administrator) on ALEX-PC on 16-03-2014 23:43:13
Running from C:\Users\Alex\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Spotify Ltd) C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
(www.Bandisoft.com) C:\Program Files (x86)\Bandicam\bdcam.exe
(www.Bandisoft.com) C:\Program Files (x86)\Bandicam\bdcam64.bin
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Perfect World Entertainment Inc) C:\Program Files (x86)\Perfect World Entertainment\Arc\Arc.exe
() C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcOSBrowser.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\Alex\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Alex\Desktop\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [RazerGameBooster] - C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe [61152 2014-02-25] (Razer Inc.)
HKLM-x32\...\Run: [StereoLinksInstall] - "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe" /install1
HKU\S-1-5-21-992614989-2845173188-1475335217-1003\...\Run: [Spotify Web Helper] - C:\Users\Alex\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-03-06] (Spotify Ltd)
HKU\S-1-5-21-992614989-2845173188-1475335217-1003\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
AppInit_DLLs: => File Not Found
AppInit_DLLs-x32: pe9 => "pe9" File Not Found
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 155.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @idsoftware.com/QuakeLive - C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npnxgameEU.dll (Nexon)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Alex\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Alex\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Alex\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Alex\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Alex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\Alex\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Alex\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\8qof1hkw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-15]
FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com [2013-08-28]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-16]
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-16]
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-16]
CHR Extension: (Google-Suche) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-16]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-03-16]
CHR Extension: (AdBlock) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-16]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-03-16]
CHR Extension: (Content Blocker) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-03-16]
CHR Extension: (Virtual Keyboard) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-03-16]
CHR Extension: (Google Wallet) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-16]
CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-16]
CHR Extension: (Anti-Banner) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-03-16]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [koalekbhpbggkcfhkkbolikjoaobbppi] - C:\Program Files (x86)\PutLockerDownloader\PutLockerDownloader10.crx [2012-12-28]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2012-12-28]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-02-24] (Perfect World Entertainment Inc)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-24] ()
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-01-06] (BitRaider, LLC)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 Intel(R) Small Business Advantage; C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [49376 2012-02-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4784312 2014-01-15] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-14] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2013-10-03] (BitRaider)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-08-28] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-08-28] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S4 NvStUSB; \SystemRoot\system32\drivers\nvstusb.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-16 23:43 - 2014-03-16 23:44 - 00022872 _____ () C:\Users\Alex\Desktop\FRST.txt
2014-03-16 23:43 - 2014-03-16 23:43 - 02157056 _____ (Farbar) C:\Users\Alex\Desktop\FRST64 (1).exe
2014-03-16 23:42 - 2014-03-16 23:43 - 02157056 _____ (Farbar) C:\Users\Alex\Downloads\FRST64 (1).exe
2014-03-16 14:56 - 2014-03-16 14:56 - 00047698 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel
2014-03-16 14:22 - 2014-03-16 14:22 - 00002254 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-16 14:21 - 2014-03-16 23:26 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-16 14:21 - 2014-03-16 14:26 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-16 14:21 - 2014-03-16 14:21 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-16 14:21 - 2014-03-16 14:21 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-16 14:11 - 2014-03-16 23:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-16 14:11 - 2014-03-16 14:11 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-16 14:11 - 2014-03-16 14:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-16 14:11 - 2014-03-16 14:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-16 12:14 - 2014-03-16 13:14 - 3773641555 _____ () C:\Users\Alex\Desktop\Let's Test Primal Carnage.wmv
2014-03-16 12:03 - 2014-03-16 12:03 - 00000000 ____D () C:\Users\Alex\AppData\Local\{26BD5C1E-4BFD-42C8-A1DC-DF6693E14E64}
2014-03-16 10:51 - 2014-01-24 16:07 - 02837528 _____ () C:\Users\Alex\Desktop\outro1.wmv
2014-03-15 22:43 - 2014-03-15 23:39 - 00000000 ____D () C:\Users\Alex\Documents\GTA Vice City User Files
2014-03-15 22:05 - 2014-03-15 22:06 - 00000000 ____D () C:\Users\Alex\Documents\GTA3 User Files
2014-03-15 14:18 - 2014-03-15 14:18 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-15 14:15 - 2014-03-15 14:15 - 00987442 _____ () C:\Users\Alex\Downloads\SecurityCheck.exe
2014-03-15 14:14 - 2014-03-15 14:14 - 02347384 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_enu (1).exe
2014-03-15 14:12 - 2014-03-15 14:13 - 02347384 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_enu.exe
2014-03-15 14:08 - 2014-03-15 14:08 - 07756753 _____ () C:\Users\Alex\Downloads\7tsp_Jarvis_Win7_Transformation_Pack.7z
2014-03-15 14:07 - 2014-03-15 14:07 - 03192924 _____ () C:\Users\Alex\Downloads\7tsp_Token_Dark_Win7_Icon_Pack.7z
2014-03-15 14:01 - 2014-03-15 14:01 - 00000000 ____D () C:\Users\Alex\Desktop\Musik
2014-03-15 13:57 - 2014-03-15 13:58 - 00000000 ____D () C:\Users\Alex\Desktop\Alles rund um GFX
2014-03-15 13:45 - 2014-03-15 13:58 - 00000000 ____D () C:\Users\Alex\Desktop\Wichtige Gta Sa Mods
2014-03-15 13:30 - 2013-03-15 06:53 - 01807136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6431422.dll
2014-03-15 13:30 - 2013-03-15 06:53 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6431422.dll
2014-03-15 13:27 - 2014-03-15 13:29 - 222141776 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\314.22-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-03-15 13:12 - 2014-03-15 13:13 - 276758080 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\335.23-desktop-win8-win7-winvista-64bit-international-whql (1).exe
2014-03-15 13:04 - 2012-12-29 11:34 - 01813432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll
2014-03-15 13:04 - 2012-12-29 11:34 - 01504696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco64.dll
2014-03-15 13:02 - 2014-03-15 13:02 - 00000000 ____D () C:\Intel
2014-03-15 12:59 - 2014-03-15 13:01 - 257361551 _____ () C:\Users\Alex\Downloads\intel_vga_7_mb.zip
2014-03-15 02:48 - 2014-03-15 02:48 - 00021712 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2014-03-15 02:48 - 2014-03-15 02:48 - 00000000 ____D () C:\Users\Alex\AppData\Local\eSupport.com
2014-03-15 02:48 - 2014-03-15 02:48 - 00000000 ____D () C:\Program Files (x86)\eSupport.com
2014-03-15 02:47 - 2014-03-15 02:47 - 00974568 _____ (Copyright © 2013 eSupport.com, Inc • All Rights Reserved ) C:\Users\Alex\Downloads\driveragent-setup.exe
2014-03-15 01:51 - 2014-03-15 01:51 - 00000000 ____D () C:\Users\Alex\AppData\Local\Razer_Inc
2014-03-15 01:50 - 2014-03-15 01:50 - 00000000 ____D () C:\Users\Alex\Documents\Razer
2014-03-15 01:48 - 2014-03-15 11:07 - 00000000 ____D () C:\Users\Alex\AppData\Local\Razer
2014-03-15 01:48 - 2014-03-15 11:07 - 00000000 ____D () C:\ProgramData\Razer
2014-03-15 01:48 - 2014-03-15 11:07 - 00000000 ____D () C:\Program Files (x86)\Razer
2014-03-15 01:47 - 2014-03-15 01:47 - 41926696 _____ (Razer Inc. ) C:\Users\Alex\Downloads\RazerGameBoosterSetup_4.2.42.0.exe
2014-03-14 20:32 - 2014-03-14 20:32 - 00073196 _____ () C:\Users\Alex\Downloads\nvidia.zip
2014-03-14 20:24 - 2014-03-14 20:24 - 03690256 _____ (Piriform Ltd) C:\Users\Alex\Downloads\ccsetup411_slim.exe
2014-03-14 20:24 - 2014-03-14 20:24 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-14 20:24 - 2014-03-14 20:24 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-03-14 20:22 - 2014-03-14 20:22 - 00617196 _____ () C:\Users\Alex\Downloads\GPU24_Meter.zip
2014-03-14 17:16 - 2014-03-14 17:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-14 17:16 - 2014-03-14 17:16 - 00000000 ____D () C:\Users\Alex\AppData\Local\Skype
2014-03-14 17:12 - 2014-03-15 13:32 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-14 17:12 - 2014-03-14 17:12 - 00000020 ___SH () C:\Users\UpdatusUser.Alex-PC\ntuser.ini
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Vorlagen
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Startmenü
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Netzwerkumgebung
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Lokale Einstellungen
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Eigene Dateien
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Druckumgebung
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Documents\Eigene Musik
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Documents\Eigene Bilder
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\AppData\Local\Verlauf
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\AppData\Local\Anwendungsdaten
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Anwendungsdaten
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 ____D () C:\Users\UpdatusUser.Alex-PC
2014-03-14 17:12 - 2009-10-30 11:21 - 00001304 _____ () C:\Users\UpdatusUser.Alex-PC\Desktop\Backup and Restore Center.lnk
2014-03-14 17:12 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser.Alex-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-03-14 17:12 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser.Alex-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-03-14 17:12 - 2008-11-14 14:28 - 00000197 _____ () C:\Users\UpdatusUser.Alex-PC\Desktop\Hyrican - Newsletter.url
2014-03-14 17:08 - 2013-10-23 09:20 - 06669600 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-03-14 17:08 - 2013-10-23 09:20 - 03489568 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-03-14 17:08 - 2013-10-23 09:20 - 03426956 _____ () C:\Windows\system32\nvcoproc.bin
2014-03-14 17:08 - 2013-10-23 09:20 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-03-14 17:08 - 2013-10-23 09:20 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-03-14 17:08 - 2013-10-23 09:20 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-03-14 17:08 - 2013-10-23 09:20 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-03-14 17:03 - 2013-10-27 09:12 - 00023287 _____ () C:\Windows\system32\nvinfo.pb
2014-03-14 16:56 - 2014-03-14 16:57 - 276758080 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\335.23-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-03-14 16:39 - 2014-03-04 15:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-14 16:39 - 2014-03-04 15:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-14 10:44 - 2014-03-14 10:49 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Arc
2014-03-14 10:43 - 2014-03-14 10:43 - 09005512 _____ (Perfect World Entertainment) C:\Users\Alex\Downloads\ArcInstall_v20140224a.exe
2014-03-14 10:25 - 2014-03-14 10:25 - 100273008 _____ (Microsoft Corporation) C:\Users\Alex\Downloads\directx_Jun2010redist.exe
2014-03-14 10:23 - 2013-02-13 08:52 - 02580552 _____ () C:\Windows\SysWOW64\pbsvc.exe
2014-03-14 00:45 - 2014-03-14 01:09 - 00001040 _____ () C:\Users\Alex\Downloads\_predownloadpath.dat
2014-03-14 00:41 - 2014-03-14 00:42 - 00000000 ____D () C:\Users\Alex\Skillroad Online
2014-03-14 00:41 - 2014-03-14 00:41 - 02596864 _____ () C:\Users\Alex\Downloads\PSRO_Full_Client_Downloader_v3.exe
2014-03-13 20:01 - 2014-03-13 20:01 - 20463856 _____ (Gameforge ) C:\Users\Alex\Downloads\RunesOfMagic_GameforgeLiveSetup.exe
2014-03-13 00:31 - 2014-03-13 00:31 - 13688896 _____ () C:\Users\Alex\Downloads\EQ2_PSG_setup (1).exe
2014-03-13 00:31 - 2014-03-13 00:31 - 00002558 _____ () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EverQuest II PSG (2).lnk
2014-03-13 00:02 - 2014-03-13 00:02 - 00002558 _____ () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EverQuest II PSG.lnk
2014-03-13 00:01 - 2014-03-13 00:01 - 13688896 _____ () C:\Users\Alex\Downloads\EQ2_PSG_setup.exe
2014-03-12 23:53 - 2014-03-12 23:53 - 00000000 ____D () C:\Users\Alex\Downloads\Gameforge Live
2014-03-12 20:56 - 2014-03-12 20:56 - 08065840 _____ (Cheat Engine ) C:\Users\Alex\Downloads\CheatEngine63.exe
2014-03-12 17:36 - 2014-03-15 14:13 - 00001485 _____ () C:\Users\Alex\Desktop\UniversalBinder .exe - Verknüpfung.lnk
2014-03-12 17:32 - 2014-03-12 17:32 - 00274421 _____ () C:\Users\Alex\Downloads\UniversalBinder (1).exe
2014-03-12 17:32 - 2014-03-12 17:32 - 00226816 _____ () C:\Users\Alex\Downloads\API.dll
2014-03-12 17:31 - 2014-03-12 17:31 - 00274421 _____ () C:\Users\Alex\Downloads\UniversalBinder.exe
2014-03-12 12:28 - 2014-03-12 12:28 - 01037734 _____ (Thisisu) C:\Users\Alex\Downloads\JRT.exe
2014-03-12 12:27 - 2014-03-12 12:29 - 00000000 ____D () C:\AdwCleaner
2014-03-12 12:26 - 2014-03-12 12:26 - 01949184 _____ () C:\Users\Alex\Downloads\adwcleaner.exe
2014-03-12 00:53 - 2014-03-12 00:53 - 02933917 _____ () C:\Users\Alex\Downloads\Photorealistic ENB Series V1.zip
2014-03-12 00:51 - 2014-03-12 00:51 - 11646413 _____ () C:\Users\Alex\Downloads\Graphics Pack + ENB Series.rar
2014-03-12 00:48 - 2014-03-12 00:48 - 21270582 _____ () C:\Users\Alex\Downloads\rikintosh gfx beta.rar
2014-03-12 00:45 - 2014-03-12 00:45 - 00281945 _____ () C:\Users\Alex\Downloads\1342683240_Enb Series Config By BJC.rar
2014-03-12 00:39 - 2014-03-12 00:39 - 07205956 _____ () C:\Users\Alex\Downloads\1282296401_ENBSeriesconfig.rar
2014-03-11 21:57 - 2014-03-11 21:57 - 826297313 _____ () C:\Users\Alex\Downloads\de.sb
2014-03-11 21:14 - 2014-03-11 21:14 - 17009704 _____ (Electronic Arts, Inc.) C:\Users\Alex\Downloads\OriginThinSetup (1).exe
2014-03-11 20:47 - 2014-03-11 20:49 - 07370845 _____ () C:\Users\Alex\Downloads\BF3_Patchfix_05_03_2013.zip
2014-03-11 19:58 - 2014-03-11 19:58 - 03821624 _____ () C:\Users\Alex\Downloads\battlelog-web-plugins_2.3.2_131.exe
2014-03-11 19:45 - 2014-03-11 19:45 - 00224768 _____ () C:\Users\Alex\Downloads\BF3 Auto Language Changer (1).exe
2014-03-11 14:21 - 2014-03-11 14:21 - 17009704 _____ (Electronic Arts, Inc.) C:\Users\Alex\Downloads\OriginThinSetup.exe
2014-03-11 14:20 - 2014-03-11 14:20 - 00224768 _____ () C:\Users\Alex\Downloads\BF3 Auto Language Changer.exe
2014-03-11 13:52 - 2014-03-11 13:52 - 00915786 _____ () C:\Users\Alex\Downloads\1393589805_Beats By DRE T.I.P MOD V4-V2.rar
2014-03-11 13:40 - 2014-03-11 13:40 - 00039846 _____ () C:\Users\Alex\Downloads\Addition.txt
2014-03-11 13:39 - 2014-03-16 23:43 - 00000000 ____D () C:\FRST
2014-03-11 13:39 - 2014-03-11 13:40 - 00058102 _____ () C:\Users\Alex\Downloads\FRST.txt
2014-03-11 13:38 - 2014-03-11 13:38 - 02157056 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2014-03-11 00:31 - 2014-03-11 00:36 - 22370505 _____ () C:\Users\Alex\Downloads\sborka.rar
2014-03-11 00:29 - 2014-03-11 00:29 - 20495672 _____ () C:\Users\Alex\Downloads\Sounds [xGrims The Warx].rar
2014-03-11 00:25 - 2014-03-11 00:26 - 19566321 _____ () C:\Users\Alex\Downloads\GENRL.rar
2014-03-11 00:24 - 2014-03-11 00:24 - 00228184 _____ () C:\Users\Alex\Downloads\sounds.rar
2014-03-10 23:49 - 2014-03-10 23:50 - 51317599 _____ () C:\Users\Alex\Downloads\Hud Mods (1).rar
2014-03-10 23:38 - 2014-03-10 23:39 - 51317599 _____ () C:\Users\Alex\Downloads\Hud Mods.rar
2014-03-10 23:28 - 2014-03-10 23:28 - 01047686 _____ () C:\Users\Alex\Downloads\HUD El Coronos by Vadya.rar
2014-03-10 23:22 - 2014-03-10 23:22 - 19751913 _____ () C:\Users\Alex\Downloads\mods.rar
2014-03-10 23:12 - 2014-03-10 23:12 - 25809420 _____ () C:\Users\Alex\Downloads\GENRL
2014-03-10 22:45 - 2014-03-10 22:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-10 22:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-10 22:44 - 2014-03-10 22:44 - 00613200 _____ (Chip Digital GmbH) C:\Users\Alex\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-03-10 22:26 - 2014-03-10 22:26 - 00000230 _____ () C:\Windows\wininit.ini
2014-03-10 12:56 - 2014-03-10 12:56 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\.UniversalBinder
2014-03-08 16:51 - 2014-03-08 16:51 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-03-06 13:31 - 2014-03-06 13:31 - 00001793 _____ () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-03-06 13:30 - 2014-03-16 21:41 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Spotify
2014-03-05 19:58 - 2014-03-05 19:58 - 00001828 _____ () C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
2014-03-05 16:14 - 2014-03-15 14:20 - 00000000 ____D () C:\Users\Alex\Desktop\Gta - Wichtige Mods usw
2014-03-05 12:25 - 2014-03-05 12:25 - 00000981 _____ () C:\Users\Alex\Desktop\gta sa neu - Verknüpfung.lnk
2014-03-04 21:18 - 2014-03-04 21:26 - 970950647 _____ () C:\Users\Alex\Desktop\gta sa HD!!!!!!!!!!!!.rar
2014-03-04 12:05 - 2014-03-06 19:27 - 00000000 ____D () C:\Users\Alex\AppData\Local\Windows Live
2014-03-03 21:10 - 2014-03-03 21:10 - 00000995 _____ () C:\Users\Alex\Desktop\Bandicam.lnk
2014-03-03 21:09 - 2014-03-03 21:10 - 00000000 ____D () C:\Program Files (x86)\Bandicam
2014-03-03 14:14 - 2014-03-03 14:14 - 00000730 _____ () C:\Users\Alex\Desktop\samp.exe - Verknüpfung.lnk
2014-03-03 14:00 - 2014-03-03 14:00 - 00069827 _____ () C:\Users\Alex\Downloads\1220357907_SAStreamMemFix2.0 (2).rar
2014-03-02 18:17 - 2014-03-02 18:17 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Renegade X
2014-03-02 18:16 - 2014-03-02 18:17 - 00000000 ____D () C:\Program Files (x86)\Renegade X
2014-03-02 14:52 - 2014-03-02 14:58 - 1768010393 _____ () C:\Users\Alex\Downloads\RenegadeX-OpenBeta-01.exe
2014-03-01 13:29 - 2014-03-14 12:35 - 00000990 _____ () C:\Users\Alex\Desktop\MeinBrutalo Namen.txt
2014-03-01 02:24 - 2014-03-01 02:24 - 00000000 ____D () C:\Users\Alex\Documents\Gunz2
2014-03-01 02:15 - 2014-03-01 02:20 - 819108260 _____ () C:\Users\Alex\Documents\LostSagaEU_Full.exe
2014-03-01 02:00 - 2014-03-01 02:00 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-02-26 02:18 - 2014-02-26 02:28 - 00000185 _____ () C:\attach.ini
2014-02-26 02:18 - 2014-02-26 02:18 - 00000020 _____ () C:\form_signin.ini
2014-02-26 02:15 - 2014-02-26 02:27 - 00000236 _____ () C:\mapui.ini
2014-02-25 22:49 - 2014-02-25 23:00 - 00000000 ____D () C:\Users\Alex\Musik
2014-02-21 20:52 - 2014-02-21 20:52 - 00000000 ____D () C:\Users\Alex\Desktop\WoT Medallien
2014-02-19 20:33 - 2014-02-19 20:33 - 00000044 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG
2014-02-19 15:17 - 2014-02-19 15:20 - 276927952 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\334.89-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-02-19 15:03 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-02-19 15:03 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-02-18 15:07 - 2014-02-18 15:07 - 00000000 ____D () C:\Users\Alex\Documents\Gamepires
2014-02-18 14:38 - 2014-02-18 14:39 - 00002406 _____ () C:\DelFix.txt
2014-02-18 14:34 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-18 14:34 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-18 14:34 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-18 14:34 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-18 14:34 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-18 14:34 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-18 14:34 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-18 14:34 - 2014-02-01 07:45 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-18 14:34 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-18 14:34 - 2013-12-21 10:39 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-18 14:34 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-18 14:33 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-18 14:33 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-18 14:33 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-18 14:33 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-18 14:33 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-18 14:33 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-18 14:33 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-18 14:33 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-18 14:33 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-18 14:32 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-18 14:32 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-18 14:32 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-18 14:32 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-18 14:31 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-18 14:31 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-18 14:31 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-18 14:31 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-17 23:50 - 2014-02-17 23:55 - 00000000 ____D () C:\Users\Alex\AppData\Local\Microsoft Games
2014-02-17 12:32 - 2014-02-17 12:33 - 00000626 _____ () C:\Users\Alex\AppData\Roaming\All CPU MeterV3_Settings.ini
2014-02-17 12:00 - 2014-02-18 14:38 - 00000000 ____D () C:\Windows\ERUNT
2014-02-15 22:01 - 2014-02-15 22:12 - 00000000 ____D () C:\Program Files (x86)\Naturalsoft
==================== One Month Modified Files and Folders =======
2014-03-16 23:44 - 2014-03-16 23:43 - 00022872 _____ () C:\Users\Alex\Desktop\FRST.txt
2014-03-16 23:43 - 2014-03-16 23:43 - 02157056 _____ (Farbar) C:\Users\Alex\Desktop\FRST64 (1).exe
2014-03-16 23:43 - 2014-03-16 23:42 - 02157056 _____ (Farbar) C:\Users\Alex\Downloads\FRST64 (1).exe
2014-03-16 23:43 - 2014-03-11 13:39 - 00000000 ____D () C:\FRST
2014-03-16 23:43 - 2014-02-04 22:24 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003UA.job
2014-03-16 23:42 - 2013-01-05 00:19 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Skype
2014-03-16 23:26 - 2014-03-16 14:21 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-16 23:23 - 2014-03-16 14:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-16 21:41 - 2014-03-06 13:30 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Spotify
2014-03-16 20:44 - 2013-06-25 10:11 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Mozilla
2014-03-16 20:29 - 2012-09-08 18:12 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-16 20:01 - 2013-08-28 15:14 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-16 16:45 - 2013-02-28 19:55 - 00000000 ____D () C:\Program Files (x86)\War Thunder
2014-03-16 16:43 - 2014-02-04 22:24 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-992614989-2845173188-1475335217-1003Core.job
2014-03-16 14:56 - 2014-03-16 14:56 - 00047698 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel
2014-03-16 14:56 - 2013-01-31 14:33 - 00000000 ____D () C:\Users\Alex\.gimp-2.8
2014-03-16 14:29 - 2013-01-05 01:27 - 00000000 ____D () C:\Users\Alex\AppData\Local\CrashDumps
2014-03-16 14:26 - 2014-03-16 14:21 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-16 14:22 - 2014-03-16 14:22 - 00002254 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-16 14:22 - 2013-06-17 11:50 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-16 14:21 - 2014-03-16 14:21 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-16 14:21 - 2014-03-16 14:21 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-16 14:11 - 2014-03-16 14:11 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-16 14:11 - 2014-03-16 14:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-16 14:11 - 2014-03-16 14:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-16 14:11 - 2013-02-15 10:03 - 00000000 ____D () C:\Users\Alex\AppData\Local\Adobe
2014-03-16 13:51 - 2014-02-11 13:14 - 00000000 ____D () C:\Users\Alex\Desktop\WoT
2014-03-16 13:48 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-16 13:48 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-16 13:44 - 2013-01-04 23:51 - 01388351 ____N () C:\Windows\WindowsUpdate.log
2014-03-16 13:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-16 13:14 - 2014-03-16 12:14 - 3773641555 _____ () C:\Users\Alex\Desktop\Let's Test Primal Carnage.wmv
2014-03-16 12:03 - 2014-03-16 12:03 - 00000000 ____D () C:\Users\Alex\AppData\Local\{26BD5C1E-4BFD-42C8-A1DC-DF6693E14E64}
2014-03-15 23:39 - 2014-03-15 22:43 - 00000000 ____D () C:\Users\Alex\Documents\GTA Vice City User Files
2014-03-15 23:31 - 2013-03-25 10:28 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-15 22:43 - 2013-01-05 01:34 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-15 22:06 - 2014-03-15 22:05 - 00000000 ____D () C:\Users\Alex\Documents\GTA3 User Files
2014-03-15 19:46 - 2013-01-05 01:10 - 00000000 ____D () C:\Users\Alex\AppData\Local\PokerStars.EU
2014-03-15 19:45 - 2013-08-19 16:56 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2014-03-15 14:20 - 2014-03-05 16:14 - 00000000 ____D () C:\Users\Alex\Desktop\Gta - Wichtige Mods usw
2014-03-15 14:18 - 2014-03-15 14:18 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-15 14:15 - 2014-03-15 14:15 - 00987442 _____ () C:\Users\Alex\Downloads\SecurityCheck.exe
2014-03-15 14:14 - 2014-03-15 14:14 - 02347384 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_enu (1).exe
2014-03-15 14:13 - 2014-03-15 14:12 - 02347384 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_enu.exe
2014-03-15 14:13 - 2014-03-12 17:36 - 00001485 _____ () C:\Users\Alex\Desktop\UniversalBinder .exe - Verknüpfung.lnk
2014-03-15 14:08 - 2014-03-15 14:08 - 07756753 _____ () C:\Users\Alex\Downloads\7tsp_Jarvis_Win7_Transformation_Pack.7z
2014-03-15 14:07 - 2014-03-15 14:07 - 03192924 _____ () C:\Users\Alex\Downloads\7tsp_Token_Dark_Win7_Icon_Pack.7z
2014-03-15 14:05 - 2013-03-03 23:40 - 00000000 ____D () C:\Users\Alex\Desktop\Desktop zeug usw
2014-03-15 14:05 - 2013-03-03 23:15 - 00000000 ____D () C:\Program Files (x86)\RocketDock
2014-03-15 14:01 - 2014-03-15 14:01 - 00000000 ____D () C:\Users\Alex\Desktop\Musik
2014-03-15 13:58 - 2014-03-15 13:57 - 00000000 ____D () C:\Users\Alex\Desktop\Alles rund um GFX
2014-03-15 13:58 - 2014-03-15 13:45 - 00000000 ____D () C:\Users\Alex\Desktop\Wichtige Gta Sa Mods
2014-03-15 13:56 - 2014-01-09 23:13 - 00000000 ____D () C:\Program Files (x86)\Zenimax Online
2014-03-15 13:54 - 2013-02-24 11:07 - 00000000 ____D () C:\ProgramData\Origin
2014-03-15 13:32 - 2014-03-14 17:12 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-15 13:29 - 2014-03-15 13:27 - 222141776 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\314.22-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-03-15 13:21 - 2012-05-08 06:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-03-15 13:13 - 2014-03-15 13:12 - 276758080 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\335.23-desktop-win8-win7-winvista-64bit-international-whql (1).exe
2014-03-15 13:06 - 2012-05-08 06:56 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-15 13:02 - 2014-03-15 13:02 - 00000000 ____D () C:\Intel
2014-03-15 13:01 - 2014-03-15 12:59 - 257361551 _____ () C:\Users\Alex\Downloads\intel_vga_7_mb.zip
2014-03-15 11:07 - 2014-03-15 01:48 - 00000000 ____D () C:\Users\Alex\AppData\Local\Razer
2014-03-15 11:07 - 2014-03-15 01:48 - 00000000 ____D () C:\ProgramData\Razer
2014-03-15 11:07 - 2014-03-15 01:48 - 00000000 ____D () C:\Program Files (x86)\Razer
2014-03-15 02:48 - 2014-03-15 02:48 - 00021712 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2014-03-15 02:48 - 2014-03-15 02:48 - 00000000 ____D () C:\Users\Alex\AppData\Local\eSupport.com
2014-03-15 02:48 - 2014-03-15 02:48 - 00000000 ____D () C:\Program Files (x86)\eSupport.com
2014-03-15 02:47 - 2014-03-15 02:47 - 00974568 _____ (Copyright © 2013 eSupport.com, Inc • All Rights Reserved ) C:\Users\Alex\Downloads\driveragent-setup.exe
2014-03-15 02:14 - 2013-10-04 22:54 - 00290184 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-15 02:14 - 2013-02-25 20:03 - 00290184 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-15 02:14 - 2013-02-25 20:00 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-15 01:51 - 2014-03-15 01:51 - 00000000 ____D () C:\Users\Alex\AppData\Local\Razer_Inc
2014-03-15 01:50 - 2014-03-15 01:50 - 00000000 ____D () C:\Users\Alex\Documents\Razer
2014-03-15 01:47 - 2014-03-15 01:47 - 41926696 _____ (Razer Inc. ) C:\Users\Alex\Downloads\RazerGameBoosterSetup_4.2.42.0.exe
2014-03-14 20:32 - 2014-03-14 20:32 - 00073196 _____ () C:\Users\Alex\Downloads\nvidia.zip
2014-03-14 20:26 - 2013-07-04 23:59 - 00000000 ____D () C:\Windows\Minidump
2014-03-14 20:26 - 2012-05-07 14:20 - 00000000 ____D () C:\Windows\Panther
2014-03-14 20:24 - 2014-03-14 20:24 - 03690256 _____ (Piriform Ltd) C:\Users\Alex\Downloads\ccsetup411_slim.exe
2014-03-14 20:24 - 2014-03-14 20:24 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-14 20:24 - 2014-03-14 20:24 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-03-14 20:24 - 2013-02-14 11:17 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-14 20:22 - 2014-03-14 20:22 - 00617196 _____ () C:\Users\Alex\Downloads\GPU24_Meter.zip
2014-03-14 19:48 - 2013-12-03 11:29 - 00011943 _____ () C:\Users\Alex\Documents\TombRaider.log
2014-03-14 17:16 - 2014-03-14 17:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-14 17:16 - 2014-03-14 17:16 - 00000000 ____D () C:\Users\Alex\AppData\Local\Skype
2014-03-14 17:16 - 2013-01-05 00:19 - 00000000 ____D () C:\ProgramData\Skype
2014-03-14 17:12 - 2014-03-14 17:12 - 00000020 ___SH () C:\Users\UpdatusUser.Alex-PC\ntuser.ini
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Vorlagen
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Startmenü
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Netzwerkumgebung
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Lokale Einstellungen
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Eigene Dateien
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Druckumgebung
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Documents\Eigene Musik
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Documents\Eigene Bilder
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\AppData\Local\Verlauf
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\AppData\Local\Anwendungsdaten
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 _SHDL () C:\Users\UpdatusUser.Alex-PC\Anwendungsdaten
2014-03-14 17:12 - 2014-03-14 17:12 - 00000000 ____D () C:\Users\UpdatusUser.Alex-PC
2014-03-14 17:07 - 2012-05-23 08:09 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-03-14 17:03 - 2014-01-27 20:11 - 00000000 ____D () C:\Users\Alex\AppData\Local\NVIDIA Corporation
2014-03-14 17:03 - 2013-06-07 19:09 - 00000000 ____D () C:\Users\Alex\AppData\Local\NVIDIA
2014-03-14 17:03 - 2013-01-05 00:38 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\NVIDIA
2014-03-14 16:57 - 2014-03-14 16:56 - 276758080 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\335.23-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-03-14 15:11 - 2013-01-06 17:07 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\TS3Client
2014-03-14 14:24 - 2013-09-23 23:02 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-03-14 12:35 - 2014-03-01 13:29 - 00000990 _____ () C:\Users\Alex\Desktop\MeinBrutalo Namen.txt
2014-03-14 11:20 - 2013-10-04 22:54 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-14 10:49 - 2014-03-14 10:44 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Arc
2014-03-14 10:43 - 2014-03-14 10:43 - 09005512 _____ (Perfect World Entertainment) C:\Users\Alex\Downloads\ArcInstall_v20140224a.exe
2014-03-14 10:43 - 2012-05-08 06:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-14 10:25 - 2014-03-14 10:25 - 100273008 _____ (Microsoft Corporation) C:\Users\Alex\Downloads\directx_Jun2010redist.exe
2014-03-14 01:09 - 2014-03-14 00:45 - 00001040 _____ () C:\Users\Alex\Downloads\_predownloadpath.dat
2014-03-14 00:48 - 2013-10-03 13:54 - 00000000 ____D () C:\ProgramData\BitRaider
2014-03-14 00:42 - 2014-03-14 00:41 - 00000000 ____D () C:\Users\Alex\Skillroad Online
2014-03-14 00:41 - 2014-03-14 00:41 - 02596864 _____ () C:\Users\Alex\Downloads\PSRO_Full_Client_Downloader_v3.exe
2014-03-14 00:41 - 2013-01-05 00:12 - 00000000 ____D () C:\Users\Alex
2014-03-13 21:33 - 2013-11-25 11:57 - 00000859 _____ () C:\Windows\client.config.ini
2014-03-13 21:31 - 2013-11-25 11:16 - 00000000 ___HD () C:\Users\Alex\Documents\Runes of Magic
2014-03-13 20:01 - 2014-03-13 20:01 - 20463856 _____ (Gameforge ) C:\Users\Alex\Downloads\RunesOfMagic_GameforgeLiveSetup.exe
2014-03-13 00:31 - 2014-03-13 00:31 - 13688896 _____ () C:\Users\Alex\Downloads\EQ2_PSG_setup (1).exe
2014-03-13 00:31 - 2014-03-13 00:31 - 00002558 _____ () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EverQuest II PSG (2).lnk
2014-03-13 00:02 - 2014-03-13 00:02 - 00002558 _____ () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EverQuest II PSG.lnk
2014-03-13 00:01 - 2014-03-13 00:01 - 13688896 _____ () C:\Users\Alex\Downloads\EQ2_PSG_setup.exe
2014-03-12 23:53 - 2014-03-12 23:53 - 00000000 ____D () C:\Users\Alex\Downloads\Gameforge Live
2014-03-12 20:56 - 2014-03-12 20:56 - 08065840 _____ (Cheat Engine ) C:\Users\Alex\Downloads\CheatEngine63.exe
2014-03-12 17:32 - 2014-03-12 17:32 - 00274421 _____ () C:\Users\Alex\Downloads\UniversalBinder (1).exe
2014-03-12 17:32 - 2014-03-12 17:32 - 00226816 _____ () C:\Users\Alex\Downloads\API.dll
2014-03-12 17:31 - 2014-03-12 17:31 - 00274421 _____ () C:\Users\Alex\Downloads\UniversalBinder.exe
2014-03-12 12:29 - 2014-03-12 12:27 - 00000000 ____D () C:\AdwCleaner
2014-03-12 12:28 - 2014-03-12 12:28 - 01037734 _____ (Thisisu) C:\Users\Alex\Downloads\JRT.exe
2014-03-12 12:26 - 2014-03-12 12:26 - 01949184 _____ () C:\Users\Alex\Downloads\adwcleaner.exe
2014-03-12 00:53 - 2014-03-12 00:53 - 02933917 _____ () C:\Users\Alex\Downloads\Photorealistic ENB Series V1.zip
2014-03-12 00:51 - 2014-03-12 00:51 - 11646413 _____ () C:\Users\Alex\Downloads\Graphics Pack + ENB Series.rar
2014-03-12 00:48 - 2014-03-12 00:48 - 21270582 _____ () C:\Users\Alex\Downloads\rikintosh gfx beta.rar
2014-03-12 00:45 - 2014-03-12 00:45 - 00281945 _____ () C:\Users\Alex\Downloads\1342683240_Enb Series Config By BJC.rar
2014-03-12 00:39 - 2014-03-12 00:39 - 07205956 _____ () C:\Users\Alex\Downloads\1282296401_ENBSeriesconfig.rar
2014-03-11 21:57 - 2014-03-11 21:57 - 826297313 _____ () C:\Users\Alex\Downloads\de.sb
2014-03-11 21:14 - 2014-03-11 21:14 - 17009704 _____ (Electronic Arts, Inc.) C:\Users\Alex\Downloads\OriginThinSetup (1).exe
2014-03-11 20:49 - 2014-03-11 20:47 - 07370845 _____ () C:\Users\Alex\Downloads\BF3_Patchfix_05_03_2013.zip
2014-03-11 19:58 - 2014-03-11 19:58 - 03821624 _____ () C:\Users\Alex\Downloads\battlelog-web-plugins_2.3.2_131.exe
2014-03-11 19:45 - 2014-03-11 19:45 - 00224768 _____ () C:\Users\Alex\Downloads\BF3 Auto Language Changer (1).exe
2014-03-11 14:21 - 2014-03-11 14:21 - 17009704 _____ (Electronic Arts, Inc.) C:\Users\Alex\Downloads\OriginThinSetup.exe
2014-03-11 14:20 - 2014-03-11 14:20 - 00224768 _____ () C:\Users\Alex\Downloads\BF3 Auto Language Changer.exe
2014-03-11 13:52 - 2014-03-11 13:52 - 00915786 _____ () C:\Users\Alex\Downloads\1393589805_Beats By DRE T.I.P MOD V4-V2.rar
2014-03-11 13:40 - 2014-03-11 13:40 - 00039846 _____ () C:\Users\Alex\Downloads\Addition.txt
2014-03-11 13:40 - 2014-03-11 13:39 - 00058102 _____ () C:\Users\Alex\Downloads\FRST.txt
2014-03-11 13:38 - 2014-03-11 13:38 - 02157056 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2014-03-11 00:36 - 2014-03-11 00:31 - 22370505 _____ () C:\Users\Alex\Downloads\sborka.rar
2014-03-11 00:29 - 2014-03-11 00:29 - 20495672 _____ () C:\Users\Alex\Downloads\Sounds [xGrims The Warx].rar
2014-03-11 00:26 - 2014-03-11 00:25 - 19566321 _____ () C:\Users\Alex\Downloads\GENRL.rar
2014-03-11 00:24 - 2014-03-11 00:24 - 00228184 _____ () C:\Users\Alex\Downloads\sounds.rar
2014-03-10 23:50 - 2014-03-10 23:49 - 51317599 _____ () C:\Users\Alex\Downloads\Hud Mods (1).rar
2014-03-10 23:39 - 2014-03-10 23:38 - 51317599 _____ () C:\Users\Alex\Downloads\Hud Mods.rar
2014-03-10 23:28 - 2014-03-10 23:28 - 01047686 _____ () C:\Users\Alex\Downloads\HUD El Coronos by Vadya.rar
2014-03-10 23:22 - 2014-03-10 23:22 - 19751913 _____ () C:\Users\Alex\Downloads\mods.rar
2014-03-10 23:12 - 2014-03-10 23:12 - 25809420 _____ () C:\Users\Alex\Downloads\GENRL
2014-03-10 22:45 - 2014-03-10 22:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-10 22:44 - 2014-03-10 22:44 - 00613200 _____ (Chip Digital GmbH) C:\Users\Alex\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-03-10 22:26 - 2014-03-10 22:26 - 00000230 _____ () C:\Windows\wininit.ini
2014-03-10 22:07 - 2014-01-03 22:36 - 00000000 ____D () C:\Users\Alex\jagexcache
2014-03-10 22:07 - 2014-01-03 10:45 - 00000000 ____D () C:\Program Files (x86)\MAESTIA
2014-03-10 22:03 - 2013-05-27 22:33 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-10 22:00 - 2013-11-23 19:37 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2014-03-10 20:49 - 2013-02-21 15:57 - 00000000 ____D () C:\Users\Alex\AppData\Local\Spotify
2014-03-10 12:56 - 2014-03-10 12:56 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\.UniversalBinder
2014-03-08 16:51 - 2014-03-08 16:51 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-03-07 16:19 - 2013-10-25 11:30 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Audacity
2014-03-07 16:15 - 2013-07-20 21:11 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Free Audio Editor
2014-03-06 19:27 - 2014-03-04 12:05 - 00000000 ____D () C:\Users\Alex\AppData\Local\Windows Live
2014-03-06 13:31 - 2014-03-06 13:31 - 00001793 _____ () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-03-05 19:58 - 2014-03-05 19:58 - 00001828 _____ () C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
2014-03-05 19:58 - 2013-10-13 15:39 - 00000000 ____D () C:\Users\Alex\Desktop\GTA San Andreas OFFLINE
2014-03-05 19:57 - 2013-01-08 19:01 - 00000000 ____D () C:\ProgramData\MTA San Andreas All
2014-03-05 12:25 - 2014-03-05 12:25 - 00000981 _____ () C:\Users\Alex\Desktop\gta sa neu - Verknüpfung.lnk
2014-03-04 21:26 - 2014-03-04 21:18 - 970950647 _____ () C:\Users\Alex\Desktop\gta sa HD!!!!!!!!!!!!.rar
2014-03-04 15:35 - 2014-03-14 16:39 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-04 15:35 - 2014-03-14 16:39 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-03 21:10 - 2014-03-03 21:10 - 00000995 _____ () C:\Users\Alex\Desktop\Bandicam.lnk
2014-03-03 21:10 - 2014-03-03 21:09 - 00000000 ____D () C:\Program Files (x86)\Bandicam
2014-03-03 21:09 - 2013-09-10 07:40 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1
2014-03-03 14:14 - 2014-03-03 14:14 - 00000730 _____ () C:\Users\Alex\Desktop\samp.exe - Verknüpfung.lnk
2014-03-03 14:00 - 2014-03-03 14:00 - 00069827 _____ () C:\Users\Alex\Downloads\1220357907_SAStreamMemFix2.0 (2).rar
2014-03-03 12:42 - 2013-09-23 23:04 - 00000000 ____D () C:\Program Files (x86)\Neverwinter
2014-03-03 11:46 - 2013-07-24 22:42 - 00000000 ____D () C:\Program Files (x86)\TERA
2014-03-03 01:48 - 2013-06-15 20:29 - 00000000 ____D () C:\Users\Alex\Documents\GTA San Andreas User Files
2014-03-02 18:17 - 2014-03-02 18:17 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Renegade X
2014-03-02 18:17 - 2014-03-02 18:16 - 00000000 ____D () C:\Program Files (x86)\Renegade X
2014-03-02 14:58 - 2014-03-02 14:52 - 1768010393 _____ () C:\Users\Alex\Downloads\RenegadeX-OpenBeta-01.exe
2014-03-02 01:26 - 2013-12-22 17:09 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\.minecraft
2014-03-01 16:07 - 2014-01-24 00:16 - 00000000 ____D () C:\Users\Alex\AppData\Local\ArmA 2 OA
2014-03-01 15:54 - 2014-01-21 18:29 - 00000000 ____D () C:\Users\Alex\Documents\DayZ
2014-03-01 02:24 - 2014-03-01 02:24 - 00000000 ____D () C:\Users\Alex\Documents\Gunz2
2014-03-01 02:20 - 2014-03-01 02:15 - 819108260 _____ () C:\Users\Alex\Documents\LostSagaEU_Full.exe
2014-03-01 02:00 - 2014-03-01 02:00 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-02-27 14:55 - 2013-03-06 21:41 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2014-02-26 02:28 - 2014-02-26 02:18 - 00000185 _____ () C:\attach.ini
2014-02-26 02:27 - 2014-02-26 02:15 - 00000236 _____ () C:\mapui.ini
2014-02-26 02:18 - 2014-02-26 02:18 - 00000020 _____ () C:\form_signin.ini
2014-02-26 01:10 - 2013-11-27 12:08 - 00000000 ____D () C:\Program Files (x86)\gPotato
2014-02-25 23:00 - 2014-02-25 22:49 - 00000000 ____D () C:\Users\Alex\Musik
2014-02-25 00:38 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-25 00:38 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-22 23:29 - 2013-02-28 19:55 - 00000000 ____D () C:\ProgramData\WarThunder
2014-02-22 18:46 - 2013-09-01 18:42 - 00000000 ____D () C:\Users\Alex\Desktop\World of Tanks
2014-02-22 16:54 - 2013-06-15 20:28 - 442435470 _____ () C:\Users\Alex\Documents\GTA San Andreas User Files.rar
2014-02-21 20:52 - 2014-02-21 20:52 - 00000000 ____D () C:\Users\Alex\Desktop\WoT Medallien
2014-02-19 20:33 - 2014-02-19 20:33 - 00000044 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG
2014-02-19 15:20 - 2014-02-19 15:17 - 276927952 _____ (NVIDIA Corporation) C:\Users\Alex\Downloads\334.89-desktop-win8-win7-winvista-64bit-international-whql.exe
2014-02-18 21:35 - 2013-11-05 22:37 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-02-18 20:35 - 2013-11-05 22:37 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\OBS
2014-02-18 15:07 - 2014-02-18 15:07 - 00000000 ____D () C:\Users\Alex\Documents\Gamepires
2014-02-18 14:41 - 2013-10-17 01:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-18 14:39 - 2014-02-18 14:38 - 00002406 _____ () C:\DelFix.txt
2014-02-18 14:39 - 2012-05-08 08:26 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-18 14:38 - 2014-02-17 12:00 - 00000000 ____D () C:\Windows\ERUNT
2014-02-18 14:36 - 2013-02-18 21:34 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-18 14:36 - 2011-04-12 08:43 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-02-18 14:36 - 2011-04-12 08:43 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-02-18 14:36 - 2009-07-14 06:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-17 23:55 - 2014-02-17 23:50 - 00000000 ____D () C:\Users\Alex\AppData\Local\Microsoft Games
2014-02-17 12:33 - 2014-02-17 12:32 - 00000626 _____ () C:\Users\Alex\AppData\Roaming\All CPU MeterV3_Settings.ini
2014-02-17 01:08 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-15 22:12 - 2014-02-15 22:01 - 00000000 ____D () C:\Program Files (x86)\Naturalsoft
2014-02-15 22:12 - 2014-02-13 11:32 - 00000000 ____D () C:\Users\Alex\AppData\Roaming\Naturalsoft
2014-02-15 22:12 - 2014-02-13 11:31 - 00000000 ____D () C:\Users\Alex\Documents\Naturalsoft
2014-02-14 10:50 - 2009-07-14 05:45 - 00573616 _____ () C:\Windows\system32\FNTCACHE.DAT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-17 08:11
==================== End Of Log ============================
|
|
17.03.2014, 11:52
| #10 |
| /// the machine /// TB-Ausbilder | Infizierte Objekte: 8 (Nach wöchentlichen Scannen) Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Infizierte Objekte: 8 (Nach wöchentlichen Scannen) |
| administrator, anti-malware, bösartige, downloader, icreinstall, infizierte, malwarebytes, minute, pup.optional.installcore, pup.optional.installcore.a, pup.optional.mysearchdial.a, pup.optional.myspeeddial.a, scanne, software, version |
Linear-Darstellung
