Nicht sicher ob ich einen gvu trojaner habe

AXiooM · 17.03.2014, 19:12

Moin
heute gegen 18 Uhr wurde ich auf eine Seite umgeleitet von der GVU mit der Begründung pornografische Daten zu besitzen. Ich habe die Seite per Taskmanager geschlossen und mal nachgeschaut, was das ist. Nebenbei lasse ich immer noch den Norton Internetsecurity Scan durchlaufen. Jetzt weis ich nicht, ob ich ihn habe oder nicht den ich war in chrome im inkognito Tab drinnen (wie immer).
Hilfe wäre nett.

AXiooM
windows 8.1

cosinus · 17.03.2014, 19:24

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

AXiooM · 17.03.2014, 19:31

Soll ich den scan von Norton stoppen oder warten ? oder soll ich jetzt schon den frst Scan machen?

cosinus · 17.03.2014, 20:09

Abwarten und Log posten wenn es Funde gibt.
Falls es davor Funde mit Norton oder anderen Programmen gab auch davon die Logs posten

AXiooM · 17.03.2014, 20:33

von norton hab ich das bekommen

Code:

ATTFilter

Elemente insgesamt, die Aufmerksamkeit erfordern: 0

Behobene Bedrohungen:
22 Tracking Cookies
 Typ: Anomalie
 Risiko: Gering (Gering Verbergen, Gering Entfernen, Gering Leistung, Gering Datenschutz)  
 Kategorien: Tracking Cookies
 Status: Vollst. behoben
 -----------
 22 Tracking Cookies
Cookie:mert@mediaplex.com/ - Gelöscht
Cookie:mert@adtech.de/ - Gelöscht
Cookie:mert@adfarm1.adition.com/ - Gelöscht
Cookie:mert@casalemedia.com/ - Gelöscht
Cookie:mert@ad2.adfarm1.adition.com/ - Gelöscht
Cookie:mert@quantserve.com/ - Gelöscht
Cookie:mert@ad3.adfarm1.adition.com/ - Gelöscht
Cookie:mert@doubleclick.net/ - Gelöscht
Cookie:mert@track.adform.net/ - Gelöscht
Cookie:mert@pixel.rubiconproject.com/ - Gelöscht
Cookie:mert@smartadserver.com/ - Gelöscht
Cookie:mert@rubiconproject.com/ - Gelöscht
Cookie:mert@dotomi.com/ - Gelöscht
Cookie:mert@ivwbox.de/ - Gelöscht
Cookie:mert@tap.rubiconproject.com/ - Gelöscht
Cookie:mert@www.etracker.de/ - Gelöscht
Cookie:mert@quantserve.com/ - Gelöscht
Cookie:mert@doubleclick.net/ - Gelöscht
Cookie:mert@pixel.rubiconproject.com/ - Gelöscht
Cookie:mert@rubiconproject.com/ - Gelöscht
Cookie:mert@revsci.net/ - Gelöscht
 - Gelöscht


Trojan.Gen
 Typ: Anomalie
 Risiko: Hoch (Hoch Verbergen, Hoch Entfernen, Hoch Leistung, Hoch Datenschutz)  
 Kategorien: Virus
 Status: Vollst. behoben
 -----------
 1 Datei
c:\2-click run\train simulator 2014 (steam edition)\steam_api.dll - Gelöscht
1 Browser-Cache



Nicht behobene Bedrohungen:
Keine nicht behobenen Risiken

frst

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Mert (administrator) on KING-PC on 17-03-2014 20:32:19
Running from C:\Users\Mert\Desktop
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\WINDOWS\system32\PnkBstrA.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Dropbox, Inc.) C:\Users\Mert\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\NIS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\NIS.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
() C:\Program Files (x86)\Opera\19.0.1326.63\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Nvtmru] - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3567800 2013-10-29] (AVAST Software)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [104768 2012-05-12] (www.motioninjoy.com)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [Spotify] - C:\Users\Mert\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-18] (Spotify Ltd)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [Akamai NetSession Interface] - "C:\Users\Mert\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\MountPoints2: E - "E:\HTC_Sync_Manager_PC.exe" 
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\MountPoints2: {880d130c-6688-11e3-827a-60a44c56c0d0} - "E:\HTC_Sync_Manager_PC.exe" 
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\MountPoints2: {ae27ce8b-ee53-11e2-9aa2-60a44c56c0d0} - "F:\AUTORUN.EXE" 
Startup: C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mert\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9A07459E53B5CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.8,en-US;q=0.5,en;q=0.3
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211&q={searchTerms}
SearchScopes: HKLM - {6DE39456-F1A6-46F6-8B99-3CDBE1CE79E5} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {6DE39456-F1A6-46F6-8B99-3CDBE1CE79E5} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {83905A79-9B65-4DF3-A5A5-AA2D62EE721D} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=5a016e1400000000000000ff327bdc17&r=906
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Chrome: 
=======
CHR Extension: (avast! Online Security) - C:\Users\Mert\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\Mert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-10-29]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\Exts\Chrome.crx [2014-03-17]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-29] (AVAST Software)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-26] (LogMeIn, Inc.)
R2 mi-raysat_3dsmax2014_64; C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [86016 2011-09-15] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\NIS.exe [276376 2014-02-12] (Symantec Corporation)
R2 nTuneService; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [255008 2009-01-06] (NVIDIA)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] ()
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76888 2013-12-05] ()
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75136 2013-12-05] ()
R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UpdateCenterService; C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe [169504 2009-01-07] (NVIDIA)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-10-29] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-10-29] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-10-29] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-29] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-10-29] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-29] ()
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.1.7\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2014-02-14] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501010.007\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-24] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-17] (Symantec Corporation)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-02-26] (LogMeIn Inc.)
S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.1.7\Definitions\IPSDefs\20140314.001\IDSvia64.sys [524504 2014-03-14] (Symantec Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.1.7\Definitions\VirusDefs\20140317.004\ENG64.SYS [126040 2014-03-17] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.1.7\Definitions\VirusDefs\20140317.004\EX64.SYS [2099288 2014-03-17] (Symantec Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NVR0Dev; C:\WINDOWS\nvoclk64.sys [40480 2009-01-06] (NVIDIA Corp.)
R2 NVR0FLASHDev; C:\WINDOWS\nvflsh64.sys [40992 2009-01-07] (NVIDIA Corp.)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2013-11-15] (Razer Inc)
R3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
R3 SRTSP; C:\Windows\system32\drivers\NISx64\1501010.007\SRTSP64.SYS [875736 2014-02-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501010.007\SRTSPX64.SYS [36952 2014-02-11] (Symantec Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501010.007\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501010.007\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1501010.007\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-03-17] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501010.007\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NISx64\1501010.007\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-17 20:31 - 2014-03-17 20:32 - 00021097 _____ () C:\Users\Mert\Desktop\FRST.txt
2014-03-17 20:31 - 2014-03-17 20:31 - 02157056 _____ (Farbar) C:\Users\Mert\Desktop\frst64.exe
2014-03-17 18:30 - 2014-03-17 18:30 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-03-17 18:29 - 2014-03-17 18:29 - 00177752 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-03-17 18:29 - 2014-03-17 18:29 - 00008222 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-03-17 18:29 - 2014-03-17 18:29 - 00003232 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-03-17 18:29 - 2014-03-17 18:29 - 00002584 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\ProgramData\Norton
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-03-17 18:27 - 2014-03-17 18:27 - 60034512 ____N (Symantec Corporation) C:\Users\Mert\Downloads\NIS-ESD-21.1.1-GE.exe
2014-03-17 18:21 - 2014-03-17 18:21 - 00000000 ____D () C:\Users\Mert\Downloads\Windows 8.1 (multiple editions) (x64) - DVD (German)
2014-03-17 18:07 - 2014-03-17 18:13 - 00051562 _____ () C:\Users\Mert\Downloads\Addition.txt
2014-03-17 18:05 - 2014-03-17 20:32 - 00000000 ____D () C:\FRST
2014-03-17 18:05 - 2014-03-17 18:13 - 00090074 _____ () C:\Users\Mert\Downloads\FRST.txt
2014-03-17 18:00 - 2014-03-17 18:21 - 00005490 _____ () C:\Users\Mert\Downloads\SecureDownloadManager.log
2014-03-17 18:00 - 2014-03-17 18:20 - 3628257039 _____ () C:\Users\Mert\Downloads\de_windows_8_1_x64_dvd_2707227.sdc
2014-03-17 18:00 - 2014-03-17 18:00 - 00003165 _____ () C:\Users\Mert\Desktop\Secure Download Manager.lnk
2014-03-17 18:00 - 2014-03-17 18:00 - 00000183 _____ () C:\Users\Mert\Downloads\100219577286.sdx
2014-03-17 17:59 - 2014-03-17 17:59 - 00720896 _____ () C:\Users\Mert\Downloads\SDM_DE.msi
2014-03-16 21:27 - 2014-03-16 17:52 - 00000000 ____D () C:\Users\Mert\Downloads\Handykosten
2014-03-16 19:51 - 2014-03-16 19:51 - 00030838 _____ () C:\Users\Mert\Downloads\Handykosten.zip
2014-03-16 19:38 - 2014-02-16 14:36 - 00000000 ____D () C:\Users\Mert\Downloads\Feinstaubplaketten
2014-03-16 19:37 - 2014-03-16 19:37 - 00031142 _____ () C:\Users\Mert\Downloads\Feinstaubplaketten.zip
2014-03-16 15:53 - 2014-03-16 15:53 - 00001454 _____ () C:\Users\Mert\Desktop\notepad++ - Verknüpfung.lnk
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Notepad++
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-03-16 15:51 - 2014-03-16 15:51 - 07624808 _____ () C:\Users\Mert\Downloads\npp.6.5.5.Installer.exe
2014-03-14 16:15 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-14 16:15 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-14 16:15 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-14 16:15 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-14 16:15 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-14 16:15 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-14 16:15 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-14 16:15 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-14 16:15 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-14 16:15 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-14 16:15 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-14 16:15 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-14 16:15 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-14 16:15 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-14 16:15 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-14 16:15 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-14 16:15 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-14 16:15 - 2014-02-11 04:04 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-14 16:15 - 2014-02-11 03:43 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-14 16:15 - 2014-02-11 03:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-14 16:15 - 2014-01-31 17:15 - 00311640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-14 16:15 - 2014-01-31 17:07 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-14 16:15 - 2014-01-31 17:06 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-14 16:15 - 2014-01-31 14:47 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-14 16:15 - 2014-01-31 10:06 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-14 16:15 - 2014-01-29 10:55 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-03-14 16:15 - 2014-01-29 09:53 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-14 16:15 - 2014-01-29 09:53 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-14 16:15 - 2014-01-29 09:49 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-14 16:15 - 2014-01-29 09:47 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-14 16:15 - 2014-01-29 08:44 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-14 16:15 - 2014-01-29 08:44 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-14 16:15 - 2014-01-29 08:44 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-14 16:15 - 2014-01-29 07:41 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-14 16:15 - 2014-01-29 01:36 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-14 16:15 - 2014-01-27 20:07 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-14 16:15 - 2014-01-27 20:06 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-14 16:15 - 2014-01-27 20:04 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-14 16:15 - 2014-01-27 19:52 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-03-14 16:15 - 2014-01-27 19:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-14 16:15 - 2014-01-27 19:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-14 16:15 - 2014-01-27 19:20 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-14 16:15 - 2014-01-27 19:15 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-14 16:15 - 2014-01-27 18:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-14 16:15 - 2014-01-27 18:18 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-14 16:15 - 2014-01-27 18:00 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-14 16:15 - 2014-01-27 16:58 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-14 16:15 - 2014-01-27 16:50 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-14 16:15 - 2014-01-27 12:45 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-14 16:15 - 2014-01-18 00:04 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-14 16:15 - 2014-01-17 22:54 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-14 16:15 - 2013-12-21 15:51 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-14 16:15 - 2013-12-21 09:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-14 16:15 - 2013-12-20 11:18 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-14 16:15 - 2013-12-20 11:18 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-14 16:15 - 2013-10-31 01:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-14 16:15 - 2013-10-31 01:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-14 16:15 - 2013-10-31 01:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-13 17:08 - 2014-03-13 17:11 - 51204407 _____ () C:\Users\Mert\Downloads\3783.zip
2014-03-13 14:09 - 2014-03-13 14:09 - 00297328 _____ () C:\WINDOWS\Minidump\031314-20312-01.dmp
2014-03-12 20:19 - 2014-03-12 20:23 - 00000000 ____D () C:\Users\Mert\Downloads\Unleashed
2014-03-12 20:17 - 2014-03-14 23:26 - 00000000 ____D () C:\Users\Mert\Downloads\authlib
2014-03-12 20:17 - 2014-03-14 23:26 - 00000000 ____D () C:\Users\Mert\Desktop\trb
2014-03-12 20:07 - 2014-03-12 20:08 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\ftblauncher
2014-03-11 17:41 - 2014-03-04 12:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2014-03-11 17:38 - 2014-03-04 15:35 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-03-11 17:38 - 2014-03-04 15:35 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00832936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00353504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00174296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00148016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-03-11 14:38 - 2014-03-17 16:27 - 00003018 _____ () C:\WINDOWS\System32\Tasks\EVGAPrecision
2014-03-08 01:22 - 2014-03-08 01:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-03-07 16:44 - 2014-03-07 16:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\.technic
2014-03-07 15:23 - 2014-03-07 15:23 - 00000000 _____ () C:\WINDOWS\SysWOW64\Access.dat
2014-03-07 15:17 - 2014-03-07 15:17 - 00014294 _____ () C:\WINDOWS\PFRO.log
2014-03-07 13:22 - 2014-03-15 22:21 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-07 13:22 - 2014-03-15 22:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-07 13:12 - 2014-03-07 13:17 - 00000000 ____D () C:\Users\Default\Documents\Visual Studio 2012
2014-03-07 13:12 - 2014-03-07 13:17 - 00000000 ____D () C:\Users\Default User\Documents\Visual Studio 2012
2014-03-06 20:43 - 2014-03-06 20:45 - 00000022 _____ () C:\Users\Mert\Desktop\Neues Textdokument (2).txt
2014-03-06 18:55 - 2014-03-06 19:06 - 00069505 _____ () C:\Users\Mert\Desktop\özlemasdasd - Kopie.wlmp
2014-03-06 18:50 - 2014-03-06 18:54 - 00068931 _____ () C:\Users\Mert\Desktop\özlemasdasd.wlmp
2014-03-06 18:47 - 2014-03-06 18:47 - 04379336 _____ () C:\Users\Mert\Desktop\20th Century Fox Intro Full-HD 1080p.avi
2014-03-06 18:12 - 2014-03-06 18:43 - 00068693 _____ () C:\Users\Mert\Desktop\özlem.wlmp
2014-03-06 18:10 - 2014-03-06 18:08 - 39942046 ____N () C:\Users\Mert\Desktop\20140306_180747.mp4
2014-03-06 16:23 - 2014-03-17 16:27 - 00000000 ___RD () C:\Users\Mert\Dropbox
2014-03-06 16:23 - 2014-03-06 16:23 - 00001050 _____ () C:\Users\Mert\Desktop\Dropbox.lnk
2014-03-06 16:23 - 2014-03-06 16:23 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\DropboxMaster
2014-03-06 16:22 - 2014-03-06 16:22 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-03-06 16:21 - 2014-03-17 16:27 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Dropbox
2014-03-06 15:19 - 2014-03-06 15:19 - 00000424 _____ () C:\Users\Mert\Desktop\Dieser PC - Verknüpfung.lnk
2014-03-06 13:34 - 2014-03-06 13:34 - 00001452 _____ () C:\Users\Public\Desktop\Free YouTube Download.lnk
2014-03-06 13:26 - 2014-03-06 18:56 - 00000000 ____D () C:\Users\Mert\Desktop\Semra
2014-03-06 13:18 - 2014-03-06 13:21 - 00000000 ____D () C:\Users\Mert\Desktop\Random
2014-03-06 13:11 - 2014-03-06 13:11 - 00000000 ____D () C:\WINDOWS\de
2014-03-06 13:10 - 2014-03-06 13:10 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-03-06 13:10 - 2014-03-06 13:10 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-03-06 13:08 - 2014-03-06 13:25 - 00000000 ____D () C:\Users\Mert\AppData\Local\Windows Live
2014-03-05 12:17 - 2014-03-13 14:09 - 777257131 _____ () C:\WINDOWS\MEMORY.DMP
2014-03-05 12:17 - 2014-03-05 12:18 - 00305624 _____ () C:\WINDOWS\Minidump\030514-27093-01.dmp
2014-03-05 00:46 - 2014-03-05 00:46 - 00000000 ____D () C:\Users\Mert\Documents\SavedGames
2014-03-04 22:48 - 2014-03-04 22:48 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\StarseedPilgrim
2014-03-04 15:25 - 2014-03-04 15:25 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-04 15:10 - 2014-03-17 20:12 - 01881771 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-04 15:10 - 2014-03-04 15:35 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-03-04 15:10 - 2014-03-04 15:10 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Malwarebytes
2014-03-04 15:10 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433489.dll
2014-03-04 15:10 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433489.dll
2014-03-04 15:10 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2014-03-04 15:10 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2014-03-04 15:10 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2014-03-04 15:09 - 2014-03-04 15:09 - 00000000 ____D () C:\NVIDIA
2014-03-04 15:06 - 2014-03-04 15:06 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-04 15:06 - 2014-03-04 15:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-04 15:06 - 2014-03-04 15:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-04 15:06 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-03-04 14:55 - 2014-03-04 14:55 - 00000000 ____D () C:\WINDOWS\8A809006C25A4A3A9DAB94659BCDB107.TMP
2014-03-04 02:17 - 2014-03-04 02:17 - 00000000 ____D () C:\Users\Mert\Documents\Eden Games
2014-03-04 02:05 - 2014-03-13 22:02 - 00006246 _____ () C:\WINDOWS\setupact.log
2014-03-04 02:05 - 2014-03-04 02:05 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-03-04 02:04 - 2014-03-15 00:54 - 00018915 _____ () C:\WINDOWS\DirectX.log
2014-03-04 00:54 - 2014-03-04 00:54 - 00000000 ____D () C:\Users\Mert\AppData\Local\Sniper Elite Zombie Army
2014-03-04 00:22 - 2014-03-07 21:15 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\FEZ
2014-03-04 00:22 - 2014-03-03 20:55 - 00012005 _____ () C:\Users\Mert\AppData\Roaming\alsoft.ini
2014-03-04 00:17 - 2014-03-04 00:17 - 00000000 ____D () C:\Users\Mert\AppData\Local\i-Knyazev.ru
2014-03-03 21:03 - 2014-03-03 21:03 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
2014-03-03 20:56 - 2014-03-03 20:57 - 00000000 ____D () C:\Users\Mert\AppData\Local\Sniper Elite Zombie Army 2
2014-03-03 19:19 - 2014-03-03 19:19 - 00000000 ____D () C:\2-click run
2014-03-03 14:32 - 2014-03-03 14:32 - 00000000 ____D () C:\WINDOWS\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-03-01 01:20 - 2014-03-01 01:20 - 00000939 _____ () C:\Users\Public\Desktop\DS3 Tool.lnk
2014-02-28 16:19 - 2014-03-15 22:26 - 00000000 ____D () C:\Users\Mert\AppData\Local\HTC MediaHub
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\Documents\HTC
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\HTC
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Apple Computer
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Local\Apple Computer
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\.android
2014-02-28 16:18 - 2014-02-28 16:18 - 00002047 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-02-28 16:18 - 2014-02-28 16:18 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-02-28 16:18 - 2014-02-28 16:18 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-02-28 16:17 - 2014-02-28 16:17 - 00000000 ____D () C:\Users\Mert\AppData\Local\Downloaded Installations
2014-02-28 16:17 - 2014-02-28 16:17 - 00000000 ____D () C:\ProgramData\HTC
2014-02-27 17:21 - 2014-02-28 17:00 - 00000000 ____D () C:\Games
2014-02-27 16:15 - 2014-02-27 16:15 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-26 19:57 - 2014-02-26 19:57 - 00046136 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2014-02-23 20:47 - 2014-02-23 20:55 - 00000000 ____D () C:\Program Files (x86)\LSI
2014-02-23 17:15 - 2014-02-23 17:18 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\TeamViewer
2014-02-18 22:06 - 2014-02-18 22:06 - 00000000 ____D () C:\Users\Mert\Documents\Respawn
2014-02-18 16:13 - 2014-02-18 16:13 - 00001178 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-02-18 16:13 - 2014-02-18 16:13 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-02-18 16:08 - 2014-02-18 16:08 - 00000000 ____D () C:\Users\Mert\.jmc
2014-02-18 16:08 - 2014-02-18 16:08 - 00000000 ____D () C:\Users\Mert\.eclipse
2014-02-18 16:03 - 2014-02-18 16:03 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-02-18 16:03 - 2014-02-18 16:03 - 00000000 ____D () C:\ProgramData\Sun
2014-02-18 16:03 - 2014-02-18 16:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-17 16:33 - 2014-02-17 16:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NVIDIA Corporation
2014-02-17 15:54 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-02-17 15:54 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-02-17 15:54 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-02-17 15:54 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-02-17 15:54 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-02-17 15:54 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-02-17 15:54 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-02-17 15:54 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-02-17 15:54 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-02-17 15:54 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-02-17 15:54 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-02-17 15:54 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-02-17 15:54 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-02-17 15:54 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-02-17 15:54 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-02-17 15:54 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-02-17 15:54 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-02-17 15:54 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-02-17 15:54 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-02-17 15:54 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-02-17 15:54 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-02-17 15:54 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-02-17 15:54 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-02-17 15:54 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-02-17 15:54 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-02-17 15:54 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-02-17 15:54 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-02-17 15:54 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-02-17 15:54 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-02-17 15:54 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-02-17 15:54 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-02-17 15:54 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-02-17 15:53 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-02-17 15:53 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-02-17 15:53 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-02-17 15:53 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-02-17 15:53 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-02-17 15:53 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-02-17 15:53 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-02-17 15:53 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-02-17 15:53 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-02-17 15:53 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-02-17 15:53 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-02-17 15:53 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-02-17 15:53 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-02-17 15:53 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

==================== One Month Modified Files and Folders =======

2014-03-17 20:32 - 2014-03-17 20:31 - 00021097 _____ () C:\Users\Mert\Desktop\FRST.txt
2014-03-17 20:32 - 2014-03-17 18:05 - 00000000 ____D () C:\FRST
2014-03-17 20:31 - 2014-03-17 20:31 - 02157056 _____ (Farbar) C:\Users\Mert\Desktop\frst64.exe
2014-03-17 20:31 - 2014-01-25 18:15 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-17 20:31 - 2013-09-20 18:37 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Skype
2014-03-17 20:14 - 2013-09-19 18:06 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-17 20:12 - 2014-03-04 15:10 - 01881771 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-17 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-03-17 19:44 - 2013-09-19 17:53 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-03-17 18:30 - 2014-03-17 18:30 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-03-17 18:29 - 2014-03-17 18:29 - 00177752 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-03-17 18:29 - 2014-03-17 18:29 - 00008222 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-03-17 18:29 - 2014-03-17 18:29 - 00003232 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-03-17 18:29 - 2014-03-17 18:29 - 00002584 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\ProgramData\Norton
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-03-17 18:29 - 2013-08-22 16:36 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-03-17 18:29 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-03-17 18:27 - 2014-03-17 18:27 - 60034512 ____N (Symantec Corporation) C:\Users\Mert\Downloads\NIS-ESD-21.1.1-GE.exe
2014-03-17 18:21 - 2014-03-17 18:21 - 00000000 ____D () C:\Users\Mert\Downloads\Windows 8.1 (multiple editions) (x64) - DVD (German)
2014-03-17 18:21 - 2014-03-17 18:00 - 00005490 _____ () C:\Users\Mert\Downloads\SecureDownloadManager.log
2014-03-17 18:20 - 2014-03-17 18:00 - 3628257039 _____ () C:\Users\Mert\Downloads\de_windows_8_1_x64_dvd_2707227.sdc
2014-03-17 18:13 - 2014-03-17 18:07 - 00051562 _____ () C:\Users\Mert\Downloads\Addition.txt
2014-03-17 18:13 - 2014-03-17 18:05 - 00090074 _____ () C:\Users\Mert\Downloads\FRST.txt
2014-03-17 18:09 - 2013-09-19 17:00 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-17 18:09 - 2013-08-23 00:24 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-03-17 18:09 - 2013-08-23 00:24 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-03-17 18:00 - 2014-03-17 18:00 - 00003165 _____ () C:\Users\Mert\Desktop\Secure Download Manager.lnk
2014-03-17 18:00 - 2014-03-17 18:00 - 00000183 _____ () C:\Users\Mert\Downloads\100219577286.sdx
2014-03-17 17:59 - 2014-03-17 17:59 - 00720896 _____ () C:\Users\Mert\Downloads\SDM_DE.msi
2014-03-17 16:33 - 2013-09-19 17:13 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-626050035-2673047926-1771085792-1000
2014-03-17 16:27 - 2014-03-11 14:38 - 00003018 _____ () C:\WINDOWS\System32\Tasks\EVGAPrecision
2014-03-17 16:27 - 2014-03-06 16:23 - 00000000 ___RD () C:\Users\Mert\Dropbox
2014-03-17 16:27 - 2014-03-06 16:21 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Dropbox
2014-03-17 16:27 - 2014-01-25 18:15 - 00001118 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-17 16:27 - 2013-10-30 18:53 - 00000000 __RDO () C:\Users\Mert\SkyDrive
2014-03-17 16:27 - 2013-09-19 17:52 - 00000000 ____D () C:\Users\Mert\AppData\Local\Adobe
2014-03-16 19:51 - 2014-03-16 19:51 - 00030838 _____ () C:\Users\Mert\Downloads\Handykosten.zip
2014-03-16 19:37 - 2014-03-16 19:37 - 00031142 _____ () C:\Users\Mert\Downloads\Feinstaubplaketten.zip
2014-03-16 17:52 - 2014-03-16 21:27 - 00000000 ____D () C:\Users\Mert\Downloads\Handykosten
2014-03-16 15:53 - 2014-03-16 15:53 - 00001454 _____ () C:\Users\Mert\Desktop\notepad++ - Verknüpfung.lnk
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Notepad++
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-03-16 15:51 - 2014-03-16 15:51 - 07624808 _____ () C:\Users\Mert\Downloads\npp.6.5.5.Installer.exe
2014-03-15 22:26 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Local\HTC MediaHub
2014-03-15 22:22 - 2013-09-19 17:14 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-15 22:22 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-03-15 22:21 - 2014-03-07 13:22 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-15 22:21 - 2014-03-07 13:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-15 22:21 - 2013-08-22 15:44 - 05050008 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-15 17:52 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-03-15 17:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-15 17:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-15 17:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-15 17:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-15 15:03 - 2013-09-30 16:29 - 00000000 ____D () C:\Users\Mert\Documents\NetBeansProjects
2014-03-15 14:53 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-03-15 01:57 - 2013-07-13 14:35 - 00000000 ___RD () C:\Users\Mert\Desktop\Games
2014-03-15 00:54 - 2014-03-04 02:04 - 00018915 _____ () C:\WINDOWS\DirectX.log
2014-03-14 23:53 - 2013-09-19 18:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-14 23:27 - 2013-10-06 15:14 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\TS3Client
2014-03-14 23:26 - 2014-03-12 20:17 - 00000000 ____D () C:\Users\Mert\Downloads\authlib
2014-03-14 23:26 - 2014-03-12 20:17 - 00000000 ____D () C:\Users\Mert\Desktop\trb
2014-03-14 23:24 - 2013-09-19 18:04 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\vlc
2014-03-13 22:02 - 2014-03-04 02:05 - 00006246 _____ () C:\WINDOWS\setupact.log
2014-03-13 17:11 - 2014-03-13 17:08 - 51204407 _____ () C:\Users\Mert\Downloads\3783.zip
2014-03-13 14:09 - 2014-03-13 14:09 - 00297328 _____ () C:\WINDOWS\Minidump\031314-20312-01.dmp
2014-03-13 14:09 - 2014-03-05 12:17 - 777257131 _____ () C:\WINDOWS\MEMORY.DMP
2014-03-13 14:09 - 2013-09-26 17:42 - 00000000 ____D () C:\WINDOWS\Minidump
2014-03-12 20:24 - 2013-11-14 16:40 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\.minecraft
2014-03-12 20:23 - 2014-03-12 20:19 - 00000000 ____D () C:\Users\Mert\Downloads\Unleashed
2014-03-12 20:08 - 2014-03-12 20:07 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\ftblauncher
2014-03-11 18:44 - 2013-09-19 17:53 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-03-11 17:41 - 2013-09-19 17:13 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-09 19:12 - 2013-10-19 10:54 - 00000000 ____D () C:\Users\Mert\AppData\Local\LogMeIn Hamachi
2014-03-08 01:22 - 2014-03-08 01:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-03-07 21:15 - 2014-03-04 00:22 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\FEZ
2014-03-07 16:52 - 2014-03-07 16:44 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\.technic
2014-03-07 16:14 - 2013-12-27 14:45 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-07 16:14 - 2013-10-19 11:05 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Tunngle
2014-03-07 15:23 - 2014-03-07 15:23 - 00000000 _____ () C:\WINDOWS\SysWOW64\Access.dat
2014-03-07 15:17 - 2014-03-07 15:17 - 00014294 _____ () C:\WINDOWS\PFRO.log
2014-03-07 13:17 - 2014-03-07 13:12 - 00000000 ____D () C:\Users\Default\Documents\Visual Studio 2012
2014-03-07 13:17 - 2014-03-07 13:12 - 00000000 ____D () C:\Users\Default User\Documents\Visual Studio 2012
2014-03-07 13:11 - 2013-09-21 00:46 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-06 20:45 - 2014-03-06 20:43 - 00000022 _____ () C:\Users\Mert\Desktop\Neues Textdokument (2).txt
2014-03-06 19:06 - 2014-03-06 18:55 - 00069505 _____ () C:\Users\Mert\Desktop\özlemasdasd - Kopie.wlmp
2014-03-06 18:56 - 2014-03-06 13:26 - 00000000 ____D () C:\Users\Mert\Desktop\Semra
2014-03-06 18:54 - 2014-03-06 18:50 - 00068931 _____ () C:\Users\Mert\Desktop\özlemasdasd.wlmp
2014-03-06 18:47 - 2014-03-06 18:47 - 04379336 _____ () C:\Users\Mert\Desktop\20th Century Fox Intro Full-HD 1080p.avi
2014-03-06 18:43 - 2014-03-06 18:12 - 00068693 _____ () C:\Users\Mert\Desktop\özlem.wlmp
2014-03-06 18:08 - 2014-03-06 18:10 - 39942046 ____N () C:\Users\Mert\Desktop\20140306_180747.mp4
2014-03-06 16:41 - 2013-07-14 23:52 - 00000000 ____D () C:\Users\Mert\Desktop\Bilder
2014-03-06 16:23 - 2014-03-06 16:23 - 00001050 _____ () C:\Users\Mert\Desktop\Dropbox.lnk
2014-03-06 16:23 - 2014-03-06 16:23 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\DropboxMaster
2014-03-06 16:23 - 2013-09-19 17:08 - 00000000 ___RD () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-06 16:23 - 2013-09-19 16:54 - 00000000 ____D () C:\Users\Mert
2014-03-06 16:22 - 2014-03-06 16:22 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-03-06 15:42 - 2013-11-02 18:46 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-03-06 15:19 - 2014-03-06 15:19 - 00000424 _____ () C:\Users\Mert\Desktop\Dieser PC - Verknüpfung.lnk
2014-03-06 13:35 - 2013-09-28 15:17 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\DVDVideoSoft
2014-03-06 13:34 - 2014-03-06 13:34 - 00001452 _____ () C:\Users\Public\Desktop\Free YouTube Download.lnk
2014-03-06 13:34 - 2013-11-16 13:05 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-06 13:25 - 2014-03-06 13:08 - 00000000 ____D () C:\Users\Mert\AppData\Local\Windows Live
2014-03-06 13:21 - 2014-03-06 13:18 - 00000000 ____D () C:\Users\Mert\Desktop\Random
2014-03-06 13:11 - 2014-03-06 13:11 - 00000000 ____D () C:\WINDOWS\de
2014-03-06 13:11 - 2013-09-21 01:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-03-06 13:10 - 2014-03-06 13:10 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-03-06 13:10 - 2014-03-06 13:10 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-03-06 13:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-05 14:16 - 2013-10-04 23:18 - 00000000 ____D () C:\ProgramData\Origin
2014-03-05 14:14 - 2013-10-10 17:17 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-03-05 12:18 - 2014-03-05 12:17 - 00305624 _____ () C:\WINDOWS\Minidump\030514-27093-01.dmp
2014-03-05 00:46 - 2014-03-05 00:46 - 00000000 ____D () C:\Users\Mert\Documents\SavedGames
2014-03-04 23:53 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-03-04 23:53 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-04 22:48 - 2014-03-04 22:48 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\StarseedPilgrim
2014-03-04 15:35 - 2014-03-11 17:38 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-03-04 15:35 - 2014-03-11 17:38 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00832936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00353504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00174296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00148016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-03-04 15:35 - 2014-03-04 15:10 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-03-04 15:35 - 2013-11-30 00:15 - 31474976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 18302384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 14709720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 03093280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 02715264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 00947808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 00024544 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-03-04 15:25 - 2014-03-04 15:25 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-04 15:10 - 2014-03-04 15:10 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Malwarebytes
2014-03-04 15:09 - 2014-03-04 15:09 - 00000000 ____D () C:\NVIDIA
2014-03-04 15:06 - 2014-03-04 15:06 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-04 15:06 - 2014-03-04 15:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-04 15:06 - 2014-03-04 15:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-04 14:55 - 2014-03-04 14:55 - 00000000 ____D () C:\WINDOWS\8A809006C25A4A3A9DAB94659BCDB107.TMP
2014-03-04 14:06 - 2013-09-19 17:13 - 06714312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-03-04 14:06 - 2013-09-19 17:13 - 03497816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-03-04 14:05 - 2013-09-19 17:13 - 03649185 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-03-04 14:05 - 2013-09-19 17:13 - 02558808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-03-04 14:05 - 2013-09-19 17:13 - 00922968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-03-04 14:05 - 2013-09-19 17:13 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-03-04 14:05 - 2013-09-19 17:13 - 00064968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-03-04 12:32 - 2014-03-11 17:41 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2014-03-04 02:44 - 2013-10-05 00:42 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2014-03-04 02:44 - 2013-10-05 00:42 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2014-03-04 02:40 - 2013-10-04 23:50 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-03-04 02:17 - 2014-03-04 02:17 - 00000000 ____D () C:\Users\Mert\Documents\Eden Games
2014-03-04 02:12 - 2013-10-08 21:30 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Azureus
2014-03-04 02:12 - 2013-09-24 14:01 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\DAEMON Tools Lite
2014-03-04 02:12 - 2013-09-19 21:00 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-03-04 02:05 - 2014-03-04 02:05 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-03-04 00:54 - 2014-03-04 00:54 - 00000000 ____D () C:\Users\Mert\AppData\Local\Sniper Elite Zombie Army
2014-03-04 00:17 - 2014-03-04 00:17 - 00000000 ____D () C:\Users\Mert\AppData\Local\i-Knyazev.ru
2014-03-03 21:03 - 2014-03-03 21:03 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
2014-03-03 20:57 - 2014-03-03 20:56 - 00000000 ____D () C:\Users\Mert\AppData\Local\Sniper Elite Zombie Army 2
2014-03-03 20:55 - 2014-03-04 00:22 - 00012005 _____ () C:\Users\Mert\AppData\Roaming\alsoft.ini
2014-03-03 19:19 - 2014-03-03 19:19 - 00000000 ____D () C:\2-click run
2014-03-03 14:32 - 2014-03-03 14:32 - 00000000 ____D () C:\WINDOWS\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-03-02 21:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-03-01 07:05 - 2014-03-14 16:15 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-01 05:58 - 2014-03-14 16:15 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-01 05:30 - 2014-03-14 16:15 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-01 05:17 - 2014-03-14 16:15 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-01 04:54 - 2014-03-14 16:15 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-01 04:47 - 2014-03-14 16:15 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-01 04:42 - 2014-03-14 16:15 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-01 04:18 - 2014-03-14 16:15 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-01 04:14 - 2014-03-14 16:15 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-14 16:15 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-01 04:03 - 2014-03-14 16:15 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-01 03:57 - 2014-03-14 16:15 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-14 16:15 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-14 16:15 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-14 16:15 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-14 16:15 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-14 16:15 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-01 01:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-03-01 01:20 - 2014-03-01 01:20 - 00000939 _____ () C:\Users\Public\Desktop\DS3 Tool.lnk
2014-03-01 01:20 - 2014-01-12 20:40 - 00000000 ____D () C:\Program Files\MotioninJoy
2014-02-28 17:00 - 2014-02-27 17:21 - 00000000 ____D () C:\Games
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\Documents\HTC
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\HTC
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Apple Computer
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Local\Apple Computer
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\.android
2014-02-28 16:18 - 2014-02-28 16:18 - 00002047 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-02-28 16:18 - 2014-02-28 16:18 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-02-28 16:18 - 2014-02-28 16:18 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-02-28 16:17 - 2014-02-28 16:17 - 00000000 ____D () C:\Users\Mert\AppData\Local\Downloaded Installations
2014-02-28 16:17 - 2014-02-28 16:17 - 00000000 ____D () C:\ProgramData\HTC
2014-02-27 16:15 - 2014-02-27 16:15 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-27 16:15 - 2013-12-29 14:13 - 00000938 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-02-26 19:57 - 2014-02-26 19:57 - 00046136 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2014-02-25 13:14 - 2013-12-15 15:44 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-23 20:55 - 2014-02-23 20:47 - 00000000 ____D () C:\Program Files (x86)\LSI
2014-02-23 17:18 - 2014-02-23 17:15 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\TeamViewer
2014-02-23 13:20 - 2013-09-30 17:57 - 00000000 ____D () C:\Users\Mert\AppData\Local\Eclipse
2014-02-23 13:20 - 2013-09-30 17:53 - 00000000 ____D () C:\Program Files (x86)\eclipse
2014-02-22 14:03 - 2013-11-13 20:27 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-02-22 13:59 - 2013-11-13 20:27 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-22 13:40 - 2014-01-30 16:14 - 00001571 _____ () C:\Users\Mert\Desktop\Adobe Illustrator CC (64 Bit).lnk
2014-02-21 23:43 - 2013-09-19 17:08 - 00000000 ___RD () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-21 23:38 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-02-21 23:38 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-02-21 23:38 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-02-18 22:06 - 2014-02-18 22:06 - 00000000 ____D () C:\Users\Mert\Documents\Respawn
2014-02-18 16:13 - 2014-02-18 16:13 - 00001178 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-02-18 16:13 - 2014-02-18 16:13 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-02-18 16:08 - 2014-02-18 16:08 - 00000000 ____D () C:\Users\Mert\.jmc
2014-02-18 16:08 - 2014-02-18 16:08 - 00000000 ____D () C:\Users\Mert\.eclipse
2014-02-18 16:03 - 2014-02-18 16:03 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-02-18 16:03 - 2014-02-18 16:03 - 00000000 ____D () C:\ProgramData\Sun
2014-02-18 16:03 - 2014-02-18 16:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-18 16:03 - 2013-09-30 16:25 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-17 17:58 - 2013-10-23 11:39 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D5A2DCBE-CDB1-4152-945B-2F24EACB8585}
2014-02-17 16:33 - 2014-02-17 16:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NVIDIA Corporation
2014-02-17 16:07 - 2013-10-09 14:26 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-626050035-2673047926-1771085792-1005
2014-02-16 14:36 - 2014-03-16 19:38 - 00000000 ____D () C:\Users\Mert\Downloads\Feinstaubplaketten
2014-02-16 02:27 - 2013-10-08 15:07 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Spotify
2014-02-16 01:22 - 2013-10-08 15:07 - 00000000 ____D () C:\Users\Mert\AppData\Local\Spotify

Some content of TEMP:
====================
C:\Users\Mert\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwm1un4.dll
C:\Users\Mert\AppData\Local\Temp\i4jdel0.exe
C:\Users\Mert\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Mert\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Mert\AppData\Local\Temp\nvStInst.exe
C:\Users\Mert\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-03-14 16:15] - [2014-01-31 17:15] - 0311640 ____A (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02



LastRegBack: 2014-03-10 17:33

==================== End Of Log ============================

--- --- ---

cosinus · 17.03.2014, 20:41

Was ist mit anderen bisherigen Funden?
Außerdem fehlt das andere FRST Log

AXiooM · 17.03.2014, 20:47

ich habe den Trojaner erst seit heute und das war der erste scann den ich gemacht habe:/

frst

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Mert (administrator) on KING-PC on 17-03-2014 20:43:02
Running from C:\Users\Mert\Desktop
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\WINDOWS\system32\PnkBstrA.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Dropbox, Inc.) C:\Users\Mert\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\NIS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\NIS.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
() C:\Program Files (x86)\Opera\19.0.1326.63\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Nvtmru] - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3567800 2013-10-29] (AVAST Software)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [104768 2012-05-12] (www.motioninjoy.com)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [Spotify] - C:\Users\Mert\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-18] (Spotify Ltd)
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\Run: [Akamai NetSession Interface] - "C:\Users\Mert\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\MountPoints2: E - "E:\HTC_Sync_Manager_PC.exe" 
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\MountPoints2: {880d130c-6688-11e3-827a-60a44c56c0d0} - "E:\HTC_Sync_Manager_PC.exe" 
HKU\S-1-5-21-626050035-2673047926-1771085792-1000\...\MountPoints2: {ae27ce8b-ee53-11e2-9aa2-60a44c56c0d0} - "F:\AUTORUN.EXE" 
Startup: C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mert\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9A07459E53B5CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.8,en-US;q=0.5,en;q=0.3
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387117145&from=adks&uid=WDCXWD10EZRX-00A8LB0_WD-WCC1U284921149211&q={searchTerms}
SearchScopes: HKLM - {6DE39456-F1A6-46F6-8B99-3CDBE1CE79E5} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {6DE39456-F1A6-46F6-8B99-3CDBE1CE79E5} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {83905A79-9B65-4DF3-A5A5-AA2D62EE721D} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=5a016e1400000000000000ff327bdc17&r=906
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Chrome: 
=======
CHR Extension: (avast! Online Security) - C:\Users\Mert\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\Mert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-10-29]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\Exts\Chrome.crx [2014-03-17]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-29] (AVAST Software)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-26] (LogMeIn, Inc.)
R2 mi-raysat_3dsmax2014_64; C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [86016 2011-09-15] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\NIS.exe [276376 2014-02-12] (Symantec Corporation)
R2 nTuneService; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [255008 2009-01-06] (NVIDIA)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] ()
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76888 2013-12-05] ()
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75136 2013-12-05] ()
R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UpdateCenterService; C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe [169504 2009-01-07] (NVIDIA)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-10-29] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-10-29] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-10-29] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-29] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-10-29] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-29] ()
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.1.7\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2014-02-14] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501010.007\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-24] (DT Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-17] (Symantec Corporation)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-02-26] (LogMeIn Inc.)
S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.1.7\Definitions\IPSDefs\20140314.001\IDSvia64.sys [524504 2014-03-14] (Symantec Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.1.7\Definitions\VirusDefs\20140317.004\ENG64.SYS [126040 2014-03-17] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.1.7\Definitions\VirusDefs\20140317.004\EX64.SYS [2099288 2014-03-17] (Symantec Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NVR0Dev; C:\WINDOWS\nvoclk64.sys [40480 2009-01-06] (NVIDIA Corp.)
R2 NVR0FLASHDev; C:\WINDOWS\nvflsh64.sys [40992 2009-01-07] (NVIDIA Corp.)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2013-11-15] (Razer Inc)
R3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
R3 SRTSP; C:\Windows\system32\drivers\NISx64\1501010.007\SRTSP64.SYS [875736 2014-02-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501010.007\SRTSPX64.SYS [36952 2014-02-11] (Symantec Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501010.007\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501010.007\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1501010.007\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-03-17] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501010.007\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NISx64\1501010.007\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-17 20:31 - 2014-03-17 20:43 - 00020798 _____ () C:\Users\Mert\Desktop\FRST.txt
2014-03-17 20:31 - 2014-03-17 20:31 - 02157056 _____ (Farbar) C:\Users\Mert\Desktop\frst64.exe
2014-03-17 18:30 - 2014-03-17 18:30 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-03-17 18:29 - 2014-03-17 18:29 - 00177752 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-03-17 18:29 - 2014-03-17 18:29 - 00008222 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-03-17 18:29 - 2014-03-17 18:29 - 00003232 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-03-17 18:29 - 2014-03-17 18:29 - 00002584 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\ProgramData\Norton
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-03-17 18:27 - 2014-03-17 18:27 - 60034512 ____N (Symantec Corporation) C:\Users\Mert\Downloads\NIS-ESD-21.1.1-GE.exe
2014-03-17 18:21 - 2014-03-17 18:21 - 00000000 ____D () C:\Users\Mert\Downloads\Windows 8.1 (multiple editions) (x64) - DVD (German)
2014-03-17 18:07 - 2014-03-17 18:13 - 00051562 _____ () C:\Users\Mert\Downloads\Addition.txt
2014-03-17 18:05 - 2014-03-17 20:43 - 00000000 ____D () C:\FRST
2014-03-17 18:05 - 2014-03-17 18:13 - 00090074 _____ () C:\Users\Mert\Downloads\FRST.txt
2014-03-17 18:00 - 2014-03-17 18:21 - 00005490 _____ () C:\Users\Mert\Downloads\SecureDownloadManager.log
2014-03-17 18:00 - 2014-03-17 18:20 - 3628257039 _____ () C:\Users\Mert\Downloads\de_windows_8_1_x64_dvd_2707227.sdc
2014-03-17 18:00 - 2014-03-17 18:00 - 00003165 _____ () C:\Users\Mert\Desktop\Secure Download Manager.lnk
2014-03-17 18:00 - 2014-03-17 18:00 - 00000183 _____ () C:\Users\Mert\Downloads\100219577286.sdx
2014-03-17 17:59 - 2014-03-17 17:59 - 00720896 _____ () C:\Users\Mert\Downloads\SDM_DE.msi
2014-03-16 21:27 - 2014-03-16 17:52 - 00000000 ____D () C:\Users\Mert\Downloads\Handykosten
2014-03-16 19:51 - 2014-03-16 19:51 - 00030838 _____ () C:\Users\Mert\Downloads\Handykosten.zip
2014-03-16 19:38 - 2014-02-16 14:36 - 00000000 ____D () C:\Users\Mert\Downloads\Feinstaubplaketten
2014-03-16 19:37 - 2014-03-16 19:37 - 00031142 _____ () C:\Users\Mert\Downloads\Feinstaubplaketten.zip
2014-03-16 15:53 - 2014-03-16 15:53 - 00001454 _____ () C:\Users\Mert\Desktop\notepad++ - Verknüpfung.lnk
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Notepad++
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-03-16 15:51 - 2014-03-16 15:51 - 07624808 _____ () C:\Users\Mert\Downloads\npp.6.5.5.Installer.exe
2014-03-14 16:15 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-14 16:15 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-14 16:15 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-14 16:15 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-14 16:15 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-14 16:15 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-14 16:15 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-14 16:15 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-14 16:15 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-14 16:15 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-14 16:15 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-14 16:15 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-14 16:15 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-14 16:15 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-14 16:15 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-14 16:15 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-14 16:15 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-14 16:15 - 2014-02-11 04:04 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-14 16:15 - 2014-02-11 03:43 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-14 16:15 - 2014-02-11 03:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-14 16:15 - 2014-01-31 17:15 - 00311640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-14 16:15 - 2014-01-31 17:07 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-14 16:15 - 2014-01-31 17:06 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-14 16:15 - 2014-01-31 14:47 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-14 16:15 - 2014-01-31 10:06 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-14 16:15 - 2014-01-29 10:55 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-03-14 16:15 - 2014-01-29 09:53 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-14 16:15 - 2014-01-29 09:53 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-14 16:15 - 2014-01-29 09:49 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-14 16:15 - 2014-01-29 09:47 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-14 16:15 - 2014-01-29 08:44 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-14 16:15 - 2014-01-29 08:44 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-14 16:15 - 2014-01-29 08:44 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-14 16:15 - 2014-01-29 07:41 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-14 16:15 - 2014-01-29 01:36 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-14 16:15 - 2014-01-27 20:07 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-14 16:15 - 2014-01-27 20:06 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-14 16:15 - 2014-01-27 20:04 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-14 16:15 - 2014-01-27 19:52 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-03-14 16:15 - 2014-01-27 19:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-14 16:15 - 2014-01-27 19:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-14 16:15 - 2014-01-27 19:20 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-14 16:15 - 2014-01-27 19:15 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-14 16:15 - 2014-01-27 18:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-14 16:15 - 2014-01-27 18:18 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-14 16:15 - 2014-01-27 18:00 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-14 16:15 - 2014-01-27 16:58 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-14 16:15 - 2014-01-27 16:50 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-14 16:15 - 2014-01-27 12:45 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-14 16:15 - 2014-01-18 00:04 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-14 16:15 - 2014-01-17 22:54 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-14 16:15 - 2013-12-21 15:51 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-14 16:15 - 2013-12-21 09:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-14 16:15 - 2013-12-20 11:18 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-14 16:15 - 2013-12-20 11:18 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-14 16:15 - 2013-10-31 01:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-14 16:15 - 2013-10-31 01:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-14 16:15 - 2013-10-31 01:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-13 17:08 - 2014-03-13 17:11 - 51204407 _____ () C:\Users\Mert\Downloads\3783.zip
2014-03-13 14:09 - 2014-03-13 14:09 - 00297328 _____ () C:\WINDOWS\Minidump\031314-20312-01.dmp
2014-03-12 20:19 - 2014-03-12 20:23 - 00000000 ____D () C:\Users\Mert\Downloads\Unleashed
2014-03-12 20:17 - 2014-03-14 23:26 - 00000000 ____D () C:\Users\Mert\Downloads\authlib
2014-03-12 20:17 - 2014-03-14 23:26 - 00000000 ____D () C:\Users\Mert\Desktop\trb
2014-03-12 20:07 - 2014-03-12 20:08 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\ftblauncher
2014-03-11 17:41 - 2014-03-04 12:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2014-03-11 17:38 - 2014-03-04 15:35 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-03-11 17:38 - 2014-03-04 15:35 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00832936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00353504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00174296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-03-11 17:38 - 2014-03-04 15:35 - 00148016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-03-11 14:38 - 2014-03-17 16:27 - 00003018 _____ () C:\WINDOWS\System32\Tasks\EVGAPrecision
2014-03-08 01:22 - 2014-03-08 01:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-03-07 16:44 - 2014-03-07 16:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\.technic
2014-03-07 15:23 - 2014-03-07 15:23 - 00000000 _____ () C:\WINDOWS\SysWOW64\Access.dat
2014-03-07 15:17 - 2014-03-07 15:17 - 00014294 _____ () C:\WINDOWS\PFRO.log
2014-03-07 13:22 - 2014-03-15 22:21 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-07 13:22 - 2014-03-15 22:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-07 13:12 - 2014-03-07 13:17 - 00000000 ____D () C:\Users\Default\Documents\Visual Studio 2012
2014-03-07 13:12 - 2014-03-07 13:17 - 00000000 ____D () C:\Users\Default User\Documents\Visual Studio 2012
2014-03-06 20:43 - 2014-03-06 20:45 - 00000022 _____ () C:\Users\Mert\Desktop\Neues Textdokument (2).txt
2014-03-06 18:55 - 2014-03-06 19:06 - 00069505 _____ () C:\Users\Mert\Desktop\özlemasdasd - Kopie.wlmp
2014-03-06 18:50 - 2014-03-06 18:54 - 00068931 _____ () C:\Users\Mert\Desktop\özlemasdasd.wlmp
2014-03-06 18:47 - 2014-03-06 18:47 - 04379336 _____ () C:\Users\Mert\Desktop\20th Century Fox Intro Full-HD 1080p.avi
2014-03-06 18:12 - 2014-03-06 18:43 - 00068693 _____ () C:\Users\Mert\Desktop\özlem.wlmp
2014-03-06 18:10 - 2014-03-06 18:08 - 39942046 ____N () C:\Users\Mert\Desktop\20140306_180747.mp4
2014-03-06 16:23 - 2014-03-17 16:27 - 00000000 ___RD () C:\Users\Mert\Dropbox
2014-03-06 16:23 - 2014-03-06 16:23 - 00001050 _____ () C:\Users\Mert\Desktop\Dropbox.lnk
2014-03-06 16:23 - 2014-03-06 16:23 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\DropboxMaster
2014-03-06 16:22 - 2014-03-06 16:22 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-03-06 16:21 - 2014-03-17 16:27 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Dropbox
2014-03-06 15:19 - 2014-03-06 15:19 - 00000424 _____ () C:\Users\Mert\Desktop\Dieser PC - Verknüpfung.lnk
2014-03-06 13:34 - 2014-03-06 13:34 - 00001452 _____ () C:\Users\Public\Desktop\Free YouTube Download.lnk
2014-03-06 13:26 - 2014-03-06 18:56 - 00000000 ____D () C:\Users\Mert\Desktop\Semra
2014-03-06 13:18 - 2014-03-06 13:21 - 00000000 ____D () C:\Users\Mert\Desktop\Random
2014-03-06 13:11 - 2014-03-06 13:11 - 00000000 ____D () C:\WINDOWS\de
2014-03-06 13:10 - 2014-03-06 13:10 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-03-06 13:10 - 2014-03-06 13:10 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-03-06 13:08 - 2014-03-06 13:25 - 00000000 ____D () C:\Users\Mert\AppData\Local\Windows Live
2014-03-05 12:17 - 2014-03-13 14:09 - 777257131 _____ () C:\WINDOWS\MEMORY.DMP
2014-03-05 12:17 - 2014-03-05 12:18 - 00305624 _____ () C:\WINDOWS\Minidump\030514-27093-01.dmp
2014-03-05 00:46 - 2014-03-05 00:46 - 00000000 ____D () C:\Users\Mert\Documents\SavedGames
2014-03-04 22:48 - 2014-03-04 22:48 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\StarseedPilgrim
2014-03-04 15:25 - 2014-03-04 15:25 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-04 15:10 - 2014-03-17 20:12 - 01881771 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-04 15:10 - 2014-03-04 15:35 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-03-04 15:10 - 2014-03-04 15:10 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Malwarebytes
2014-03-04 15:10 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433489.dll
2014-03-04 15:10 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433489.dll
2014-03-04 15:10 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2014-03-04 15:10 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2014-03-04 15:10 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2014-03-04 15:09 - 2014-03-04 15:09 - 00000000 ____D () C:\NVIDIA
2014-03-04 15:06 - 2014-03-04 15:06 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-04 15:06 - 2014-03-04 15:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-04 15:06 - 2014-03-04 15:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-04 15:06 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-03-04 14:55 - 2014-03-04 14:55 - 00000000 ____D () C:\WINDOWS\8A809006C25A4A3A9DAB94659BCDB107.TMP
2014-03-04 02:17 - 2014-03-04 02:17 - 00000000 ____D () C:\Users\Mert\Documents\Eden Games
2014-03-04 02:05 - 2014-03-13 22:02 - 00006246 _____ () C:\WINDOWS\setupact.log
2014-03-04 02:05 - 2014-03-04 02:05 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-03-04 02:04 - 2014-03-15 00:54 - 00018915 _____ () C:\WINDOWS\DirectX.log
2014-03-04 00:54 - 2014-03-04 00:54 - 00000000 ____D () C:\Users\Mert\AppData\Local\Sniper Elite Zombie Army
2014-03-04 00:22 - 2014-03-07 21:15 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\FEZ
2014-03-04 00:22 - 2014-03-03 20:55 - 00012005 _____ () C:\Users\Mert\AppData\Roaming\alsoft.ini
2014-03-04 00:17 - 2014-03-04 00:17 - 00000000 ____D () C:\Users\Mert\AppData\Local\i-Knyazev.ru
2014-03-03 21:03 - 2014-03-03 21:03 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
2014-03-03 20:56 - 2014-03-03 20:57 - 00000000 ____D () C:\Users\Mert\AppData\Local\Sniper Elite Zombie Army 2
2014-03-03 19:19 - 2014-03-03 19:19 - 00000000 ____D () C:\2-click run
2014-03-03 14:32 - 2014-03-03 14:32 - 00000000 ____D () C:\WINDOWS\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-03-01 01:20 - 2014-03-01 01:20 - 00000939 _____ () C:\Users\Public\Desktop\DS3 Tool.lnk
2014-02-28 16:19 - 2014-03-15 22:26 - 00000000 ____D () C:\Users\Mert\AppData\Local\HTC MediaHub
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\Documents\HTC
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\HTC
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Apple Computer
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Local\Apple Computer
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\.android
2014-02-28 16:18 - 2014-02-28 16:18 - 00002047 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-02-28 16:18 - 2014-02-28 16:18 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-02-28 16:18 - 2014-02-28 16:18 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-02-28 16:17 - 2014-02-28 16:17 - 00000000 ____D () C:\Users\Mert\AppData\Local\Downloaded Installations
2014-02-28 16:17 - 2014-02-28 16:17 - 00000000 ____D () C:\ProgramData\HTC
2014-02-27 17:21 - 2014-02-28 17:00 - 00000000 ____D () C:\Games
2014-02-27 16:15 - 2014-02-27 16:15 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-26 19:57 - 2014-02-26 19:57 - 00046136 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2014-02-23 20:47 - 2014-02-23 20:55 - 00000000 ____D () C:\Program Files (x86)\LSI
2014-02-23 17:15 - 2014-02-23 17:18 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\TeamViewer
2014-02-18 22:06 - 2014-02-18 22:06 - 00000000 ____D () C:\Users\Mert\Documents\Respawn
2014-02-18 16:13 - 2014-02-18 16:13 - 00001178 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-02-18 16:13 - 2014-02-18 16:13 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-02-18 16:08 - 2014-02-18 16:08 - 00000000 ____D () C:\Users\Mert\.jmc
2014-02-18 16:08 - 2014-02-18 16:08 - 00000000 ____D () C:\Users\Mert\.eclipse
2014-02-18 16:03 - 2014-02-18 16:03 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-02-18 16:03 - 2014-02-18 16:03 - 00000000 ____D () C:\ProgramData\Sun
2014-02-18 16:03 - 2014-02-18 16:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-17 16:33 - 2014-02-17 16:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NVIDIA Corporation
2014-02-17 15:54 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-02-17 15:54 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-02-17 15:54 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-02-17 15:54 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-02-17 15:54 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-02-17 15:54 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-02-17 15:54 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-02-17 15:54 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-02-17 15:54 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-02-17 15:54 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-02-17 15:54 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-02-17 15:54 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-02-17 15:54 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-02-17 15:54 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-02-17 15:54 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-02-17 15:54 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-02-17 15:54 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-02-17 15:54 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-02-17 15:54 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-02-17 15:54 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-02-17 15:54 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-02-17 15:54 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-02-17 15:54 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-02-17 15:54 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-02-17 15:54 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-02-17 15:54 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-02-17 15:54 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-02-17 15:54 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-02-17 15:54 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-02-17 15:54 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-02-17 15:54 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-02-17 15:54 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-02-17 15:53 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-02-17 15:53 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-02-17 15:53 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-02-17 15:53 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-02-17 15:53 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-02-17 15:53 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-02-17 15:53 - 2013-11-25 02:45 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-02-17 15:53 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-02-17 15:53 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-02-17 15:53 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-02-17 15:53 - 2013-11-23 08:13 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-02-17 15:53 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-02-17 15:53 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-02-17 15:53 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

==================== One Month Modified Files and Folders =======

2014-03-17 20:43 - 2014-03-17 20:31 - 00020798 _____ () C:\Users\Mert\Desktop\FRST.txt
2014-03-17 20:43 - 2014-03-17 18:05 - 00000000 ____D () C:\FRST
2014-03-17 20:31 - 2014-03-17 20:31 - 02157056 _____ (Farbar) C:\Users\Mert\Desktop\frst64.exe
2014-03-17 20:31 - 2014-01-25 18:15 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-17 20:31 - 2013-09-20 18:37 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Skype
2014-03-17 20:14 - 2013-09-19 18:06 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-17 20:12 - 2014-03-04 15:10 - 01881771 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-17 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-03-17 19:44 - 2013-09-19 17:53 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-03-17 18:30 - 2014-03-17 18:30 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-03-17 18:29 - 2014-03-17 18:29 - 00177752 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-03-17 18:29 - 2014-03-17 18:29 - 00008222 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-03-17 18:29 - 2014-03-17 18:29 - 00003232 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-03-17 18:29 - 2014-03-17 18:29 - 00002584 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\ProgramData\Norton
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-03-17 18:29 - 2014-03-17 18:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-03-17 18:29 - 2013-08-22 16:36 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-03-17 18:29 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-03-17 18:27 - 2014-03-17 18:27 - 60034512 ____N (Symantec Corporation) C:\Users\Mert\Downloads\NIS-ESD-21.1.1-GE.exe
2014-03-17 18:21 - 2014-03-17 18:21 - 00000000 ____D () C:\Users\Mert\Downloads\Windows 8.1 (multiple editions) (x64) - DVD (German)
2014-03-17 18:21 - 2014-03-17 18:00 - 00005490 _____ () C:\Users\Mert\Downloads\SecureDownloadManager.log
2014-03-17 18:20 - 2014-03-17 18:00 - 3628257039 _____ () C:\Users\Mert\Downloads\de_windows_8_1_x64_dvd_2707227.sdc
2014-03-17 18:13 - 2014-03-17 18:07 - 00051562 _____ () C:\Users\Mert\Downloads\Addition.txt
2014-03-17 18:13 - 2014-03-17 18:05 - 00090074 _____ () C:\Users\Mert\Downloads\FRST.txt
2014-03-17 18:09 - 2013-09-19 17:00 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-17 18:09 - 2013-08-23 00:24 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-03-17 18:09 - 2013-08-23 00:24 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-03-17 18:00 - 2014-03-17 18:00 - 00003165 _____ () C:\Users\Mert\Desktop\Secure Download Manager.lnk
2014-03-17 18:00 - 2014-03-17 18:00 - 00000183 _____ () C:\Users\Mert\Downloads\100219577286.sdx
2014-03-17 17:59 - 2014-03-17 17:59 - 00720896 _____ () C:\Users\Mert\Downloads\SDM_DE.msi
2014-03-17 16:33 - 2013-09-19 17:13 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-626050035-2673047926-1771085792-1000
2014-03-17 16:27 - 2014-03-11 14:38 - 00003018 _____ () C:\WINDOWS\System32\Tasks\EVGAPrecision
2014-03-17 16:27 - 2014-03-06 16:23 - 00000000 ___RD () C:\Users\Mert\Dropbox
2014-03-17 16:27 - 2014-03-06 16:21 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Dropbox
2014-03-17 16:27 - 2014-01-25 18:15 - 00001118 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-17 16:27 - 2013-10-30 18:53 - 00000000 __RDO () C:\Users\Mert\SkyDrive
2014-03-17 16:27 - 2013-09-19 17:52 - 00000000 ____D () C:\Users\Mert\AppData\Local\Adobe
2014-03-16 19:51 - 2014-03-16 19:51 - 00030838 _____ () C:\Users\Mert\Downloads\Handykosten.zip
2014-03-16 19:37 - 2014-03-16 19:37 - 00031142 _____ () C:\Users\Mert\Downloads\Feinstaubplaketten.zip
2014-03-16 17:52 - 2014-03-16 21:27 - 00000000 ____D () C:\Users\Mert\Downloads\Handykosten
2014-03-16 15:53 - 2014-03-16 15:53 - 00001454 _____ () C:\Users\Mert\Desktop\notepad++ - Verknüpfung.lnk
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Notepad++
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-03-16 15:52 - 2014-03-16 15:52 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-03-16 15:51 - 2014-03-16 15:51 - 07624808 _____ () C:\Users\Mert\Downloads\npp.6.5.5.Installer.exe
2014-03-15 22:26 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Local\HTC MediaHub
2014-03-15 22:22 - 2013-09-19 17:14 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-15 22:22 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-03-15 22:21 - 2014-03-07 13:22 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-15 22:21 - 2014-03-07 13:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-15 22:21 - 2013-08-22 15:44 - 05050008 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-15 17:52 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-03-15 17:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-15 17:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-15 17:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-15 17:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-15 15:03 - 2013-09-30 16:29 - 00000000 ____D () C:\Users\Mert\Documents\NetBeansProjects
2014-03-15 14:53 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-03-15 01:57 - 2013-07-13 14:35 - 00000000 ___RD () C:\Users\Mert\Desktop\Games
2014-03-15 00:54 - 2014-03-04 02:04 - 00018915 _____ () C:\WINDOWS\DirectX.log
2014-03-14 23:53 - 2013-09-19 18:52 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-14 23:27 - 2013-10-06 15:14 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\TS3Client
2014-03-14 23:26 - 2014-03-12 20:17 - 00000000 ____D () C:\Users\Mert\Downloads\authlib
2014-03-14 23:26 - 2014-03-12 20:17 - 00000000 ____D () C:\Users\Mert\Desktop\trb
2014-03-14 23:24 - 2013-09-19 18:04 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\vlc
2014-03-13 22:02 - 2014-03-04 02:05 - 00006246 _____ () C:\WINDOWS\setupact.log
2014-03-13 17:11 - 2014-03-13 17:08 - 51204407 _____ () C:\Users\Mert\Downloads\3783.zip
2014-03-13 14:09 - 2014-03-13 14:09 - 00297328 _____ () C:\WINDOWS\Minidump\031314-20312-01.dmp
2014-03-13 14:09 - 2014-03-05 12:17 - 777257131 _____ () C:\WINDOWS\MEMORY.DMP
2014-03-13 14:09 - 2013-09-26 17:42 - 00000000 ____D () C:\WINDOWS\Minidump
2014-03-12 20:24 - 2013-11-14 16:40 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\.minecraft
2014-03-12 20:23 - 2014-03-12 20:19 - 00000000 ____D () C:\Users\Mert\Downloads\Unleashed
2014-03-12 20:08 - 2014-03-12 20:07 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\ftblauncher
2014-03-11 18:44 - 2013-09-19 17:53 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-03-11 17:41 - 2013-09-19 17:13 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-09 19:12 - 2013-10-19 10:54 - 00000000 ____D () C:\Users\Mert\AppData\Local\LogMeIn Hamachi
2014-03-08 01:22 - 2014-03-08 01:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-03-07 21:15 - 2014-03-04 00:22 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\FEZ
2014-03-07 16:52 - 2014-03-07 16:44 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\.technic
2014-03-07 16:14 - 2013-12-27 14:45 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-07 16:14 - 2013-10-19 11:05 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Tunngle
2014-03-07 15:23 - 2014-03-07 15:23 - 00000000 _____ () C:\WINDOWS\SysWOW64\Access.dat
2014-03-07 15:17 - 2014-03-07 15:17 - 00014294 _____ () C:\WINDOWS\PFRO.log
2014-03-07 13:17 - 2014-03-07 13:12 - 00000000 ____D () C:\Users\Default\Documents\Visual Studio 2012
2014-03-07 13:17 - 2014-03-07 13:12 - 00000000 ____D () C:\Users\Default User\Documents\Visual Studio 2012
2014-03-07 13:11 - 2013-09-21 00:46 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-06 20:45 - 2014-03-06 20:43 - 00000022 _____ () C:\Users\Mert\Desktop\Neues Textdokument (2).txt
2014-03-06 19:06 - 2014-03-06 18:55 - 00069505 _____ () C:\Users\Mert\Desktop\özlemasdasd - Kopie.wlmp
2014-03-06 18:56 - 2014-03-06 13:26 - 00000000 ____D () C:\Users\Mert\Desktop\Semra
2014-03-06 18:54 - 2014-03-06 18:50 - 00068931 _____ () C:\Users\Mert\Desktop\özlemasdasd.wlmp
2014-03-06 18:47 - 2014-03-06 18:47 - 04379336 _____ () C:\Users\Mert\Desktop\20th Century Fox Intro Full-HD 1080p.avi
2014-03-06 18:43 - 2014-03-06 18:12 - 00068693 _____ () C:\Users\Mert\Desktop\özlem.wlmp
2014-03-06 18:08 - 2014-03-06 18:10 - 39942046 ____N () C:\Users\Mert\Desktop\20140306_180747.mp4
2014-03-06 16:41 - 2013-07-14 23:52 - 00000000 ____D () C:\Users\Mert\Desktop\Bilder
2014-03-06 16:23 - 2014-03-06 16:23 - 00001050 _____ () C:\Users\Mert\Desktop\Dropbox.lnk
2014-03-06 16:23 - 2014-03-06 16:23 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\DropboxMaster
2014-03-06 16:23 - 2013-09-19 17:08 - 00000000 ___RD () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-06 16:23 - 2013-09-19 16:54 - 00000000 ____D () C:\Users\Mert
2014-03-06 16:22 - 2014-03-06 16:22 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-03-06 15:42 - 2013-11-02 18:46 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-03-06 15:19 - 2014-03-06 15:19 - 00000424 _____ () C:\Users\Mert\Desktop\Dieser PC - Verknüpfung.lnk
2014-03-06 13:35 - 2013-09-28 15:17 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\DVDVideoSoft
2014-03-06 13:34 - 2014-03-06 13:34 - 00001452 _____ () C:\Users\Public\Desktop\Free YouTube Download.lnk
2014-03-06 13:34 - 2013-11-16 13:05 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-03-06 13:25 - 2014-03-06 13:08 - 00000000 ____D () C:\Users\Mert\AppData\Local\Windows Live
2014-03-06 13:21 - 2014-03-06 13:18 - 00000000 ____D () C:\Users\Mert\Desktop\Random
2014-03-06 13:11 - 2014-03-06 13:11 - 00000000 ____D () C:\WINDOWS\de
2014-03-06 13:11 - 2013-09-21 01:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-03-06 13:10 - 2014-03-06 13:10 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-03-06 13:10 - 2014-03-06 13:10 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-03-06 13:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-03-05 14:16 - 2013-10-04 23:18 - 00000000 ____D () C:\ProgramData\Origin
2014-03-05 14:14 - 2013-10-10 17:17 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-03-05 12:18 - 2014-03-05 12:17 - 00305624 _____ () C:\WINDOWS\Minidump\030514-27093-01.dmp
2014-03-05 00:46 - 2014-03-05 00:46 - 00000000 ____D () C:\Users\Mert\Documents\SavedGames
2014-03-04 23:53 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-03-04 23:53 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-04 22:48 - 2014-03-04 22:48 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\StarseedPilgrim
2014-03-04 15:35 - 2014-03-11 17:38 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-03-04 15:35 - 2014-03-11 17:38 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00832936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00353504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00174296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-03-04 15:35 - 2014-03-11 17:38 - 00148016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-03-04 15:35 - 2014-03-04 15:10 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-03-04 15:35 - 2013-11-30 00:15 - 31474976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 18302384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 14709720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 03093280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 02715264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 00947808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-03-04 15:35 - 2013-06-29 05:02 - 00024544 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-03-04 15:25 - 2014-03-04 15:25 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-03-04 15:10 - 2014-03-04 15:10 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Malwarebytes
2014-03-04 15:09 - 2014-03-04 15:09 - 00000000 ____D () C:\NVIDIA
2014-03-04 15:06 - 2014-03-04 15:06 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-04 15:06 - 2014-03-04 15:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-04 15:06 - 2014-03-04 15:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-04 14:55 - 2014-03-04 14:55 - 00000000 ____D () C:\WINDOWS\8A809006C25A4A3A9DAB94659BCDB107.TMP
2014-03-04 14:06 - 2013-09-19 17:13 - 06714312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-03-04 14:06 - 2013-09-19 17:13 - 03497816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-03-04 14:05 - 2013-09-19 17:13 - 03649185 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-03-04 14:05 - 2013-09-19 17:13 - 02558808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-03-04 14:05 - 2013-09-19 17:13 - 00922968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-03-04 14:05 - 2013-09-19 17:13 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-03-04 14:05 - 2013-09-19 17:13 - 00064968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-03-04 12:32 - 2014-03-11 17:41 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2014-03-04 02:44 - 2013-10-05 00:42 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2014-03-04 02:44 - 2013-10-05 00:42 - 00214392 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2014-03-04 02:40 - 2013-10-04 23:50 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-03-04 02:17 - 2014-03-04 02:17 - 00000000 ____D () C:\Users\Mert\Documents\Eden Games
2014-03-04 02:12 - 2013-10-08 21:30 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Azureus
2014-03-04 02:12 - 2013-09-24 14:01 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\DAEMON Tools Lite
2014-03-04 02:12 - 2013-09-19 21:00 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-03-04 02:05 - 2014-03-04 02:05 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-03-04 00:54 - 2014-03-04 00:54 - 00000000 ____D () C:\Users\Mert\AppData\Local\Sniper Elite Zombie Army
2014-03-04 00:17 - 2014-03-04 00:17 - 00000000 ____D () C:\Users\Mert\AppData\Local\i-Knyazev.ru
2014-03-03 21:03 - 2014-03-03 21:03 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
2014-03-03 20:57 - 2014-03-03 20:56 - 00000000 ____D () C:\Users\Mert\AppData\Local\Sniper Elite Zombie Army 2
2014-03-03 20:55 - 2014-03-04 00:22 - 00012005 _____ () C:\Users\Mert\AppData\Roaming\alsoft.ini
2014-03-03 19:19 - 2014-03-03 19:19 - 00000000 ____D () C:\2-click run
2014-03-03 14:32 - 2014-03-03 14:32 - 00000000 ____D () C:\WINDOWS\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-03-02 21:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-03-01 07:05 - 2014-03-14 16:15 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-01 05:58 - 2014-03-14 16:15 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-01 05:30 - 2014-03-14 16:15 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-01 05:17 - 2014-03-14 16:15 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-01 04:54 - 2014-03-14 16:15 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-01 04:47 - 2014-03-14 16:15 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-01 04:42 - 2014-03-14 16:15 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-01 04:18 - 2014-03-14 16:15 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-01 04:14 - 2014-03-14 16:15 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-14 16:15 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-01 04:03 - 2014-03-14 16:15 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-01 03:57 - 2014-03-14 16:15 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-14 16:15 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-14 16:15 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-14 16:15 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-14 16:15 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-14 16:15 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-01 01:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-03-01 01:20 - 2014-03-01 01:20 - 00000939 _____ () C:\Users\Public\Desktop\DS3 Tool.lnk
2014-03-01 01:20 - 2014-01-12 20:40 - 00000000 ____D () C:\Program Files\MotioninJoy
2014-02-28 17:00 - 2014-02-27 17:21 - 00000000 ____D () C:\Games
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\Documents\HTC
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\HTC
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Apple Computer
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\AppData\Local\Apple Computer
2014-02-28 16:19 - 2014-02-28 16:19 - 00000000 ____D () C:\Users\Mert\.android
2014-02-28 16:18 - 2014-02-28 16:18 - 00002047 _____ () C:\Users\Public\Desktop\HTC Sync Manager.lnk
2014-02-28 16:18 - 2014-02-28 16:18 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications
2014-02-28 16:18 - 2014-02-28 16:18 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-02-28 16:17 - 2014-02-28 16:17 - 00000000 ____D () C:\Users\Mert\AppData\Local\Downloaded Installations
2014-02-28 16:17 - 2014-02-28 16:17 - 00000000 ____D () C:\ProgramData\HTC
2014-02-27 16:15 - 2014-02-27 16:15 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-27 16:15 - 2013-12-29 14:13 - 00000938 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-02-26 19:57 - 2014-02-26 19:57 - 00046136 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2014-02-25 13:14 - 2013-12-15 15:44 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-02-23 20:55 - 2014-02-23 20:47 - 00000000 ____D () C:\Program Files (x86)\LSI
2014-02-23 17:18 - 2014-02-23 17:15 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\TeamViewer
2014-02-23 13:20 - 2013-09-30 17:57 - 00000000 ____D () C:\Users\Mert\AppData\Local\Eclipse
2014-02-23 13:20 - 2013-09-30 17:53 - 00000000 ____D () C:\Program Files (x86)\eclipse
2014-02-22 14:03 - 2013-11-13 20:27 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-02-22 13:59 - 2013-11-13 20:27 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-22 13:40 - 2014-01-30 16:14 - 00001571 _____ () C:\Users\Mert\Desktop\Adobe Illustrator CC (64 Bit).lnk
2014-02-21 23:43 - 2013-09-19 17:08 - 00000000 ___RD () C:\Users\Mert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-21 23:38 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-02-21 23:38 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-02-21 23:38 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-02-18 22:06 - 2014-02-18 22:06 - 00000000 ____D () C:\Users\Mert\Documents\Respawn
2014-02-18 16:13 - 2014-02-18 16:13 - 00001178 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-02-18 16:13 - 2014-02-18 16:13 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-02-18 16:08 - 2014-02-18 16:08 - 00000000 ____D () C:\Users\Mert\.jmc
2014-02-18 16:08 - 2014-02-18 16:08 - 00000000 ____D () C:\Users\Mert\.eclipse
2014-02-18 16:03 - 2014-02-18 16:03 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-02-18 16:03 - 2014-02-18 16:03 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-02-18 16:03 - 2014-02-18 16:03 - 00000000 ____D () C:\ProgramData\Sun
2014-02-18 16:03 - 2014-02-18 16:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-18 16:03 - 2013-09-30 16:25 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-17 17:58 - 2013-10-23 11:39 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D5A2DCBE-CDB1-4152-945B-2F24EACB8585}
2014-02-17 16:33 - 2014-02-17 16:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NVIDIA Corporation
2014-02-17 16:07 - 2013-10-09 14:26 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-626050035-2673047926-1771085792-1005
2014-02-16 14:36 - 2014-03-16 19:38 - 00000000 ____D () C:\Users\Mert\Downloads\Feinstaubplaketten
2014-02-16 02:27 - 2013-10-08 15:07 - 00000000 ____D () C:\Users\Mert\AppData\Roaming\Spotify
2014-02-16 01:22 - 2013-10-08 15:07 - 00000000 ____D () C:\Users\Mert\AppData\Local\Spotify

Some content of TEMP:
====================
C:\Users\Mert\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwm1un4.dll
C:\Users\Mert\AppData\Local\Temp\i4jdel0.exe
C:\Users\Mert\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Mert\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Mert\AppData\Local\Temp\nvStInst.exe
C:\Users\Mert\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-03-14 16:15] - [2014-01-31 17:15] - 0311640 ____A (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02



LastRegBack: 2014-03-10 17:33

==================== End Of Log ============================

--- --- ---

AXiooM · 17.03.2014, 20:48

addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Mert at 2014-03-17 20:43:24
Running from C:\Users\Mert\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

 Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
 Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1210 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1210 - Adobe Systems Incorporated) Hidden
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.3.0.322 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Illustrator CC (HKLM-x32\...\{F2321021-08A2-44D6-B1DF-BDB415F23EC3}) (Version: 17.0 - Adobe Systems Incorporated)
Adobe InDesign CC (HKLM-x32\...\{BC448016-6F11-1014-B0EA-97CEE6E26CB6}) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Reader 8 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A80000000002}) (Version: 8.0.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.0 - Adobe Systems Incorporated)
Adobe® Content Viewer (x32 Version: 3.4.0 - Adobe Systems Incorporated) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5DDB9EF7-1BC0-C9C1-9829-6B9CF68AC357}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
Antichamber (HKLM\...\UDK-dd23d8e3-7fc0-4a59-9196-d3a6c50f5c5a) (Version:  - Epic Games, Inc.)
Antichamber (HKLM-x32\...\Steam App 219890) (Version:  - Alexander Bruce)
Assassins Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
Autodesk 3ds Max 2014 (HKLM\...\Autodesk 3ds Max 2014) (Version: 16.0.420.0 - Autodesk)
Autodesk 3ds Max 2014 (Version: 16.0.420.0 - Autodesk) Hidden
Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.32.600 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.32.600 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2014 (HKLM-x32\...\{A0633D4E-5AF2-4E3E-A70A-FE9C2BD8A958}) (Version: 4.0.32.600 - Autodesk)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2006 - Avast Software)
Batman™: Arkham Origins (HKLM-x32\...\Steam App 209000) (Version:  - WB Games Montreal)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.1.0.1 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
Beatbuddy: Tale of the Guardians (HKLM-x32\...\Steam App 231040) (Version:  - Threaks)
Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Castle Story (HKLM-x32\...\Steam App 227860) (Version:  - Sauropod Studio)
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
CINEMA 4D R14 (HKLM-x32\...\CINEMA 4D R14) (Version:  - )
Click Bot (HKLM-x32\...\Click Bot) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.6.2 - Dropbox, Inc.)
Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)
Dust: An Elysian Tail (HKLM-x32\...\Steam App 236090) (Version:  - Humble Hearts LLC)
Erforderliche Komponenten für SSDT  (HKLM-x32\...\{70D065C3-77E5-45E9-A75C-EEB2E84EA869}) (Version: 11.0.2100.60 - Microsoft Corporation)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
EVGA Precision X 4.2.1 (HKLM-x32\...\PrecisionX) (Version: 4.2.1 - EVGA Corporation)
FEZ (HKLM-x32\...\Steam App 224760) (Version:  - Polytron Corporation)
Fotogalerie (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Free YouTube Download version 3.2.29.303 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.29.303 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Garry)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GhostX Ultimate version 2.03 (HKLM-x32\...\{A0E16CFF-FAAD-488F-97F9-CEF86C5A7808}_is1) (Version: 2.03 - GameKiss)
GKLauncher version 1.1.0.4 (HKLM-x32\...\{961346DF-FE43-4392-99FC-47B1F5A882C3}_is1) (Version: 1.1.0.4 - GameKiss)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Hammerwatch (HKLM-x32\...\Steam App 239070) (Version:  - )
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version:  - Dennaton Games)
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.10.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{368E4EF8-E840-40EE-A224-50B8D1DC2B12}) (Version: 2.4.36.0 - HTC)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 40 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170400}) (Version: 1.7.0.400 - Oracle)
JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden
JavaScript Tooling (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Killing Floor (HKLM-x32\...\Steam App 1250) (Version:  - Tripwire Interactive)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)
LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.173 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.173 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 3 - DEU (HKLM-x32\...\{07AC2D83-E795-4AD5-970D-B9BD14A1E411}) (Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 3 (HKLM-x32\...\{DCDEC776-BADD-48B9-8F9A-DFF513C3D7FA}) (Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages - DEU (HKLM-x32\...\{93EEC4E9-EEFE-4027-ACD3-6E8C1D085975}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20715.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM-x32\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.60308 - Microsoft Corporation) Hidden
Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.60308 - Microsoft Corporation) Hidden
Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60130.00 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden
Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK - Deutsch (HKLM-x32\...\{8EA792A5-38AA-4F0E-8DFE-D1BAF1145431}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK - DEU (HKLM-x32\...\{F351AA2C-723C-4CFE-A7CB-8E43AB164F7F}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{AD49BD4B-6CEE-4EA2-B53E-8EB0606F1B11}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{EF18EF0F-96D3-4A6B-9600-2197F1720A15}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{6B7B7E62-9F56-4C87-8664-0E20F2CAB03B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{D4DA7C91-A59F-4C72-BAC4-DF7C76AB1CB8}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{8E4BA1E5-54E8-41F0-919B-CD875B83CFCE}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{55FABD1D-8BE6-4A1A-958D-52B15F1DFEF0}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{13C9CD03-A5FE-4F50-AC8A-17B77C38CC52}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{28C7A4BB-3966-4373-8376-C11F38290630}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (HKLM-x32\...\{F6F1EE45-97E9-48A3-94B2-044B0A3C08D3}) (Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (HKLM-x32\...\{CEEDB2C4-46BE-4340-BAB9-F30110D9BBB8}) (Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{D434E072-F482-4F52-AB97-7B19DD5DAEB5}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{485F4AC6-F79E-4482-A0D2-EDF0CCE1E124}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012  x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40303 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.40303 - Microsoft Corporation)
Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.60315 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 (HKLM-x32\...\{2e8b5d3e-04b1-40c7-ade4-487d5357ba8c}) (Version: 11.0.50727.26 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Web Deploy 3.0 (HKLM\...\{AA72C306-30BE-4BB1-9E42-59552BAD2CDF}) (Version: 3.1236.1631 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - DEU (HKLM-x32\...\{86756584-C41A-4CA3-B42D-4768C7720F56}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 - deu (x32 Version: 1.2.40308.0 - Microsoft Corporation) Hidden
Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 (x32 Version: 1.2.40308.0 - Microsoft Corporation) Hidden
Microsoft Web Platform Installer 4.0 (HKLM\...\{E2B8249D-895C-4685-8C83-00F3B1A13028}) (Version: 4.0.1622 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2012 (HKLM-x32\...\{4C0B27C3-3E8F-4BD2-80FF-6E9E48EBD6D8}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (HKLM\...\{64A5D39C-95CD-4B8B-B2FA-6C713133B57F}) (Version: 11.0.2100.60 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version:  - Pocketwatch Games)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
My Game Long Name (HKLM\...\UDK-e345fe1b-d560-46ed-9775-70bf2f9f0071) (Version:  - Epic Games, Inc.)
NetBeans IDE 7.3.1 (HKLM\...\nbi-nb-base-7.3.1.0.201306052037) (Version: 7.3.1 - NetBeans.org)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.1.1.7 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.5 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Performance (HKLM-x32\...\InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}) (Version: 1.00.0000 - NVIDIA Corporation)
NVIDIA Performance (x32 Version: 1.00.0000 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA System Monitor (HKLM-x32\...\InstallShield_{E9CFBE78-ED91-4FCF-9E6F-210E477E527D}) (Version: 1.00.0000 - NVIDIA Corporation)
NVIDIA System Monitor (x32 Version: 1.00.0000 - NVIDIA Corporation) Hidden
NVIDIA System Update (HKLM-x32\...\InstallShield_{6F69C969-2942-4E7B-B594-75B37664B8BA}) (Version: 1.00.0000 - NVIDIA Corporation)
NVIDIA System Update (x32 Version: 1.00.0000 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Opera Packages (HKCU\...\Opera Packages) (Version:  - ) <==== ATTENTION
Opera Stable 19.0.1326.63 (HKLM-x32\...\Opera 19.0.1326.63) (Version: 19.0.1326.63 - Opera Software ASA)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version:  - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.3.7.2735 - Electronic Arts, Inc.)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Photo Gallery (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Rayman 3 (HKLM-x32\...\Rayman 3_is1) (Version:  - GOG.com)
Rayman Origins (HKLM-x32\...\{DE491AB9-1D47-4FED-A8F5-4D4325B2EB4B}) (Version: 1.02 - Ubisoft)
Razer Surround (HKLM-x32\...\Razer Surround) (Version: 1.05.00 - Razer Inc.)
Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.16.6 - Razer Inc.)
Saints Row IV (HKLM-x32\...\U2FpbnRzUm93SVY=_is1) (Version: 1 - )
Secure Download Manager (HKLM-x32\...\{C58626D6-7EBD-460D-8B6C-75B3C3464879}) (Version: 3.1.60 - Kivuto Solutions Inc.)
SHIELD Streaming (Version: 1.7.306 - NVIDIA Corporation) Hidden
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 1.0.0.0 - Electronic Arts)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Sniper Elite: Zombie Army (HKLM-x32\...\Steam App 235700) (Version:  - Rebellion)
Sniper Elite: Zombie Army 2 (HKLM-x32\...\Steam App 247930) (Version:  - Rebellion)
Spotify (HKCU\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB)
Starseed Pilgrim (HKLM-x32\...\Steam App 230980) (Version:  - Droqen)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.26297 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
Test Drive Unlimited 2 (HKLM-x32\...\Test Drive Unlimited 2_is1) (Version:  - Atari)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version:  - Edmund McMillen and Florian Himsl)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
Train Simulator 2014 (Steam Edition) (HKLM-x32\...\Train Simulator 2014 (Steam Edition)1.0) (Version: 1.0 - Friends in War)
Trine 2 (HKLM-x32\...\Steam App 35720) (Version:  - Frozenbyte)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version:  - Tunngle.net GmbH)
Uninstall LSI (HKLM-x32\...\{62B332E9-239D-4692-BDE2-0CC1CF2833DA}_is1) (Version: 3.0b - Aequus Gaming Ltd.)
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for Microsoft Visual Studio 2012 (KB2781514) (HKLM-x32\...\{56ef8912-352f-4fab-9c73-6f1c92a7127f}) (Version: 11.0.51219 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.0 - Ubisoft)
Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden
Visual Studio 2012 Update 2 (KB2707250) (HKLM-x32\...\{2fba7dd0-b8eb-4185-aea3-e6910d3f8102}) (Version: 11.0.60315 - Microsoft Corporation)
Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9201.20602 - Microsoft Corporation) Hidden
VLC media player 2.0.7 (HKLM\...\VLC media player) (Version: 2.0.7 - VideoLAN)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.1.0.0 - Azureus Software, Inc.)
VVVVVV (HKLM-x32\...\Steam App 70300) (Version:  - Terry Cavanagh)
WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)
Windows App Certification Kit Native Components (Version: 8.59.29736 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (x32 Version: 8.59.29750 - Microsoft Corporation) Hidden
Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601 - Microsoft) Hidden
Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601 - Microsoft) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (Version: 11.0.51106 - Microsoft Corporation) Hidden
Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)

==================== Restore Points  =========================

13-03-2014 15:51:43 Geplanter Prüfpunkt
14-03-2014 23:53:39 DirectX wurde installiert
17-03-2014 16:59:47 Secure Download Manager wird installiert

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {126F33EA-2BB2-49E7-8AD7-1B5B27040E8C} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {3227FE76-D4B0-4B8C-8B3F-41F8C4D49BF0} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {36CC6217-4A5A-415B-BEFF-26A85C2D4DDB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-25] (Google Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {47E7439A-1D75-434B-8F66-CC4AA9309D69} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-25] (Google Inc.)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4E4FACE1-2744-44BE-B42D-90DAD850F285} - System32\Tasks\EVGAPrecision => C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe [2013-07-18] ()
Task: {4EA8F84A-6240-4D39-A49C-6899EC244297} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION
Task: {5CB25B36-EBF3-48BF-8466-82AA5C0FB202} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DBCBAFC-6526-48C3-9ABF-9D6C1A1C9584} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-10-29] (AVAST Software)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {83265885-BA9F-4D5B-A44A-4C631C931575} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.1.7\WSCStub.exe [2014-02-12] (Symantec Corporation)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D773913E-D66D-4B48-A2EC-041162B87FB6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-02-22] (Microsoft Corporation)
Task: {D7CFCAE2-66AC-432E-80E6-68093FBAE11F} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-09-15 05:19 - 2011-09-15 05:19 - 00086016 _____ () C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-12-05 20:33 - 2013-12-05 20:33 - 00076888 _____ () C:\WINDOWS\system32\PnkBstrA.exe
2013-09-19 17:13 - 2014-03-04 14:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-12-13 12:20 - 2013-12-13 12:20 - 03359600 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2013-12-13 12:20 - 2013-12-13 12:20 - 04696432 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2014-02-27 16:21 - 2014-02-27 16:22 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\ErrorReporting.dll
2014-02-25 13:14 - 2014-02-10 10:40 - 01378144 _____ () C:\Program Files (x86)\Opera\19.0.1326.63\opera_crashreporter.exe
2014-03-17 17:10 - 2014-03-17 10:20 - 02186752 _____ () C:\Program Files\AVAST Software\Avast\defs\14031700\algo.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-01-26 11:54 - 2014-01-26 11:54 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-01-26 11:55 - 2014-01-26 11:55 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-01-26 11:57 - 2014-01-26 11:57 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2013-10-29 13:12 - 2013-10-29 13:12 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-19 10:49 - 2013-12-19 10:49 - 32733080 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libcef.dll
2014-03-17 16:27 - 2014-03-17 16:27 - 00041984 _____ () c:\users\mert\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwm1un4.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Mert\AppData\Roaming\Dropbox\bin\libcef.dll
2014-02-25 13:14 - 2014-02-10 10:40 - 00907616 _____ () C:\Program Files (x86)\Opera\19.0.1326.63\libglesv2.dll
2014-02-25 13:14 - 2014-02-10 10:40 - 00108896 _____ () C:\Program Files (x86)\Opera\19.0.1326.63\libegl.dll
2014-02-25 13:14 - 2014-02-10 10:40 - 00890208 _____ () C:\Program Files (x86)\Opera\19.0.1326.63\ffmpegsumo.dll
2014-01-09 18:45 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-01-09 18:45 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files (x86)\Steam\libavutil-52.dll
2013-08-21 13:18 - 2014-02-11 03:34 - 00751616 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-09-06 11:55 - 2014-02-25 22:57 - 01135296 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-08-07 10:31 - 2014-01-11 00:33 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Mert\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Mert\SkyDrive (2).old:ms-properties
AlternateDataStreams: C:\Users\Mert\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/17/2014 08:13:39 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/17/2014 08:12:55 PM) (Source: Application Hang) (User: )
Description: Programm Steam.exe, Version 2.13.4.49 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fec

Startzeit: 01cf41fb41526e05

Endzeit: 328

Anwendungspfad: C:\Program Files (x86)\Steam\Steam.exe

Berichts-ID: 0e681c2e-ae08-11e3-82a7-60a44c56c0d0

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (03/17/2014 05:59:55 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (03/17/2014 05:09:25 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/16/2014 09:27:23 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/16/2014 01:30:49 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/15/2014 10:32:23 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (03/15/2014 05:51:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: KING-PC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/15/2014 05:51:26 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: KING-PC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/15/2014 05:44:30 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall


System errors:
=============
Error: (03/15/2014 05:51:21 PM) (Source: DCOM) (User: KING-PC)
Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4

Error: (03/15/2014 05:51:21 PM) (Source: DCOM) (User: KING-PC)
Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1

Error: (03/14/2014 04:08:53 PM) (Source: Microsoft-Windows-NDIS) (User: NT-AUTORITÄT)
Description: Für den Miniport "HTC Remote NDIS based Device, {64D518A6-B367-45B7-8641-090B739FB875}" ist das Ereignis "74" aufgetreten.

Error: (03/13/2014 02:09:41 PM) (Source: BugCheck) (User: )
Description: 0x00000133 (0x0000000000000000, 0x0000000000000501, 0x0000000000000500, 0x0000000000000000)C:\WINDOWS\MEMORY.DMP031314-20312-01

Error: (03/13/2014 02:09:40 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎12.‎03.‎2014 um 21:47:32 unerwartet heruntergefahren.

Error: (03/10/2014 10:10:26 PM) (Source: DCOM) (User: KING-PC)
Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1

Error: (03/10/2014 10:10:26 PM) (Source: DCOM) (User: KING-PC)
Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4

Error: (03/08/2014 00:41:36 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎08.‎03.‎2014 um 02:09:41 unerwartet heruntergefahren.

Error: (03/08/2014 00:41:11 PM) (Source: Microsoft-Windows-Kernel-Boot) (User: NT-AUTORITÄT)
Description: 32212256845574901911244184

Error: (03/07/2014 03:17:43 PM) (Source: Microsoft-Windows-Kernel-Boot) (User: NT-AUTORITÄT)
Description: 32212256845610842197585480


Microsoft Office Sessions:
=========================
Error: (03/17/2014 08:13:39 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/17/2014 08:12:55 PM) (Source: Application Hang)(User: )
Description: Steam.exe2.13.4.49fec01cf41fb41526e05328C:\Program Files (x86)\Steam\Steam.exe0e681c2e-ae08-11e3-82a7-60a44c56c0d0

Error: (03/17/2014 05:59:55 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (03/17/2014 05:09:25 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/16/2014 09:27:23 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/16/2014 01:30:49 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/15/2014 10:32:23 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (03/15/2014 05:51:27 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: KING-PC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141

Error: (03/15/2014 05:51:26 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: KING-PC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927141

Error: (03/15/2014 05:44:30 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall


==================== Memory info =========================== 

Percentage of memory in use: 40%
Total physical RAM: 8092.98 MB
Available physical RAM: 4840.14 MB
Total Pagefile: 16284.98 MB
Available Pagefile: 12729.57 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:562.01 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: D8B43917)

Partition: GPT Partition Type.

==================== End Of Log ============================

cosinus · 17.03.2014, 20:54

Zitat:

AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

Sowas geht garnicht. Entweder oder aber nicht beide auf einmal.
Schmeiß Norton runter.
Hat Avast noch nie etwas gefunden?

AXiooM · 17.03.2014, 21:03

nein eigentlich nicht. under log von avast ist dank CCleaner weg

cosinus · 17.03.2014, 21:06

Hast du Norton jetzt runtergeschmissen oder nicht

AXiooM · 18.03.2014, 15:00

Ja habe ich. Ich hab meinen PC neu gestartet etc. und er funktioniert auch . aber ich bin immer noch nicht sicher ob ich einen Trojaner hab oder nicht :/

cosinus · 18.03.2014, 15:03

Dann bitte jetzt Combofix ausführen:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

AXiooM · 18.03.2014, 15:09

habe alles ausgeschaltet was Schutz bietet und gestartet :

Combofix is not meant to run in "compatiblity Mode". The program shall now exit.

was soll ich machen?

cosinus · 18.03.2014, 15:11

Ach du hast ja Win8.1, CF läuft da noch nicht

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

17.03.2014, 20:09	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Nicht sicher ob ich einen gvu trojaner habe Abwarten und Log posten wenn es Funde gibt. Falls es davor Funde mit Norton oder anderen Programmen gab auch davon die Logs posten __________________ Logfiles bitte immer in CODE-Tags posten

17.03.2014, 20:41	#6
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Nicht sicher ob ich einen gvu trojaner habe Was ist mit anderen bisherigen Funden? Außerdem fehlt das andere FRST Log __________________ --> Nicht sicher ob ich einen gvu trojaner habe

17.03.2014, 21:06	#11
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Nicht sicher ob ich einen gvu trojaner habe Hast du Norton jetzt runtergeschmissen oder nicht __________________ Logfiles bitte immer in CODE-Tags posten

Nicht sicher ob ich einen gvu trojaner habe

Plagegeister aller Art und deren Bekämpfung: Nicht sicher ob ich einen gvu trojaner habe