Avast durch Gruppenrichtlinie blockiert.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Jackstar1 (administrator) on JACKSTAR1-PC on 04-04-2014 15:52:43
Running from C:\Users\Jackstar1\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-02] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-4007531689-885810993-1597210648-1001\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\system32\Macromed\Flash\FlashUtil64_11_5_502_135_ActiveX.exe -update activex

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC0C69FC7BFCCCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\searchplugins\firefox-add-ons.xml
FF Extension: No Name - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\staged [2014-02-01]
FF Extension: Flagfox - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2013-12-24]
FF Extension: Amazon.de ContextMenu - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\jid0-ZhRgYU6C3lWFbHDAPlI5fMGzHwc@jetpack.xpi [2013-11-03]
FF Extension: Noia 4 Theme Manager - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\Noia4Options@ArisT2.xpi [2013-11-03]
FF Extension: Tab Scope - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\tabscope@xuldev.org.xpi [2013-11-03]
FF Extension: Quick Translator - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\{5C655500-E712-41e7-9349-CE462F844B19}.xpi [2013-11-03]
FF Extension: CoolPreviews - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}.xpi [2013-11-03]
FF Extension: Download Statusbar - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2013-11-03]
FF Extension: Noia 4 - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\{faf13420-5e24-11e0-80e3-0800200c9a66}.xpi [2013-11-03]

Chrome: 
=======
CHR Extension: (avast! Online Security) - C:\Users\Jackstar1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-10-19]
CHR Extension: (Google Wallet) - C:\Users\Jackstar1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-02]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-02] (AVAST Software)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [625184 2009-04-19] ()
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [207904 2009-04-19] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-10] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-02] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-02] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 rpkmdrv; C:\Windows\System32\drivers\rpkmdrv.sys [21248 2012-08-16] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-04 15:52 - 2014-04-04 15:53 - 00010705 _____ () C:\Users\Jackstar1\Desktop\FRST.txt
2014-04-04 15:52 - 2014-04-04 15:52 - 00000000 ____D () C:\FRST
2014-04-04 14:49 - 2014-04-04 14:51 - 00000000 ____D () C:\Users\Jackstar1\AppData\Local\Adobe
2014-04-02 18:18 - 2014-04-02 18:18 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-03-30 13:22 - 2013-12-21 11:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-30 13:22 - 2013-12-21 10:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-30 13:21 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-30 13:21 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-30 13:21 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-30 13:21 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-30 13:21 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-30 13:21 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-30 13:21 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-30 13:21 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-30 13:21 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-30 13:21 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-30 13:21 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-30 13:21 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-30 13:21 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 13:21 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-30 13:21 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-30 13:21 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-30 13:21 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-30 13:21 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-30 13:21 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-30 13:21 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-30 13:21 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-30 13:21 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-30 13:21 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-30 13:21 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-30 13:21 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-30 13:21 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-30 13:21 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-30 13:21 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-30 13:21 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-30 13:21 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-30 13:21 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-30 13:21 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-30 13:21 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-30 13:21 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-30 13:21 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-30 13:21 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-30 13:21 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-30 13:21 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-30 13:21 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-30 13:21 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-29 18:27 - 2014-03-29 18:27 - 02157056 _____ (Farbar) C:\Users\Jackstar1\Desktop\FRST64.exe
2014-03-29 17:09 - 2014-03-29 17:09 - 03822704 _____ () C:\Users\Jackstar1\Downloads\battlelog-web-plugins_2.3.2_133.exe
2014-03-28 17:29 - 2014-03-28 17:29 - 00448512 _____ (OldTimer Tools) C:\Users\Jackstar1\Downloads\TFC.exe
2014-03-28 17:20 - 2013-10-14 19:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-03-28 17:12 - 2014-03-28 17:12 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-28 17:12 - 2014-03-28 17:12 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-28 17:12 - 2014-03-28 17:12 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-28 17:12 - 2014-03-28 17:12 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-28 17:12 - 2014-03-28 17:12 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-28 17:12 - 2014-03-28 17:12 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-28 17:12 - 2014-03-28 17:12 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-28 17:09 - 2014-03-28 17:20 - 00010864 _____ () C:\Windows\IE11_main.log
2014-03-28 17:09 - 2014-03-28 17:09 - 02077392 _____ (Microsoft Corporation) C:\Users\Jackstar1\Downloads\IE11-Windows6.1.exe
2014-03-28 17:07 - 2014-03-28 17:08 - 00001495 _____ () C:\DelFix.txt
2014-03-28 17:07 - 2014-03-28 17:07 - 00000000 ____D () C:\Windows\ERUNT
2014-03-25 21:36 - 2014-04-04 14:26 - 00002520 _____ () C:\Windows\setupact.log
2014-03-25 21:36 - 2014-04-02 18:22 - 00001502 _____ () C:\Windows\PFRO.log
2014-03-25 21:36 - 2014-03-25 21:36 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-25 21:20 - 2014-03-25 21:20 - 00380416 _____ () C:\Users\Jackstar1\Downloads\Gmer-19357.exe
2014-03-25 21:20 - 2014-03-25 21:20 - 00000000 _____ () C:\Users\Jackstar1\defogger_reenable
2014-03-25 19:33 - 2014-03-28 17:34 - 00000000 ____D () C:\ProgramData\Sophos
2014-03-25 19:31 - 2014-03-25 19:32 - 87273672 _____ (Sophos Limited) C:\Users\Jackstar1\Downloads\Sophos Virus Removal Tool.exe
2014-03-25 19:17 - 2014-03-27 20:33 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-25 19:17 - 2014-03-25 19:17 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-25 19:17 - 2014-03-25 19:17 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-25 19:17 - 2014-03-25 19:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-25 19:17 - 2014-03-05 10:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-25 19:17 - 2014-03-05 10:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-25 19:17 - 2014-03-05 10:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-15 23:31 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-03-15 23:26 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-15 23:26 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-03-15 23:26 - 2014-03-04 16:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-03-15 23:14 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-15 23:14 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-15 23:14 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-15 23:14 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-15 23:14 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-15 23:14 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-15 23:14 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-15 23:14 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

==================== One Month Modified Files and Folders =======

2014-04-04 15:53 - 2014-04-04 15:52 - 00010705 _____ () C:\Users\Jackstar1\Desktop\FRST.txt
2014-04-04 15:53 - 2013-10-19 13:43 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-04 15:52 - 2014-04-04 15:52 - 00000000 ____D () C:\FRST
2014-04-04 15:52 - 2013-10-19 13:22 - 01928140 _____ () C:\Windows\WindowsUpdate.log
2014-04-04 14:51 - 2014-04-04 14:49 - 00000000 ____D () C:\Users\Jackstar1\AppData\Local\Adobe
2014-04-04 14:50 - 2013-10-25 13:08 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-04 14:50 - 2013-10-25 13:08 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-04 14:33 - 2009-07-14 06:45 - 00021840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-04 14:33 - 2009-07-14 06:45 - 00021840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-04 14:30 - 2011-04-12 09:43 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2014-04-04 14:30 - 2011-04-12 09:43 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2014-04-04 14:30 - 2009-07-14 07:13 - 01619476 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-04 14:26 - 2014-03-25 21:36 - 00002520 _____ () C:\Windows\setupact.log
2014-04-04 14:26 - 2013-10-19 13:43 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-04 14:26 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-04 14:25 - 2013-10-19 14:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-02 18:22 - 2014-03-25 21:36 - 00001502 _____ () C:\Windows\PFRO.log
2014-04-02 18:18 - 2014-04-02 18:18 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-02 18:18 - 2014-01-12 14:47 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-04-02 18:18 - 2014-01-12 14:47 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-02 18:18 - 2013-11-12 22:55 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-04-02 18:18 - 2013-10-19 13:43 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-02 18:18 - 2013-10-19 13:43 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-04-02 18:18 - 2013-10-19 13:43 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-02 18:18 - 2013-10-19 13:43 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-02 18:18 - 2013-10-19 13:43 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-02 18:18 - 2013-10-19 13:43 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-02 18:18 - 2013-10-19 13:43 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-03-30 23:26 - 2013-10-22 20:08 - 00000000 ____D () C:\Users\Jackstar1\AppData\Roaming\TS3Client
2014-03-30 17:00 - 2014-01-27 21:17 - 00000000 ____D () C:\Users\Jackstar1\AppData\Local\DayZ
2014-03-29 22:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-03-29 18:27 - 2014-03-29 18:27 - 02157056 _____ (Farbar) C:\Users\Jackstar1\Desktop\FRST64.exe
2014-03-29 17:25 - 2013-10-23 21:04 - 00290184 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-29 17:25 - 2013-10-23 18:45 - 00290184 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-29 17:25 - 2013-10-23 18:45 - 00280904 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-29 17:09 - 2014-03-29 17:09 - 03822704 _____ () C:\Users\Jackstar1\Downloads\battlelog-web-plugins_2.3.2_133.exe
2014-03-29 17:09 - 2013-10-23 20:30 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-03-29 16:04 - 2013-10-19 15:06 - 00000000 ____D () C:\ProgramData\Origin
2014-03-28 17:43 - 2013-11-08 22:38 - 00000000 ____D () C:\Users\Jackstar1\Desktop\Rechnungen
2014-03-28 17:34 - 2014-03-25 19:33 - 00000000 ____D () C:\ProgramData\Sophos
2014-03-28 17:29 - 2014-03-28 17:29 - 00448512 _____ (OldTimer Tools) C:\Users\Jackstar1\Downloads\TFC.exe
2014-03-28 17:23 - 2013-10-19 13:23 - 00001421 _____ () C:\Users\Jackstar1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-28 17:21 - 2013-10-19 14:13 - 00000000 ____D () C:\Windows\Panther
2014-03-28 17:20 - 2014-03-28 17:09 - 00010864 _____ () C:\Windows\IE11_main.log
2014-03-28 17:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-28 17:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-03-28 17:12 - 2014-03-28 17:12 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-28 17:12 - 2014-03-28 17:12 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-28 17:12 - 2014-03-28 17:12 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-28 17:12 - 2014-03-28 17:12 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-28 17:12 - 2014-03-28 17:12 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-28 17:12 - 2014-03-28 17:12 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-28 17:12 - 2014-03-28 17:12 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-28 17:12 - 2014-03-28 17:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-28 17:12 - 2014-03-28 17:12 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-28 17:09 - 2014-03-28 17:09 - 02077392 _____ (Microsoft Corporation) C:\Users\Jackstar1\Downloads\IE11-Windows6.1.exe
2014-03-28 17:08 - 2014-03-28 17:07 - 00001495 _____ () C:\DelFix.txt
2014-03-28 17:07 - 2014-03-28 17:07 - 00000000 ____D () C:\Windows\ERUNT
2014-03-27 20:33 - 2014-03-25 19:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-25 21:36 - 2014-03-25 21:36 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-25 21:20 - 2014-03-25 21:20 - 00380416 _____ () C:\Users\Jackstar1\Downloads\Gmer-19357.exe
2014-03-25 21:20 - 2014-03-25 21:20 - 00000000 _____ () C:\Users\Jackstar1\defogger_reenable
2014-03-25 21:20 - 2013-10-19 13:23 - 00000000 ____D () C:\Users\Jackstar1
2014-03-25 20:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Speech
2014-03-25 19:32 - 2014-03-25 19:31 - 87273672 _____ (Sophos Limited) C:\Users\Jackstar1\Downloads\Sophos Virus Removal Tool.exe
2014-03-25 19:28 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-03-25 19:17 - 2014-03-25 19:17 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-25 19:17 - 2014-03-25 19:17 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-25 19:17 - 2014-03-25 19:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-03-25 19:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-25 19:08 - 2013-11-03 22:29 - 00000000 ____D () C:\Users\Jackstar1\Documents\CCleaner_Sicherung
2014-03-24 18:42 - 2013-10-22 19:51 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-03-20 22:13 - 2013-10-19 14:31 - 00000000 ____D () C:\Users\Jackstar1\AppData\Roaming\Nitro PDF
2014-03-16 11:35 - 2009-07-14 06:45 - 00294712 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 23:57 - 2013-10-19 13:43 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-15 23:31 - 2013-10-19 14:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-03-15 23:17 - 2013-10-19 14:44 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-15 23:15 - 2013-10-19 14:44 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-05 10:26 - 2014-03-25 19:17 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 10:26 - 2014-03-25 19:17 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 10:26 - 2014-03-25 19:17 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Some content of TEMP:
====================
C:\Users\Jackstar1\AppData\Local\Temp\sonarinst.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-20 21:37

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Jackstar1 at 2014-04-04 15:53:31
Running from C:\Users\Jackstar1\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)
aerosoft's - OMSI - Addon Wien Update (HKLM-x32\...\{7194EE66-1674-4082-85F3-769B844D6BD0}) (Version: 1.01 - aerosoft)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2016 - Avast Software)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.2.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
CCleaner (HKLM\...\CCleaner) (Version: 4.06 - Piriform)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.5.2 - SCS Software)
F1 2013 (HKLM-x32\...\Steam App 223670) (Version:  - Codemasters Birmingham)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Nitro Reader 3 (HKLM\...\{4756C731-B54E-451A-9AF1-86E8AB1BEBBB}) (Version: 3.5.6.5 - Nitro)
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM-x32\...\InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version:  - )
NVIDIA ForceWare Network Access Manager (Version: 1.00.7305 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
OMSI - Der Omnibussimulator (HKLM-x32\...\{9AE850A4-B89D-4875-A159-B1B64D717EFB}) (Version: 1.06 - aerosoft)
OMSI - Hamburg (HKLM-x32\...\{CBAF25BB-BD31-4663-84C8-13104B3D3DCC}) (Version: 1.11 - aerosoft)
OMSI 2 (HKLM-x32\...\Steam App 252530) (Version:  - MR-Software GbR)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.)
ROCCAT Power-Grid Version 0.458 (HKLM-x32\...\{953CF6E6-4EC8-4E55-A263-720CEBD591FE}_is1) (Version: 0.458 - ROCCAT GmbH)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Solaris Urbino 12 III - Version 2.01 by CNB-Projekts - (HKCU\...\Solaris Urbino 12 III - Version 2.01 by CNB-Projekts -) (Version:  - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Tropico 4 (HKLM-x32\...\Steam App 57690) (Version:  - Haemimont Games)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
Waterfox 24.0 (x64 en-US) (HKLM\...\Waterfox 24.0 (x64 en-US)) (Version: 24.0 - Mozilla)
WinRAR 5.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

==================== Restore Points  =========================

28-03-2014 15:07:51 Ende der Bereinigung
28-03-2014 15:11:30 Windows Modules Installer
28-03-2014 15:25:09 Windows Update
28-03-2014 15:33:34 Removed Sophos Virus Removal Tool.
30-03-2014 11:21:54 Windows Update
02-04-2014 16:16:53 avast! antivirus system restore point
02-04-2014 16:19:49 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1182A1B5-468A-4E73-ABD4-A9067CC5F578} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {47809A8B-CC0F-4DCA-8418-7BDF6C5CA347} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {7BD6D09A-C521-4EDF-97E2-BB1BFEC12AB9} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-02] (AVAST Software)
Task: {B63716B0-4297-4FEF-AAD5-E45D2C39B1BC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-19] (Google Inc.)
Task: {F0652D5D-4FBC-4193-985A-5D634409E61C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-19] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-19 14:40 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-10-23 18:45 - 2013-12-10 18:56 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2009-04-19 08:34 - 2009-04-19 08:34 - 00625184 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
2009-04-19 08:34 - 2009-04-19 08:34 - 00070176 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nv_common.dll
2009-04-19 08:34 - 2009-04-19 08:34 - 00578080 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\SpecialCase.dll
2009-04-19 08:34 - 2009-04-19 08:34 - 00207904 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
2013-10-19 17:30 - 2013-10-19 17:30 - 00012520 _____ () C:\Users\Jackstar1\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\CoreTempReader.dll
2013-10-19 17:30 - 2013-10-19 17:30 - 00015080 _____ () C:\Users\Jackstar1\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\GetCoreTempInfoNET.dll
2013-10-19 17:30 - 2013-10-19 17:30 - 00014056 _____ () C:\Users\Jackstar1\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\SystemInfo.dll
2014-04-03 19:48 - 2014-04-03 19:48 - 02189312 _____ () C:\Program Files\AVAST Software\Avast\defs\14040300\algo.dll
2014-04-04 14:26 - 2014-04-04 14:26 - 02189312 _____ () C:\Program Files\AVAST Software\Avast\defs\14040400\algo.dll
2013-10-19 13:43 - 2013-10-19 13:43 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-01-08 11:52 - 2013-12-13 00:19 - 00142848 _____ () E:\Program Files (x86)\Steam\libavresample-1.dll
2014-01-08 11:52 - 2013-11-05 03:12 - 00890592 _____ () E:\Program Files (x86)\Steam\libavutil-52.dll
2013-08-21 14:18 - 2014-02-11 04:34 - 00751616 _____ () E:\Program Files (x86)\Steam\SDL2.dll
2013-10-08 18:19 - 2014-02-25 23:57 - 01135296 _____ () E:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-09-10 14:20 - 2014-01-11 01:33 - 20625832 _____ () E:\Program Files (x86)\Steam\bin\libcef.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 01100800 _____ () E:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 00124416 _____ () E:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-06-14 15:49 - 2013-06-15 01:49 - 00192000 _____ () E:\Program Files (x86)\Steam\bin\avformat-53.dll
2014-03-15 23:57 - 2014-03-15 02:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2014-03-15 23:57 - 2014-03-15 02:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
2014-03-15 23:57 - 2014-03-15 02:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll
2014-03-15 23:57 - 2014-03-15 02:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-15 23:57 - 2014-03-15 02:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-15 23:57 - 2014-03-15 02:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
2014-03-15 23:57 - 2014-03-15 02:50 - 13637448 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Steam => "E:\Program Files (x86)\Steam\Steam.exe" -silent

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/04/2014 02:31:45 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (04/04/2014 02:27:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/03/2014 08:00:00 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (04/03/2014 07:59:02 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (04/03/2014 07:49:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/02/2014 06:31:01 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (04/02/2014 06:24:07 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/02/2014 06:22:30 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (04/02/2014 06:22:30 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (04/02/2014 06:22:30 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]


System errors:
=============
Error: (03/30/2014 11:26:40 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/30/2014 10:26:40 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/30/2014 09:26:40 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/30/2014 08:26:40 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/30/2014 07:26:40 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/30/2014 06:26:40 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/30/2014 05:26:40 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/30/2014 00:44:24 AM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/29/2014 11:44:24 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0

Error: (03/29/2014 10:44:24 PM) (Source: nvstor64) (User: )
Description: Der Befehl an das Gerät wurde abgebrochen.



Gerät: \Device\RaidPort1

Modell: WDC WD1003FBYX-01Y7B1

Firmware-Version: 01.0

Seriennummer:      WD-WCAW36610579

Anschluss: 0


Microsoft Office Sessions:
=========================
Error: (04/04/2014 02:31:45 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (04/04/2014 02:27:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/03/2014 08:00:00 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (04/03/2014 07:59:02 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (04/03/2014 07:49:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/02/2014 06:31:01 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (04/02/2014 06:24:07 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/02/2014 06:22:30 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (04/02/2014 06:22:30 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (04/02/2014 06:22:30 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]


==================== Memory info =========================== 

Percentage of memory in use: 25%
Total physical RAM: 8191.3 MB
Available physical RAM: 6133.14 MB
Total Pagefile: 32689.48 MB
Available Pagefile: 30328.41 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:466.75 GB) (Free:405.07 GB) NTFS
Drive e: (Volume E) (Fixed) (Total:464.66 GB) (Free:339.77 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 2921C17E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=467 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=465 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Jackstar1 at 2014-04-04 15:56:02 Run:1
Running from C:\Users\Jackstar1\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
FF Extension: ???? PDF - C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\uriloader@pdf.js.xpi [2013-11-03]
         
*****************

C:\Users\Jackstar1\AppData\Roaming\Mozilla\Firefox\Profiles\x9l8dydb.default\Extensions\uriloader@pdf.js.xpi not found.

==== End of Fixlog ====