|
Plagegeister aller Art und deren Bekämpfung: Probleme bei Downloads und InstallationenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
03.04.2014, 18:41 | #1 |
| Probleme bei Downloads und Installationen Hallo liebe Community Ich hoffe das ihr mir bei meinem Problem helfen könnt. Und zwar habe ich die Befürchtung das ich mir einen Virus gefangen habe. Das ganze liegt daran das ich keine Sachen mehr voll downloaden kann, also weder in Chrome noch Firefox usw.. d.h Wenn ich z.b eine Datei downloade die 14 MB hat werden nur 1,2 MB runtergeladen und der Download wird als Vollständig angezeigt. Ich habe bereits den Versuch unternommen, Malewarebytes zu installieren (Auf einem anderen PC gedownloaded und per Usb auf meinem Laptop gepackt (weil die Installation ja nicht komplett funktioniert). Als alles Installiert war wollte ich es öffnen und es hat mir Angezeigt das die Datei nicht gefunden werden kann. C:\Program Files (x86)\Malewarebytes Anti-Malware\mbam.exe ) Aber die Datei ist vorhanden. Dieses Problem habe ich bei allen anderen Programmen die ich downloaden möchte ebenfalls, obwohl die Dateien vorhanden sind. Ich habe ein Win 7 64bit und als Virenschutz Avast free version. Ich habe in Verdacht das diese datei: 27218346293184.exe die ich im Task Manager sehe die Ursache sein könnte weil diese sich nicht beenden lässt und auch keinen Dateipfad anzeigt. Ich hoffe ihr könnt mir weiterhelfen weil ich ungerne mein Win7 neu aufsetzen möchte (Bin sonst vollkommen zufrieden). sorry wenn ich irgendwas vergessen habe aber das ist mein erster Post hier. Vielen Dank im Voraus und einen schönen Tag euer TK |
03.04.2014, 18:45 | #2 |
/// TB-Ausbilder | Probleme bei Downloads und InstallationenMein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
|
03.04.2014, 18:55 | #3 |
| Probleme bei Downloads und Installationen FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by Laptop (administrator) on LAPTOP-PC on 03-04-2014 19:52:48 Running from C:\Users\Laptop\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (My Digital Life Forums) C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\KMSServerService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\System32\alg.exe () C:\ProgramData\27218346293184.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\ProgramData\27218346293184.exe (Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.exe (Microsoft Corporation) C:\Windows\SysWOW64\WScript.exe (Microsoft Corporation) C:\Windows\SysWOW64\WScript.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7509096 2011-10-18] (Realtek Semiconductor) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-02] (AVAST Software) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\Run: [Windows COM Host] - C:\Users\Laptop\Downloads\Cod Ghosts Patcher [PS3].exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows" HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\CurrentVersion\Windows: [Load] C:\ProgramData\27218346293184.exe <===== ATTENTION HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\MountPoints2: {1144f895-14ab-11e2-b3d9-ac162d54c7dc} - E:\laucher.exe HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\MountPoints2: {cb2d46c0-eca1-11e2-9617-ac162d54c7dc} - E:\Startme.exe HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\MountPoints2: {f8385360-9d78-11e3-9a68-9cb70dd79913} - F:\SETUP.EXE HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\MountPoints2: {fdfa83e7-8588-11e2-a1a0-ac162d54c7dc} - E:\Startme.exe HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\MountPoints2: {ff76e314-875a-11e2-9a5f-9cb70dd74eb3} - E:\LaunchU3.exe -a IFEO\avcenter.exe: [Debugger] nsjw.exe IFEO\avguard.exe: [Debugger] nsjw.exe IFEO\avp.exe: [Debugger] nsjw.exe IFEO\bdagent.exe: [Debugger] nsjw.exe IFEO\ccuac.exe: [Debugger] nsjw.exe IFEO\ComboFix.exe: [Debugger] nsjw.exe IFEO\egui.exe: [Debugger] nsjw.exe IFEO\hijackthis.exe: [Debugger] nsjw.exe IFEO\keyscrambler.exe: [Debugger] nsjw.exe IFEO\mbam.exe: [Debugger] nsjw.exe IFEO\MpCmdRun.exe: [Debugger] nsjw.exe IFEO\MSASCui.exe: [Debugger] nsjw.exe IFEO\MsMpEng.exe: [Debugger] nsjw.exe IFEO\msseces.exe: [Debugger] nsjw.exe IFEO\spybotsd.exe: [Debugger] nsjw.exe IFEO\wireshark.exe: [Debugger] nsjw.exe IFEO\zlclient.exe: [Debugger] nsjw.exe InternetURL: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> 0 Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (Stardock) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC2CBB12E83A8CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=HitachiXHTS543232A7A384_E203421K15MK8S15MK8SX&ts=1378919736 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=HitachiXHTS543232A7A384_E203421K15MK8S15MK8SX&ts=1378919736 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch URLSearchHook: ATTENTION ==> Default URLSearchHook is missing. SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E203421K15MK8S15MK8SX&ts=1378919736 SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=HitachiXHTS543232A7A384_E203421K15MK8S15MK8SX&ts=1378919736 SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect119b.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default FF user.js: detected! => C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\user.js FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "http_port", "" FF NetworkProxy: "autoconfig_url", "" FF NetworkProxy: "type", "" FF NetworkProxy: "http", "" FF SelectedSearchEngine: Google FF DefaultSearchEngine: Google FF Homepage: about:blank FF NewTab: user_pref("browser.newtab.url", ""); FF Keyword.URL: user_pref("keyword.URL", ""); FF SearchEngineOrder.1: Google FF SearchEngineOrder.user_pref("browser.search.order.1,S", "Google");: user_pref("browser.search.order.1,S", "Google"); FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\searchplugins\Web Search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Firebug - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\Extensions\firebug@software.joehewitt.com.xpi [2013-10-16] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-10-22] FF HKLM-x32\...\Firefox\Extensions: [ocr@babylon.com] - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\ocr@babylon.com Chrome: ======= CHR HomePage: hxxp://www.google.de/ CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll () CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll () CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.89\npGoogleUpdate3.dll No File CHR Extension: (YouTube) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-10-23] CHR Extension: (Adblock Plus) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-09-15] CHR Extension: (Google-Suche) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-10-23] CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2013-08-21] CHR Extension: (I <3 House Music) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbihiclmkdmbnihofkkhlmdefkclbfkj [2013-12-15] CHR Extension: (Stylish) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2013-08-21] CHR Extension: (avast! Online Security) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-07-20] CHR Extension: (vGet Extension (Video Downloader, DLNA)) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\hniladkejehjfchadikcbjmgjaogciic [2014-01-02] CHR Extension: (Google Wallet) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21] CHR Extension: (Google Mail) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-10-23] CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-09] (Atheros) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-02] (AVAST Software) S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () R2 KMSServerService; C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\KMSServerService.exe [260608 2014-02-27] (My Digital Life Forums) S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) S2 TunMirror; "C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\TunMirror.exe" [X] ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-02] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-02] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-02] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-02] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-02] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-02] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-02] () R3 ElgatoGC658Y; C:\Windows\System32\Drivers\ElgatoGC658.sys [50288 2012-11-12] (UB658) U0 Partizan; C:\Windows\SysWOW64\drivers\Partizan.sys [35816 2014-04-02] (Greatis Software) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-03 19:52 - 2014-04-03 19:53 - 00017262 _____ () C:\Users\Laptop\Desktop\FRST.txt 2014-04-03 19:52 - 2014-04-03 19:52 - 00000000 ____D () C:\FRST 2014-04-03 19:49 - 2014-04-03 19:49 - 02157056 _____ (Farbar) C:\Users\Laptop\Desktop\FRST64.exe 2014-04-03 19:13 - 2014-04-03 19:13 - 00001139 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-03 19:13 - 2014-04-03 19:13 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-03 19:13 - 2014-04-03 11:15 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Desktop\mbam-setup-2.0.0.1000.exe 2014-04-03 19:13 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 19:13 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 19:13 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-02 19:07 - 2014-04-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-02 19:06 - 2014-04-02 19:06 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000.exe 2014-04-02 18:52 - 2014-04-02 18:52 - 00386928 _____ (Softonic ) C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_malwarebytes-anti-malware (1).exe 2014-04-02 18:51 - 2014-04-02 18:51 - 00386928 _____ (Softonic ) C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_malwarebytes-anti-malware.exe 2014-04-02 18:34 - 2014-04-02 18:34 - 00000248 _____ () C:\Windows\SysWOW64\PARTIZAN.EXE 2014-04-02 18:29 - 2014-04-02 18:30 - 00030711 _____ () C:\Windows\SysWOW64\Partizan.RRI 2014-04-02 18:29 - 2014-04-02 18:29 - 00040720 _____ (Greatis Software) C:\Windows\system32\Partizan.exe 2014-04-02 18:27 - 2014-04-02 18:27 - 00000000 ____D () C:\@RestoreQuarantine 2014-04-02 18:22 - 2014-04-02 18:32 - 00000000 ____D () C:\Users\Laptop\Documents\RegRun2 2014-04-02 18:22 - 2014-04-02 18:32 - 00000000 ____D () C:\Program Files (x86)\UnHackMe 2014-04-02 18:22 - 2014-04-02 18:31 - 00000000 ____D () C:\Users\Public\Documents\regruninfo 2014-04-02 18:22 - 2014-04-02 18:22 - 00035816 _____ (Greatis Software) C:\Windows\SysWOW64\Drivers\Partizan.sys 2014-04-02 18:22 - 2014-04-02 18:22 - 00001044 _____ () C:\Users\Laptop\Desktop\UnHackMe.lnk 2014-04-02 18:22 - 2014-04-02 18:22 - 00000418 _____ () C:\Windows\Tasks\UnHackMe Task Scheduler.job 2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\winstart.bat 2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\SysWOW64\AUTOEXEC.NT 2014-04-02 18:22 - 2014-03-28 13:02 - 15320504 _____ (Greatis Software, LLC. ) C:\Users\Laptop\Desktop\unhackme_setup.exe 2014-04-02 18:22 - 2014-03-28 13:01 - 00012800 _____ (Greatis Software, LLC.) C:\Windows\SysWOW64\Drivers\UnHackMeDrv.sys 2014-04-02 18:19 - 2014-04-02 18:20 - 15295838 _____ () C:\Users\Laptop\Downloads\unhackme.zip 2014-04-02 18:13 - 2014-04-02 18:14 - 90285632 _____ () C:\Users\Laptop\Downloads\Sophos Virus Removal Tool.exe 2014-04-02 17:52 - 2014-04-02 17:53 - 00709352 _____ ( ) C:\Users\Laptop\Downloads\COMPUTER_BILD-Download-Manager_fuer_WHD_7.4.exe 2014-04-02 17:40 - 2014-04-02 17:40 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.2.Run.exe 2014-04-02 17:38 - 2014-04-02 17:38 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.1.Run.exe 2014-04-02 17:17 - 2014-04-02 17:17 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51.exe 2014-04-02 17:13 - 2014-04-02 17:14 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller (1).exe 2014-04-02 17:08 - 2014-04-02 17:08 - 00002003 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-04-02 17:06 - 2014-04-02 17:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-01 16:40 - 2014-04-01 16:41 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2014-04-01 16:35 - 2014-04-01 16:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-LAPTOP-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat 2014-04-01 16:32 - 2014-04-01 16:32 - 00000000 ____D () C:\RegBackup 2014-04-01 16:25 - 2014-04-01 16:25 - 00003304 ____N () C:\bootsqm.dat 2014-04-01 16:12 - 2014-04-01 16:12 - 00000000 ____D () C:\Users\Laptop\Desktop\Tweaking.com - Windows Repair 2014-04-01 16:11 - 2014-04-01 16:11 - 03098210 _____ () C:\Users\Laptop\Downloads\tweaking.com_windows_repair_aio.zip 2014-04-01 16:09 - 2014-04-01 16:09 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe 2014-04-01 15:56 - 2014-04-01 15:56 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe 2014-03-31 20:44 - 2014-03-31 20:44 - 00001156 _____ () C:\Users\Laptop\Downloads\Max_Herre_-_MTV_Unplugged_KAHEDI_Radio_Show_Limited_Edition_2013_-kjx8dymyeq0zn.dlc 2014-03-31 20:28 - 2014-03-31 20:28 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51 (2).exe 2014-03-31 20:26 - 2014-03-31 20:27 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller.exe 2014-03-31 20:22 - 2014-03-31 20:22 - 00000000 _____ () C:\Users\Laptop\Downloads\be7usd5w 2014-03-31 20:18 - 2014-03-31 20:28 - 27548688 _____ () C:\Users\Laptop\Downloads\15920_mrtr3cd.rar 2014-03-31 17:09 - 2014-03-31 17:09 - 00000000 ____D () C:\Users\Laptop\Downloads\Download.am 2014-03-31 17:08 - 2014-03-31 17:08 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download.am 2014-03-31 17:07 - 2013-11-26 23:01 - 13770682 _____ (COLDWELL AG) C:\Users\Laptop\Desktop\download.am-build233.exe 2014-03-31 16:55 - 2014-03-31 16:55 - 00386904 _____ (Softonic ) C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_jdownloader.exe 2014-03-31 16:47 - 2014-03-31 16:47 - 00077976 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstallerJD2.exe 2014-03-31 16:12 - 2014-03-31 16:48 - 106325880 _____ () C:\Users\Laptop\Downloads\maxhermtvunp2013.rar 2014-03-29 03:54 - 2014-03-29 17:44 - 00014183 _____ () C:\Users\Laptop\Desktop\chrome.exe - Verknüpfung.lnk 2014-03-29 03:28 - 2013-12-28 09:36 - 00000000 ____D () C:\Users\Laptop\Desktop\NPUB31419--131218150106 (ORIGINAL BACKUP) 2014-03-29 03:19 - 2014-03-29 03:29 - 00000000 ____D () C:\Users\Laptop\Desktop\Save resigner 2014-03-29 03:18 - 2014-03-29 03:18 - 02173391 _____ () C:\Users\Laptop\Downloads\[PS3]_Save_Resigner_1.4.rar 2014-03-29 02:56 - 2014-03-29 02:56 - 13866963 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\[PS3] Save Resigner 2.0.6 Setup.exe 2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\Users\Laptop\Documents\The Prince of Codes 2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\ProgramData\Caphyon 2014-03-29 02:50 - 2014-03-29 02:50 - 08071966 _____ () C:\Users\Laptop\Downloads\NPUB31419--131218150106.rar 2014-03-29 02:47 - 2014-03-29 02:48 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\The Prince of Codes 2014-03-29 02:45 - 2014-03-29 02:46 - 13449652 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\ps3_save_resigner_2.0.5_setup.exe 2014-03-29 02:29 - 2013-12-20 00:01 - 00000000 ____D () C:\Users\Laptop\Desktop\Save #2 2014-03-29 02:26 - 2014-03-29 02:27 - 16119274 _____ () C:\Users\Laptop\Downloads\Minecraft Saves.zip 2014-03-26 08:23 - 2014-03-26 10:13 - 573294207 _____ () C:\Users\Laptop\Desktop\Ohne Titel (2).mp4 2014-03-25 22:38 - 2014-03-25 22:57 - 00488408 _____ () C:\Users\Laptop\Desktop\mm.sfk 2014-03-25 22:37 - 2014-03-25 22:37 - 62507564 _____ () C:\Users\Laptop\Desktop\mm.wav 2014-03-24 19:54 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\MW3 2014-03-24 19:53 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack 2014-03-24 19:49 - 2014-03-24 19:51 - 40949384 _____ () C:\Users\Laptop\Downloads\PSNModz 6k Non Jailbreak Mod Pack.rar 2014-03-21 14:29 - 2014-03-21 14:29 - 03294805 _____ () C:\Users\Laptop\Downloads\Nova Launcher Prime v2.2.3.zip 2014-03-21 14:29 - 2014-03-21 14:29 - 02641758 _____ () C:\Users\Laptop\Downloads\Lucky Patcher v3.6.5.apk 2014-03-21 14:22 - 2014-03-21 14:24 - 03263625 _____ () C:\Users\Laptop\Downloads\Nicht bestätigt 715706.crdownload 2014-03-21 14:01 - 2014-03-21 14:01 - 09355409 _____ () C:\Users\Laptop\Downloads\CM11_swapped_go_19032014.zip 2014-03-21 13:27 - 2014-03-21 13:28 - 00000000 ____D () C:\Users\Laptop\Desktop\system 2014-03-21 13:27 - 2008-02-29 11:33 - 09107751 ____N () C:\Users\Laptop\Desktop\boot.img 2014-03-21 13:27 - 2008-02-29 11:33 - 00009329 ____N () C:\Users\Laptop\Desktop\file_contexts 2014-03-21 13:20 - 2014-03-21 13:27 - 212605148 _____ () C:\Users\Laptop\Desktop\cm_lotus-ota-19032014.zip 2014-03-21 13:09 - 2014-03-21 13:10 - 13199249 _____ () C:\Users\Laptop\Downloads\WhatsAppPLUSv5.25D-211186.apk 2014-03-18 19:34 - 2014-03-26 14:58 - 00038288 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg 2014-03-18 19:34 - 2014-03-25 22:57 - 00038264 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg.bak 2014-03-18 16:41 - 2014-03-18 19:33 - 1305585413 _____ () C:\Users\Laptop\Desktop\Ohne Titel.mp4 2014-03-17 21:03 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-17 21:03 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-17 21:03 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-17 21:03 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-17 21:03 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-17 21:03 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-17 21:03 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-17 21:03 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-17 21:03 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-17 21:03 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-17 21:03 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-17 21:03 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-17 21:03 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-17 21:03 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-17 21:03 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-17 21:03 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-17 21:03 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-17 21:03 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-17 21:03 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-17 21:03 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-17 21:03 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-17 21:03 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-17 21:03 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-17 21:03 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-17 21:03 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-17 21:03 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-17 21:03 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-17 21:03 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-17 21:03 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-17 21:03 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-17 21:03 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-17 21:03 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-17 21:03 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-17 21:03 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-17 21:03 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-17 21:03 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-17 21:03 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-17 21:03 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-17 21:03 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-17 21:03 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-17 21:01 - 2014-03-17 18:54 - 15102479 _____ () C:\Users\Laptop\Downloads\OPEN_THISgg.psd 2014-03-17 20:59 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-17 20:59 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-17 20:59 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-03-17 20:59 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-03-17 20:58 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-17 20:58 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-17 20:58 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-17 20:58 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-17 20:36 - 2014-03-17 20:36 - 00024628 _____ () C:\Users\Laptop\Downloads\mickey.zip 2014-03-17 20:33 - 2014-03-17 20:34 - 00035454 _____ () C:\Users\Laptop\Downloads\degrassi.zip 2014-03-12 16:09 - 2014-02-24 06:30 - 00000000 ____D () C:\Program Files\eclipse 2014-03-12 16:01 - 2014-03-12 16:05 - 420618021 _____ () C:\Users\Laptop\Downloads\eclipse-standard-kepler-SR2-win32_4.3.2.zip 2014-03-08 14:33 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-03-08 14:33 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-03-08 13:19 - 2014-03-08 13:19 - 00000000 ____D () C:\Users\Laptop\Photoshop 2014-03-08 02:33 - 2014-03-08 02:36 - 55901581 _____ () C:\Users\Laptop\Downloads\Ghost Banner.zip ==================== One Month Modified Files and Folders ======= 2014-04-03 19:53 - 2014-04-03 19:52 - 00017262 _____ () C:\Users\Laptop\Desktop\FRST.txt 2014-04-03 19:52 - 2014-04-03 19:52 - 00000000 ____D () C:\FRST 2014-04-03 19:52 - 2014-02-01 15:30 - 01597868 _____ () C:\Users\Laptop\AppData\Roaming\msconfig.ini 2014-04-03 19:49 - 2014-04-03 19:49 - 02157056 _____ (Farbar) C:\Users\Laptop\Desktop\FRST64.exe 2014-04-03 19:24 - 2012-10-09 15:07 - 01227490 _____ () C:\Windows\WindowsUpdate.log 2014-04-03 19:17 - 2009-07-14 19:58 - 00699682 _____ () C:\Windows\system32\perfh007.dat 2014-04-03 19:17 - 2009-07-14 19:58 - 00149790 _____ () C:\Windows\system32\perfc007.dat 2014-04-03 19:17 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-03 19:13 - 2014-04-03 19:13 - 00001139 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-03 19:13 - 2014-04-03 19:13 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-03 11:15 - 2014-04-03 19:13 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Desktop\mbam-setup-2.0.0.1000.exe 2014-04-02 19:07 - 2014-04-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-02 19:06 - 2014-04-02 19:06 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000.exe 2014-04-02 18:52 - 2014-04-02 18:52 - 00386928 _____ (Softonic ) C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_malwarebytes-anti-malware (1).exe 2014-04-02 18:51 - 2014-04-02 18:51 - 00386928 _____ (Softonic ) C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_malwarebytes-anti-malware.exe 2014-04-02 18:42 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-02 18:42 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-02 18:36 - 2014-02-01 15:30 - 00000000 ___HD () C:\ProgramData\{$1284-9213-2940-1289$} 2014-04-02 18:36 - 2012-10-09 15:15 - 00000000 ___RD () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-02 18:35 - 2013-09-15 13:03 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-04-02 18:35 - 2009-07-14 06:51 - 00110448 _____ () C:\Windows\setupact.log 2014-04-02 18:34 - 2014-04-02 18:34 - 00000248 _____ () C:\Windows\SysWOW64\PARTIZAN.EXE 2014-04-02 18:34 - 2012-10-09 20:14 - 00361118 _____ () C:\Windows\PFRO.log 2014-04-02 18:32 - 2014-04-02 18:22 - 00000000 ____D () C:\Users\Laptop\Documents\RegRun2 2014-04-02 18:32 - 2014-04-02 18:22 - 00000000 ____D () C:\Program Files (x86)\UnHackMe 2014-04-02 18:31 - 2014-04-02 18:22 - 00000000 ____D () C:\Users\Public\Documents\regruninfo 2014-04-02 18:30 - 2014-04-02 18:29 - 00030711 _____ () C:\Windows\SysWOW64\Partizan.RRI 2014-04-02 18:29 - 2014-04-02 18:29 - 00040720 _____ (Greatis Software) C:\Windows\system32\Partizan.exe 2014-04-02 18:27 - 2014-04-02 18:27 - 00000000 ____D () C:\@RestoreQuarantine 2014-04-02 18:22 - 2014-04-02 18:22 - 00035816 _____ (Greatis Software) C:\Windows\SysWOW64\Drivers\Partizan.sys 2014-04-02 18:22 - 2014-04-02 18:22 - 00001044 _____ () C:\Users\Laptop\Desktop\UnHackMe.lnk 2014-04-02 18:22 - 2014-04-02 18:22 - 00000418 _____ () C:\Windows\Tasks\UnHackMe Task Scheduler.job 2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\winstart.bat 2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\SysWOW64\AUTOEXEC.NT 2014-04-02 18:20 - 2014-04-02 18:19 - 15295838 _____ () C:\Users\Laptop\Downloads\unhackme.zip 2014-04-02 18:14 - 2014-04-02 18:13 - 90285632 _____ () C:\Users\Laptop\Downloads\Sophos Virus Removal Tool.exe 2014-04-02 17:53 - 2014-04-02 17:52 - 00709352 _____ ( ) C:\Users\Laptop\Downloads\COMPUTER_BILD-Download-Manager_fuer_WHD_7.4.exe 2014-04-02 17:44 - 2013-11-03 16:28 - 00000000 ____D () C:\Program Files (x86)\Kingo Android ROOT 2014-04-02 17:40 - 2014-04-02 17:40 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.2.Run.exe 2014-04-02 17:38 - 2014-04-02 17:38 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.1.Run.exe 2014-04-02 17:38 - 2013-09-11 15:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-02 17:17 - 2014-04-02 17:17 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51.exe 2014-04-02 17:14 - 2014-04-02 17:13 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller (1).exe 2014-04-02 17:08 - 2014-04-02 17:08 - 00002003 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-04-02 17:07 - 2014-02-27 19:11 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job 2014-04-02 17:06 - 2014-04-02 17:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-02 17:06 - 2014-02-27 19:11 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-04-02 17:06 - 2013-03-19 06:11 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-04-02 17:06 - 2013-03-19 06:11 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-04-02 17:06 - 2012-10-22 21:28 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-04-02 17:06 - 2012-10-22 21:28 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-04-02 17:06 - 2012-10-22 21:28 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-04-02 17:06 - 2012-10-22 21:28 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-04-02 17:06 - 2012-10-22 21:28 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-04-01 16:41 - 2014-04-01 16:40 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2014-04-01 16:35 - 2014-04-01 16:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-LAPTOP-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat 2014-04-01 16:32 - 2014-04-01 16:32 - 00000000 ____D () C:\RegBackup 2014-04-01 16:25 - 2014-04-01 16:25 - 00003304 ____N () C:\bootsqm.dat 2014-04-01 16:12 - 2014-04-01 16:12 - 00000000 ____D () C:\Users\Laptop\Desktop\Tweaking.com - Windows Repair 2014-04-01 16:11 - 2014-04-01 16:11 - 03098210 _____ () C:\Users\Laptop\Downloads\tweaking.com_windows_repair_aio.zip 2014-04-01 16:09 - 2014-04-01 16:09 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe 2014-04-01 15:56 - 2014-04-01 15:56 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe 2014-03-31 21:02 - 2013-10-10 16:46 - 00000000 ____D () C:\Users\Laptop\AppData\Local\CrashDumps 2014-03-31 20:44 - 2014-03-31 20:44 - 00001156 _____ () C:\Users\Laptop\Downloads\Max_Herre_-_MTV_Unplugged_KAHEDI_Radio_Show_Limited_Edition_2013_-kjx8dymyeq0zn.dlc 2014-03-31 20:28 - 2014-03-31 20:28 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51 (2).exe 2014-03-31 20:28 - 2014-03-31 20:18 - 27548688 _____ () C:\Users\Laptop\Downloads\15920_mrtr3cd.rar 2014-03-31 20:27 - 2014-03-31 20:26 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller.exe 2014-03-31 20:22 - 2014-03-31 20:22 - 00000000 _____ () C:\Users\Laptop\Downloads\be7usd5w 2014-03-31 17:09 - 2014-03-31 17:09 - 00000000 ____D () C:\Users\Laptop\Downloads\Download.am 2014-03-31 17:08 - 2014-03-31 17:08 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download.am 2014-03-31 16:55 - 2014-03-31 16:55 - 00386904 _____ (Softonic ) C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_jdownloader.exe 2014-03-31 16:48 - 2014-03-31 16:12 - 106325880 _____ () C:\Users\Laptop\Downloads\maxhermtvunp2013.rar 2014-03-31 16:47 - 2014-03-31 16:47 - 00077976 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstallerJD2.exe 2014-03-29 17:44 - 2014-03-29 03:54 - 00014183 _____ () C:\Users\Laptop\Desktop\chrome.exe - Verknüpfung.lnk 2014-03-29 03:29 - 2014-03-29 03:19 - 00000000 ____D () C:\Users\Laptop\Desktop\Save resigner 2014-03-29 03:18 - 2014-03-29 03:18 - 02173391 _____ () C:\Users\Laptop\Downloads\[PS3]_Save_Resigner_1.4.rar 2014-03-29 02:56 - 2014-03-29 02:56 - 13866963 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\[PS3] Save Resigner 2.0.6 Setup.exe 2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\Users\Laptop\Documents\The Prince of Codes 2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\ProgramData\Caphyon 2014-03-29 02:50 - 2014-03-29 02:50 - 08071966 _____ () C:\Users\Laptop\Downloads\NPUB31419--131218150106.rar 2014-03-29 02:48 - 2014-03-29 02:47 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\The Prince of Codes 2014-03-29 02:46 - 2014-03-29 02:45 - 13449652 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\ps3_save_resigner_2.0.5_setup.exe 2014-03-29 02:27 - 2014-03-29 02:26 - 16119274 _____ () C:\Users\Laptop\Downloads\Minecraft Saves.zip 2014-03-28 13:02 - 2014-04-02 18:22 - 15320504 _____ (Greatis Software, LLC. ) C:\Users\Laptop\Desktop\unhackme_setup.exe 2014-03-28 13:01 - 2014-04-02 18:22 - 00012800 _____ (Greatis Software, LLC.) C:\Windows\SysWOW64\Drivers\UnHackMeDrv.sys 2014-03-26 15:11 - 2013-12-16 16:50 - 00000132 _____ () C:\Users\Laptop\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen 2014-03-26 15:01 - 2012-12-22 12:56 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\vlc 2014-03-26 14:58 - 2014-03-18 19:34 - 00038288 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg 2014-03-26 10:13 - 2014-03-26 08:23 - 573294207 _____ () C:\Users\Laptop\Desktop\Ohne Titel (2).mp4 2014-03-25 22:57 - 2014-03-25 22:38 - 00488408 _____ () C:\Users\Laptop\Desktop\mm.sfk 2014-03-25 22:57 - 2014-03-18 19:34 - 00038264 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg.bak 2014-03-25 22:45 - 2014-01-24 13:24 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Audacity 2014-03-25 22:37 - 2014-03-25 22:37 - 62507564 _____ () C:\Users\Laptop\Desktop\mm.wav 2014-03-24 19:54 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\MW3 2014-03-24 19:54 - 2014-03-24 19:53 - 00000000 ____D () C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack 2014-03-24 19:51 - 2014-03-24 19:49 - 40949384 _____ () C:\Users\Laptop\Downloads\PSNModz 6k Non Jailbreak Mod Pack.rar 2014-03-21 14:29 - 2014-03-21 14:29 - 03294805 _____ () C:\Users\Laptop\Downloads\Nova Launcher Prime v2.2.3.zip 2014-03-21 14:29 - 2014-03-21 14:29 - 02641758 _____ () C:\Users\Laptop\Downloads\Lucky Patcher v3.6.5.apk 2014-03-21 14:24 - 2014-03-21 14:22 - 03263625 _____ () C:\Users\Laptop\Downloads\Nicht bestätigt 715706.crdownload 2014-03-21 14:01 - 2014-03-21 14:01 - 09355409 _____ () C:\Users\Laptop\Downloads\CM11_swapped_go_19032014.zip 2014-03-21 13:28 - 2014-03-21 13:27 - 00000000 ____D () C:\Users\Laptop\Desktop\system 2014-03-21 13:27 - 2014-03-21 13:20 - 212605148 _____ () C:\Users\Laptop\Desktop\cm_lotus-ota-19032014.zip 2014-03-21 13:10 - 2014-03-21 13:09 - 13199249 _____ () C:\Users\Laptop\Downloads\WhatsAppPLUSv5.25D-211186.apk 2014-03-19 18:08 - 2013-08-05 14:44 - 00000000 ____D () C:\Windows\system32\MRT 2014-03-19 18:05 - 2012-10-23 03:05 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-03-18 19:33 - 2014-03-18 16:41 - 1305585413 _____ () C:\Users\Laptop\Desktop\Ohne Titel.mp4 2014-03-17 21:26 - 2009-07-14 06:45 - 05078888 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-17 21:25 - 2014-02-02 20:57 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-17 21:25 - 2014-02-02 20:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-17 21:22 - 2012-10-09 19:43 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-03-17 21:04 - 2012-12-30 00:29 - 00000000 ____D () C:\Users\Laptop\Documents\Programm 2014-03-17 21:02 - 2014-02-26 21:51 - 00000000 ____D () C:\Users\Laptop\Desktop\Elagto 2014-03-17 21:02 - 2013-12-15 18:43 - 00000000 ____D () C:\Users\Laptop\Ps3 Designer 2014-03-17 20:40 - 2012-10-13 01:06 - 00110080 _____ () C:\Users\Laptop\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-17 20:36 - 2014-03-17 20:36 - 00024628 _____ () C:\Users\Laptop\Downloads\mickey.zip 2014-03-17 20:34 - 2014-03-17 20:33 - 00035454 _____ () C:\Users\Laptop\Downloads\degrassi.zip 2014-03-17 18:54 - 2014-03-17 21:01 - 15102479 _____ () C:\Users\Laptop\Downloads\OPEN_THISgg.psd 2014-03-17 17:49 - 2013-12-25 19:33 - 00000000 ____D () C:\Users\Laptop\Documents\Aufnahmen 2014-03-12 16:05 - 2014-03-12 16:01 - 420618021 _____ () C:\Users\Laptop\Downloads\eclipse-standard-kepler-SR2-win32_4.3.2.zip 2014-03-08 13:19 - 2014-03-08 13:19 - 00000000 ____D () C:\Users\Laptop\Photoshop 2014-03-08 13:19 - 2012-10-09 15:15 - 00000000 ____D () C:\Users\Laptop 2014-03-08 02:36 - 2014-03-08 02:33 - 55901581 _____ () C:\Users\Laptop\Downloads\Ghost Banner.zip 2014-03-08 02:00 - 2013-11-21 22:23 - 00000000 ____D () C:\Users\Laptop\Elagto 2014-03-05 09:26 - 2014-04-03 19:13 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-05 09:26 - 2014-04-03 19:13 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-05 09:26 - 2014-04-03 19:13 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys Files to move or delete: ==================== C:\Users\Laptop\AppData\Roaming\system.ini C:\ProgramData\27218346293184.exe C:\Users\Laptop\AppData\Roaming\msconfig.ini ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 19:35 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014 Ran by Laptop at 2014-04-03 19:54:27 Running from C:\Users\Laptop\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM-x32\...\{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.2.1.260 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.43 - Adobe Systems Incorporated) Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2016 - Avast Software) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.80 - Atheros Communications) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version: - Microsoft) EasyBox Key Decrypter (HKLM-x32\...\EasyBox Key Decrypter) (Version: 1.4 - WLanKeyFinder) Elgato Game Capture HD (HKLM-x32\...\{DDA520BF-FB7B-4052-91CC-CA3059D6F487}) (Version: 1.42.13.528 - Elgato Systems GmbH) Flashtool (HKLM-x32\...\Flashtool) (Version: 0.8.0.0 - Androxyde) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Freemake Video Converter Version 4.0.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.0.4 - Ellora Assets Corporation) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 32.0.1700.102 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden High-Definition Video Playback (x32 Version: 11.1.10400.2.65 - Nero AG) Hidden HP Product Detection (HKLM-x32\...\{4F38594F-2C4A-4C42-B2C4-505E225F6F80}) (Version: 11.14.0004 - HP) HxD Hex Editor Version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Maël Hörz) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation) Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft XNA Framework Redistributable 2.0 (HKLM-x32\...\{245F6C7A-0C22-4DE0-8202-2AAA620A1D3A}) (Version: 2.0.11128.1 - Microsoft Corporation) Minimal ADB and Fastboot version 1.1.3 (HKLM-x32\...\{DE46417A-9E9E-4BCD-BBDD-DA21943193BB}_is1) (Version: 1.1.3 - ) Mixxx 1.10.0 (HKLM-x32\...\Mixxx (1.10.0)) (Version: 1.10.0 - Verti Techology Group, Inc) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 25.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 25.0.1 (x86 de)) (Version: 25.0.1 - Mozilla) Mp3tag v2.57 (HKLM-x32\...\Mp3tag) (Version: v2.57 - Florian Heidenreich) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 11 (HKLM-x32\...\{8A7ABBD4-A617-4AE8-9C6D-1510DE46EC35}) (Version: 11.0.15500 - Nero AG) Nero 11 Cliparts (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Disc Menus 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Disc Menus 2 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Disc Menus 3 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Disc Menus Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Effects Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Image Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes 2 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes 3 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes 4 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 PiP Effects 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 PiP Effects Basic (x32 Version: 11.0.11300.12.0 - Nero AG) Hidden Nero 11 Video Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Video Transitions 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden Nero BackItUp 11 (x32 Version: 6.0.16000.13.100 - Nero AG) Hidden Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.10000.1.0 - Nero AG) Nero Burning ROM 11 (x32 Version: 11.0.12200.23.100 - Nero AG) Hidden Nero Burning ROM 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero ControlCenter 11 (x32 Version: 11.0.12300.0.23 - Nero AG) Hidden Nero ControlCenter 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Core Components 11 (x32 Version: 11.0.15000.1.12 - Nero AG) Hidden Nero CoverDesigner 11 (x32 Version: 6.0.10800.11.100 - Nero AG) Hidden Nero CoverDesigner 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Express 11 (x32 Version: 11.0.11700.23.100 - Nero AG) Hidden Nero Express 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Kwik Media (x32 Version: 1.10.19300.93.100 - Nero AG) Hidden Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden Nero Recode 11 (x32 Version: 5.0.13300.32.100 - Nero AG) Hidden Nero Recode 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100 - Nero AG) Hidden Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden Nero SoundTrax 11 (x32 Version: 5.0.10400.4.100 - Nero AG) Hidden Nero SoundTrax 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden Nero Update (x32 Version: 11.0.10623.22.0 - Nero AG) Hidden Nero Video 11 (x32 Version: 8.0.14000.21.100 - Nero AG) Hidden Nero Video 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero WaveEditor 11 (x32 Version: 6.0.10800.5.100 - Nero AG) Hidden Nero WaveEditor 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden nero.prerequisites.msi (x32 Version: 11.0.20007 - Nero AG) Hidden ObjectDock Free (HKLM-x32\...\ObjectDock Free) (Version: 2.0 - Stardock Corporation) ObjectDock Free (x32 Version: 2.0 - Stardock Corporation) Hidden PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden PS3 Theme Builder 2.5 (HKLM-x32\...\{3569D403-23C1-4432-9A33-3E82C47BE470}_is1) (Version: - LiliChan Software) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) Sony Mobile Update Service (HKLM-x32\...\Update Service) (Version: 2.13.7.201306141231 - Sony Mobile Communications AB) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.1.21 - Safer-Networking Ltd.) Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) TubeBox (HKLM-x32\...\{cb69ca7b-a22a-4654-b672-94507e0560cf}) (Version: 4.3.0.13 - Freetec) TubeBox (x32 Version: 4.3.0.13 - Freetec) Hidden UnHackMe 7.11 release (HKLM-x32\...\UnHackMe_is1) (Version: - Greatis Software, LLC.) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version: - Microsoft) Vegas Pro 12.0 (64-bit) (HKLM\...\{A7C8BBDE-FE98-11E1-87C9-F04DA23A5C58}) (Version: 12.0.367 - Sony) VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN) welcome (x32 Version: 11.0.21500.0.4 - Nero AG) Hidden WhiteCap (HKLM-x32\...\WhiteCap) (Version: 6.1.3 - SoundSpectrum) Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden WinRAR 5.00 beta 8 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.8 - win.rar GmbH) Xross Media Simulator 1.0 (HKLM-x32\...\{2A9B8C94-2781-4B36-941E-CB37957DE0C0}_is1) (Version: - Lili-Chan Software) ==================== Restore Points ========================= 17-03-2014 18:41:11 Windows Update 17-03-2014 19:14:32 Windows Update 19-03-2014 16:04:28 Windows Update 25-03-2014 15:04:54 Windows Update 29-03-2014 00:24:21 Windows Update 29-03-2014 00:49:41 Installed [PS3] Save Resigner 29-03-2014 00:58:31 Removed [PS3] Save Resigner 01-04-2014 14:29:58 Tweaking.com - Windows Repair 01-04-2014 15:06:00 Windows Update 02-04-2014 15:02:06 avast! antivirus system restore point ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0F62A33C-7001-446F-910E-F5E4EA5008A0} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\Freetec\SystemStore\SoftwareUpdater.Ui.exe Task: {112720AC-46AC-4450-8060-66F41F646040} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {7D131DE8-FA6A-4400-A93A-F9C65459AB7B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {7EABD3D1-8063-404C-B7DD-34CB1258C0D1} - System32\Tasks\Hoolapp Init => C:\Users\Laptop\AppData\Roaming\HOOLAP~1\Hoolapp.exe <==== ATTENTION Task: {8C3E1BFF-6E43-41E8-969E-C178F15070DE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-02] (AVAST Software) Task: {900F74C0-B5D9-4E59-BE4D-7F6E0D68BE42} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-22] (Google Inc.) Task: {9A9179D9-25B7-4D08-9649-5D6F98BC5DB7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-25] (Adobe Systems Incorporated) Task: {A918FEAF-A38F-4219-BE53-285BBD7A7F55} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-22] (Google Inc.) Task: {B0C889F3-3813-4C27-B595-E359251FD444} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {B50863F5-1C57-4D87-80CA-292C7D48C8C0} - System32\Tasks\Hoolapp for Android => C:\Users\Laptop\AppData\Roaming\HOOLAP~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {E0E1F458-B0F9-437A-92CC-6F0CE648C2EB} - System32\Tasks\Dealply => C:\Users\Laptop\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {F9A0B490-532B-4931-AE89-5D5F773C43F9} - System32\Tasks\Software Updater => C:\Program Files (x86)\Freetec\SystemStore\SoftwareUpdater.Bootstrapper.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe Task: C:\Windows\Tasks\Dealply.job => C:\Users\Laptop\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\UnHackMe Task Scheduler.job => C:\Program Files (x86)\UnHackMe\hackmon.exe ==================== Loaded Modules (whitelisted) ============= 2010-10-04 19:54 - 2010-10-04 19:54 - 00776704 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.dll 2013-10-16 19:02 - 2013-10-16 19:02 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2014-02-01 15:30 - 2014-02-01 15:29 - 00412160 __RSH () C:\ProgramData\27218346293184.exe 2012-10-10 14:42 - 2011-10-21 18:49 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-04-02 17:00 - 2014-04-02 16:11 - 02189312 _____ () C:\Program Files\AVAST Software\Avast\defs\14040204\algo.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00675840 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\DockShellHook.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00807936 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\CrashRpt.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00053760 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\zlib.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-04 19:54 - 2010-10-04 19:54 - 00094208 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Docklets\Clock\Clock.dll 2013-12-11 16:39 - 2013-12-11 16:39 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-01-29 21:33 - 2014-01-23 07:56 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libglesv2.dll 2014-01-29 21:33 - 2014-01-23 07:56 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libegl.dll 2014-01-29 21:33 - 2014-01-23 07:56 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll 2014-01-29 21:33 - 2014-01-23 07:57 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll 2014-01-29 21:33 - 2014-01-23 07:55 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== MSCONFIG\Services: AERTFilters => 2 MSCONFIG\Services: AxInstSV => 3 MSCONFIG\Services: bthserv => 3 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: NAUpdate => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCEPServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe MSCONFIG\startupreg: Hoolapp Android => "C:\Users\Laptop\AppData\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background MSCONFIG\startupreg: Spybot-S&D Cleaning => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean MSCONFIG\startupreg: svchospt => C:\Windows\SysWOW64\svchospt.exe MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/03/2014 07:52:19 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/03/2014 07:52:19 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (04/03/2014 07:52:09 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/03/2014 07:52:09 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (04/03/2014 07:51:58 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/03/2014 07:51:58 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (04/03/2014 07:51:48 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/03/2014 07:51:48 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (04/03/2014 07:51:38 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/03/2014 07:51:38 PM) (Source: ESENT) (User: ) Description: DllHost (1124) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. System errors: ============= Error: (04/03/2014 07:16:31 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (04/03/2014 07:12:21 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/02/2014 07:48:44 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/02/2014 06:35:15 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (04/02/2014 06:35:15 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%5 Error: (04/02/2014 06:35:14 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "TunMirror" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (04/02/2014 06:35:13 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%5 Error: (04/02/2014 05:47:04 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (04/02/2014 05:47:04 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%5 Error: (04/02/2014 05:46:58 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "TunMirror" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Microsoft Office Sessions: ========================= Error: (04/03/2014 07:52:19 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/03/2014 07:52:19 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert Error: (04/03/2014 07:52:09 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/03/2014 07:52:09 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert Error: (04/03/2014 07:51:58 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/03/2014 07:51:58 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert Error: (04/03/2014 07:51:48 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/03/2014 07:51:48 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert Error: (04/03/2014 07:51:38 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/03/2014 07:51:38 PM) (Source: ESENT)(User: ) Description: DllHost1124WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert ==================== Memory info =========================== Percentage of memory in use: 72% Total physical RAM: 1893.86 MB Available physical RAM: 513.29 MB Total Pagefile: 3787.72 MB Available Pagefile: 1949.91 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:297.99 GB) (Free:130.75 GB) NTFS Drive e: (HBCD 152) (Removable) (Total:7.6 GB) (Free:6.68 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 73256BD4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 8 GB) (Disk ID: 002D2684) Partition 1: (Active) - (Size=8 GB) - (Type=0C) ==================== End Of Log ============================ |
03.04.2014, 19:37 | #4 |
/// TB-Ausbilder | Probleme bei Downloads und Installationen Servus, Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start () C:\ProgramData\27218346293184.exe () C:\ProgramData\27218346293184.exe HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\Run: [Windows COM Host] - C:\Users\Laptop\Downloads\Cod Ghosts Patcher [PS3].exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows" HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\CurrentVersion\Windows: [Load] C:\ProgramData\27218346293184.exe <===== ATTENTION IFEO\avcenter.exe: [Debugger] nsjw.exe IFEO\avguard.exe: [Debugger] nsjw.exe IFEO\avp.exe: [Debugger] nsjw.exe IFEO\bdagent.exe: [Debugger] nsjw.exe IFEO\ccuac.exe: [Debugger] nsjw.exe IFEO\ComboFix.exe: [Debugger] nsjw.exe IFEO\egui.exe: [Debugger] nsjw.exe IFEO\hijackthis.exe: [Debugger] nsjw.exe IFEO\keyscrambler.exe: [Debugger] nsjw.exe IFEO\mbam.exe: [Debugger] nsjw.exe IFEO\MpCmdRun.exe: [Debugger] nsjw.exe IFEO\MSASCui.exe: [Debugger] nsjw.exe IFEO\MsMpEng.exe: [Debugger] nsjw.exe IFEO\msseces.exe: [Debugger] nsjw.exe IFEO\spybotsd.exe: [Debugger] nsjw.exe IFEO\wireshark.exe: [Debugger] nsjw.exe IFEO\zlclient.exe: [Debugger] nsjw.exe InternetURL: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> 0 Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () C:\Windows\SysWOW64\srvany.exe C:\Users\Laptop\AppData\Roaming\system.ini C:\ProgramData\27218346293184.exe C:\Users\Laptop\AppData\Roaming\msconfig.ini end Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Scan mit Combofix
Bitte poste mit deiner nächsten Antwort
|
03.04.2014, 20:32 | #5 |
| Probleme bei Downloads und InstallationenCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014 Ran by Laptop at 2014-04-03 20:59:50 Run:1 Running from C:\Users\Laptop\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** start () C:\ProgramData\27218346293184.exe () C:\ProgramData\27218346293184.exe HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\Run: [Windows COM Host] - C:\Users\Laptop\Downloads\Cod Ghosts Patcher [PS3].exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows" HKU\S-1-5-21-920411968-180493474-3306926501-1000\...\CurrentVersion\Windows: [Load] C:\ProgramData\27218346293184.exe <===== ATTENTION IFEO\avcenter.exe: [Debugger] nsjw.exe IFEO\avguard.exe: [Debugger] nsjw.exe IFEO\avp.exe: [Debugger] nsjw.exe IFEO\bdagent.exe: [Debugger] nsjw.exe IFEO\ccuac.exe: [Debugger] nsjw.exe IFEO\ComboFix.exe: [Debugger] nsjw.exe IFEO\egui.exe: [Debugger] nsjw.exe IFEO\hijackthis.exe: [Debugger] nsjw.exe IFEO\keyscrambler.exe: [Debugger] nsjw.exe IFEO\mbam.exe: [Debugger] nsjw.exe IFEO\MpCmdRun.exe: [Debugger] nsjw.exe IFEO\MSASCui.exe: [Debugger] nsjw.exe IFEO\MsMpEng.exe: [Debugger] nsjw.exe IFEO\msseces.exe: [Debugger] nsjw.exe IFEO\spybotsd.exe: [Debugger] nsjw.exe IFEO\wireshark.exe: [Debugger] nsjw.exe IFEO\zlclient.exe: [Debugger] nsjw.exe InternetURL: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> 0 Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () C:\Windows\SysWOW64\srvany.exe C:\Users\Laptop\AppData\Roaming\system.ini C:\ProgramData\27218346293184.exe C:\Users\Laptop\AppData\Roaming\msconfig.ini end ***************** [2976] C:\ProgramData\27218346293184.exe => Process closed successfully. [2976] C:\ProgramData\27218346293184.exe => Process closed successfully. HKU\S-1-5-21-920411968-180493474-3306926501-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Windows COM Host => Value deleted successfully. HKU\S-1-5-21-920411968-180493474-3306926501-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\avcenter.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\avguard.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\avp.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bdagent.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\ccuac.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\ComboFix.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\egui.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\hijackthis.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\keyscrambler.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\mbam.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\MpCmdRun.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\MSASCui.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\MsMpEng.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\msseces.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\spybotsd.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\wireshark.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\zlclient.exe => Key deleted successfully. "C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url" => Could not move. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Value deleted successfully. HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully. HKCR\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Value deleted successfully. HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Key not found. KMService => Service deleted successfully. C:\Windows\SysWOW64\srvany.exe => Moved successfully. C:\Users\Laptop\AppData\Roaming\system.ini => Moved successfully. C:\ProgramData\27218346293184.exe => Moved successfully. C:\Users\Laptop\AppData\Roaming\msconfig.ini => Moved successfully. ==== End of Fixlog ==== |
03.04.2014, 20:35 | #6 |
/// TB-Ausbilder | Probleme bei Downloads und Installationen Servus, gut gemacht. Dann bitte jetzt ComboFix ausführen. |
03.04.2014, 20:46 | #7 |
| Probleme bei Downloads und InstallationenCode:
ATTFilter ComboFix 14-04-03.01 - Laptop 03.04.2014 21:15:29.1.2 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.1894.495 [GMT 2:00] ausgeführt von:: c:\users\Laptop\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B} SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Laptop\AppData\Local\Temp\{3b18db8f-17e6-2e4a-721b-f907ae159235}\amd64\WdfCoInstaller01009.dll c:\users\Laptop\AppData\Local\Temp\{3b18db8f-17e6-2e4a-721b-f907ae159235}\amd64\WinUSBCoInstaller2.dll c:\users\Laptop\AppData\Local\Temp\VCB\Graphics\NewUI.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\ARB\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\CHS\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\CHT\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\CSY\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\DAN\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\DEU\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\ELL\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\ENG\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\ENU\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\ESM\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\ESP\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\FIN\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\FRA\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\FRC\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\HEB\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\HUN\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\ITA\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\JPN\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\KOR\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\NLD\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\NOR\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\PLK\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\PTG\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\RUS\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\SVE\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\THA\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\TRK\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\Languages\ZHH\VCBResources.dll c:\users\Laptop\AppData\Local\Temp\VCB\NewUI.dll c:\users\Laptop\AppData\Local\Temp\VCB\Setup.exe c:\users\Laptop\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db c:\windows\SysWow64\PARTIZAN.EXE . . ((((((((((((((((((((((( Dateien erstellt von 2014-03-03 bis 2014-04-03 )))))))))))))))))))))))))))))) . . 2014-04-03 19:24 . 2014-04-03 19:24 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-04-03 19:20 . 2014-04-03 19:20 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{98A6B84A-477D-4A44-A85A-98EB7765E6E8}\offreg.dll 2014-04-03 17:52 . 2014-04-03 18:59 -------- d-----w- C:\FRST 2014-04-03 17:13 . 2014-04-03 17:13 -------- d-----w- c:\program files (x86)\ Malwarebytes Anti-Malware 2014-04-03 17:13 . 2014-03-05 07:26 63192 ----a-w- c:\windows\system32\drivers\mwac.sys 2014-04-03 17:13 . 2014-03-05 07:26 88280 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2014-04-03 17:13 . 2014-03-05 07:26 25816 ----a-w- c:\windows\system32\drivers\mbam.sys 2014-04-02 17:07 . 2014-04-02 17:07 -------- d-----w- c:\programdata\Malwarebytes 2014-04-02 16:29 . 2014-04-02 16:29 40720 ----a-w- c:\windows\system32\Partizan.exe 2014-04-02 16:27 . 2014-04-02 16:27 -------- d-----w- C:\@RestoreQuarantine 2014-04-02 16:22 . 2014-04-02 16:22 35816 ----a-w- c:\windows\SysWow64\drivers\Partizan.sys 2014-04-02 16:22 . 2014-04-02 16:22 2 --shatr- c:\windows\winstart.bat 2014-04-02 16:22 . 2014-03-28 11:01 12800 ----a-w- c:\windows\SysWow64\drivers\UnHackMeDrv.sys 2014-04-02 16:22 . 2014-04-02 16:32 -------- d-----w- c:\program files (x86)\UnHackMe 2014-04-02 15:06 . 2014-04-02 15:06 43152 ----a-w- c:\windows\avastSS.scr 2014-04-01 15:08 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{98A6B84A-477D-4A44-A85A-98EB7765E6E8}\mpengine.dll 2014-04-01 14:40 . 2014-04-01 14:41 181064 ----a-w- c:\windows\PSEXESVC.EXE 2014-04-01 14:32 . 2014-04-01 14:32 -------- d-----w- C:\RegBackup 2014-03-29 00:51 . 2014-03-29 00:51 -------- d-----w- c:\programdata\Caphyon 2014-03-29 00:47 . 2014-03-29 00:48 -------- d-----w- c:\users\Laptop\AppData\Roaming\The Prince of Codes 2014-03-17 18:59 . 2014-01-28 02:32 228864 ----a-w- c:\windows\system32\wwansvc.dll 2014-03-17 18:59 . 2014-01-29 02:32 484864 ----a-w- c:\windows\system32\wer.dll 2014-03-17 18:59 . 2014-01-29 02:06 381440 ----a-w- c:\windows\SysWow64\wer.dll 2014-03-17 18:59 . 2014-02-07 01:23 3156480 ----a-w- c:\windows\system32\win32k.sys 2014-03-17 18:58 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll 2014-03-17 18:58 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll 2014-03-17 18:58 . 2014-02-04 02:32 624128 ----a-w- c:\windows\system32\qedit.dll 2014-03-17 18:58 . 2014-02-04 02:04 509440 ----a-w- c:\windows\SysWow64\qedit.dll 2014-03-12 14:09 . 2014-02-24 04:30 -------- d-----w- c:\program files\eclipse 2014-03-08 12:33 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\SysWow64\mstscax.dll 2014-03-08 12:33 . 2014-01-03 22:44 6574592 ----a-w- c:\windows\system32\mstscax.dll 2014-03-08 11:19 . 2014-03-08 11:19 -------- d-----w- c:\users\Laptop\Photoshop . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-04-02 15:06 . 2014-02-27 17:11 84816 ----a-w- c:\windows\system32\drivers\aswStm.sys 2014-04-02 15:06 . 2013-03-19 04:11 208928 ----a-w- c:\windows\system32\drivers\aswVmm.sys 2014-04-02 15:06 . 2012-10-22 19:28 1039096 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2014-04-02 15:06 . 2013-03-19 04:11 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys 2014-04-02 15:06 . 2012-10-22 19:28 423240 ----a-w- c:\windows\system32\drivers\aswSP.sys 2014-04-02 15:06 . 2012-10-22 19:28 79184 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2014-04-02 15:06 . 2012-10-22 19:28 334648 ----a-w- c:\windows\system32\aswBoot.exe 2014-04-02 15:06 . 2012-10-22 19:28 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys 2014-03-19 16:05 . 2012-10-23 01:05 90015360 ----a-w- c:\windows\system32\MRT.exe 2014-01-25 16:51 . 2012-10-13 08:17 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-01-25 16:51 . 2012-10-13 08:17 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-04-02 3854640] . c:\users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Google.com.url [2014-4-2 59] Stardock ObjectDock.lnk - c:\program files (x86)\Stardock\ObjectDockFree\ObjectDock.exe [2010-10-6 3768176] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "EnableLinkedConnections"= 1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0sdnclean64.exe\0Partizan . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x] R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x] R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x] R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x] R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x] R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x] R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R4 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x] S0 aswRvrt;avast! Revert; [x] S0 aswVmm;avast! VM Monitor; [x] S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x] S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x] S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x] S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x] S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x] S3 ElgatoGC658Y;Elgato Game Capture;c:\windows\system32\Drivers\ElgatoGC658.sys;c:\windows\SYSNATIVE\Drivers\ElgatoGC658.sys [x] S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-01-29 19:27 1211672 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.102\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2014-02-02 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-13 16:51] . 2014-04-02 c:\windows\Tasks\avast! Emergency Update.job - c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-02 15:06] . 2014-02-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-22 19:28] . 2014-02-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-22 19:28] . 2014-04-02 c:\windows\Tasks\UnHackMe Task Scheduler.job - c:\program files (x86)\UnHackMe\hackmon.exe [2014-04-02 11:01] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1] @="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}" [HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}] 2013-10-16 17:02 3358064 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2] @="{853B7E05-C47D-4985-909A-D0DC5C6D7303}" [HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}] 2013-10-16 17:02 3358064 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3] @="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}" [HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}] 2013-10-16 17:02 3358064 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2014-04-02 15:06 290888 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-10-18 7509096] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-11-07 171992] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-11-07 399832] "Persistence"="c:\windows\system32\igfxpers.exe" [2013-11-07 442328] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = <local> IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - c:\users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - about:blank FF - prefs.js: browser.search.defaulturl - FF - prefs.js: keyword.URL - FF - prefs.js: network.proxy.http_port - FF - prefs.js: network.proxy.type - FF - prefs.js: network.proxy.http - FF - user.js: browser.newtab.url - FF - user.js: extensions.BabylonToolbar.admin - false FF - user.js: extensions.BabylonToolbar.aflt - babsst FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB} FF - user.js: extensions.BabylonToolbar.dfltLng - en FF - user.js: extensions.BabylonToolbar.excTlbr - false FF - user.js: extensions.BabylonToolbar.id - 2cd8e3170000000000009cb70dd74eb3 FF - user.js: extensions.BabylonToolbar.instlDay - 15634 FF - user.js: extensions.BabylonToolbar.instlRef - sst FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar.prtnrId - babylon FF - user.js: extensions.BabylonToolbar.tlbrId - base FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=2cd8e3170000000000009cb70dd74eb3&q= FF - user.js: extensions.BabylonToolbar.vrsn - 1.8.3.8 FF - user.js: extensions.BabylonToolbar.vrsni - 1.8.3.8 FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.8.3.811:13 FF - user.js: extensions.shownSelectionUI - true FF - user.js: extensions.delta.tlbrSrchUrl - FF - user.js: extensions.delta.id - 2cd8e3170000000000002eb70dd74eb3 FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} FF - user.js: extensions.delta.instlDay - 15888 FF - user.js: extensions.delta.vrsn - 1.8.21.5 FF - user.js: extensions.delta.vrsni - 1.8.21.5 FF - user.js: extensions.delta.vrsnTs - 1.8.21.514:23 FF - user.js: extensions.delta.prtnrId - delta FF - user.js: extensions.delta.prdct - delta FF - user.js: extensions.delta.aflt - babsst FF - user.js: extensions.delta.smplGrp - none FF - user.js: extensions.delta.tlbrId - base FF - user.js: extensions.delta.instlRef - sst FF - user.js: extensions.delta.dfltLng - de FF - user.js: extensions.delta.excTlbr - false FF - user.js: extensions.delta.ffxUnstlRst - true FF - user.js: extensions.delta.admin - false FF - user.js: extensions.delta_i.babTrack - affID=119820&tsp=4931 FF - user.js: extensions.delta_i.babExt - FF - user.js: extensions.delta_i.srcExt - ss FF - user.js: extensions.delta.autoRvrt - false FF - user.js: extensions.delta.rvrt - false FF - user.js: extensions.delta.newTab - false . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Notify-SDWinLogon - SDWinLogon.dll HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start AddRemove-Flashtool - c:\flashtool\uninstall.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*] @="?????????????????? v1" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID] @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*] @="?????????????????? v2" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID] @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-04-03 21:29:15 ComboFix-quarantined-files.txt 2014-04-03 19:29 . Vor Suchlauf: 18 Verzeichnis(se), 143.127.511.040 Bytes frei Nach Suchlauf: 23 Verzeichnis(se), 144.123.584.512 Bytes frei . - - End Of File - - CD1DC569BAFCBC23DB26498F860CE7E4 A36C5E4F47E84449FF07ED3517B43A31 Dankeschön |
04.04.2014, 17:43 | #8 |
/// TB-Ausbilder | Probleme bei Downloads und Installationen Servus, dafür sind wir ja da. so geht es weiter: Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 3 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 4 Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/
Bitte poste mit deiner nächsten Antwort
|
04.04.2014, 22:29 | #9 |
| Probleme bei Downloads und InstallationenCode:
ATTFilter # AdwCleaner v3.023 - Bericht erstellt am 04/04/2014 um 20:13:11 # Aktualisiert 01/04/2014 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) # Benutzername : Laptop - LAPTOP-PC # Gestartet von : C:\Users\Laptop\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\Tarma Installer Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater Ordner Gelöscht : C:\Users\Laptop\AppData\Local\PackageAware Ordner Gelöscht : C:\Users\Laptop\AppData\LocalLow\BabylonToolbar Ordner Gelöscht : C:\Users\Laptop\AppData\Roaming\DealPly Ordner Gelöscht : C:\Users\Laptop\AppData\Roaming\OCS Ordner Gelöscht : C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\SweetPacksToolbarData Datei Gelöscht : C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\invalidprefs.js Datei Gelöscht : C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\searchplugins\Web Search.xml Datei Gelöscht : C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\user.js Datei Gelöscht : C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx Datei Gelöscht : C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage Datei Gelöscht : C:\Windows\System32\Tasks\Dealply Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater Ui Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ocr@babylon.com] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftwareUpdater_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBatBrowse_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBatBrowse_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS Schlüssel Gelöscht : HKCU\Software\59558ad1e13fed46 Schlüssel Gelöscht : HKLM\SOFTWARE\59558ad1e13fed46 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_tubebox_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_tubebox_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Schlüssel Gelöscht : HKCU\Software\BI [#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar Schlüssel Gelöscht : HKCU\Software\ilivid Schlüssel Gelöscht : HKCU\Software\Iminent Schlüssel Gelöscht : HKCU\Software\InstallCore Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\UpdateStar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsContainer Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyricspal Schlüssel Gelöscht : HKLM\Software\DataMngr Schlüssel Gelöscht : HKLM\Software\Freeze.com Schlüssel Gelöscht : HKLM\Software\Iminent Schlüssel Gelöscht : HKLM\Software\qvo6Software Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16521 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] -\\ Mozilla Firefox v25.0.1 (de) [ Datei : C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\prefs.js ] Zeile gelöscht : user_pref("extensions.BabylonToolbar.admin", false); Zeile gelöscht : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "en"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.excTlbr", false); Zeile gelöscht : user_pref("extensions.BabylonToolbar.id", "2cd8e3170000000000009cb70dd74eb3"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15634"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrId", "base"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=2cd8e3170000000000009cb70dd74eb3&q="); Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8"); Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8"); Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.811:13:21"); Zeile gelöscht : user_pref("extensions.delta.admin", false); Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst"); Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false"); Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de"); Zeile gelöscht : user_pref("extensions.delta.excTlbr", false); Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true); Zeile gelöscht : user_pref("extensions.delta.id", "2cd8e3170000000000002eb70dd74eb3"); Zeile gelöscht : user_pref("extensions.delta.instlDay", "15888"); Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst"); Zeile gelöscht : user_pref("extensions.delta.newTab", false); Zeile gelöscht : user_pref("extensions.delta.prdct", "delta"); Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta"); Zeile gelöscht : user_pref("extensions.delta.rvrt", "false"); Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none"); Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base"); Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", ""); Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.21.5"); Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.21.514:23:55"); Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.21.5"); Zeile gelöscht : user_pref("extensions.delta_i.babExt", ""); Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119820&tsp=4931"); Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss"); -\\ Google Chrome v32.0.1700.102 [ Datei : C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [12542 octets] - [04/04/2014 20:10:38] AdwCleaner[S0].txt - [11463 octets] - [04/04/2014 20:13:11] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11524 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.3 (03.23.2014:1) OS: Windows 7 Ultimate x64 Ran by Laptop on 04.04.2014 at 20:20:37,42 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-920411968-180493474-3306926501-1000\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Laptop\AppData\Roaming\mozilla\firefox\profiles\wy9eyxh5.default\minidumps [23 files] ~~~ Chrome Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 04.04.2014 at 20:31:18,20 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Protection, 04.04.2014 20:50:49, SYSTEM, LAPTOP-PC, Protection, Malware Protection, Starting, Protection, 04.04.2014 20:50:49, SYSTEM, LAPTOP-PC, Protection, Malware Protection, Started, Protection, 04.04.2014 20:50:49, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Starting, Protection, 04.04.2014 20:51:32, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Started, Update, 04.04.2014 20:52:52, SYSTEM, LAPTOP-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1, Update, 04.04.2014 20:52:56, SYSTEM, LAPTOP-PC, Manual, Malware Database, 2014.3.4.9, 2014.4.4.6, Protection, 04.04.2014 20:52:57, SYSTEM, LAPTOP-PC, Protection, Refresh, Starting, Protection, 04.04.2014 20:52:57, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Stopping, Protection, 04.04.2014 20:52:57, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Stopped, Protection, 04.04.2014 20:53:02, SYSTEM, LAPTOP-PC, Protection, Refresh, Success, Protection, 04.04.2014 20:53:02, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Starting, Protection, 04.04.2014 20:53:03, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Started, Protection, 04.04.2014 21:50:17, SYSTEM, LAPTOP-PC, Protection, Malware Protection, Starting, Protection, 04.04.2014 21:50:17, SYSTEM, LAPTOP-PC, Protection, Malware Protection, Started, Protection, 04.04.2014 21:50:17, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Starting, Protection, 04.04.2014 21:50:56, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Started, (end) Code:
ATTFilter Zoek.exe v5.0.0.0 Updated 07-March-2014 Tool run by Laptop on 04.04.2014 at 22:56:28,44. Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Laptop\Desktop\zoek (1).exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 04.04.2014 23:02:25 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-920411968-180493474-3306926501-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== FireFox Fix ====================== Deleted from C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\prefs.js: user_pref("browser.startup.homepage", "about:blank"); user_pref("browser.search.defaulturl", ""); user_pref("browser.newtab.url", ""); user_pref("browser.search.defaultEnginename", "Google"); user_pref("browser.search.defaultEnginename,S", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.selectedEngine,S", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("browser.search.order.1,S", "Google"); user_pref("keyword.URL", ""); Added to C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\prefs.js: user_pref("browser.startup.homepage", "hxxp://www.google.com"); user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.newtab.url", "hxxp://www.google.com/"); user_pref("browser.search.defaultengine", "Google"); user_pref("browser.search.defaultenginename", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.search.suggest.enabled", true); user_pref("browser.search.useDBForOrder", true); ==== Deleting Files \ Folders ====================== C:\Users\Laptop\.android deleted C:\PROGRA~2\GUM709D.tmp deleted C:\PROGRA~2\shopping-preise.de deleted C:\Users\Laptop\AppData\Roaming\HoolappforAndroid deleted C:\PROGRA~3\Package Cache deleted C:\windows\SysNative\Tasks\Hoolapp for Android deleted C:\windows\SysNative\Tasks\Hoolapp Init deleted C:\Users\Laptop\Downloads\adt-bundle-windows-x86_64-20130917.zip deleted C:\Users\Laptop\Downloads\adt-bundle-windows-x86_64-20131030.zip deleted C:\Windows\wininit.ini deleted C:\Windows\Syswow64\InstallUtil.InstallLog deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [02.04.2014 17:06] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default - Firebug - %ProfilePath%\extensions\firebug@software.joehewitt.com.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default 2557FBC582910A71CDEB0F22886D118D - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll - Shockwave Flash ==== Chrome Look ====================== User-Agent Switcher for Chrome - Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg I \u003C3 House Music - Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbihiclmkdmbnihofkkhlmdefkclbfkj Stylish - Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe avast Online Security - Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki vGet Extension (Video Downloader DLNA) - Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\hniladkejehjfchadikcbjmgjaogciic ==== Chrome Fix ====================== C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\hniladkejehjfchadikcbjmgjaogciic deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Use Search Asst"="yes" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl] "Default"="hxxp://www.google.com" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl] "Default"="hxxp://www.google.com" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "Default_Search_URL"="hxxp://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Use Search Asst"="no" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="hxxp://search.msn.com/results.asp?q=%s" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl] "(Default)"="hxxp://search.msn.com/results.asp?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="hxxp://search.msn.com/results.asp?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Reset Google Chrome ====================== C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hoolapp Android deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Laptop\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Laptop\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Laptop\AppData\Local\Mozilla\Firefox\Profiles\wy9eyxh5.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=132 folders=57 1003975761 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\temp emptied successfully C:\Users\Default User\AppData\Local\temp emptied successfully C:\Users\Laptop\AppData\Local\Temp will be emptied at reboot C:\Users\Public\AppData\Local\temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Laptop\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on 04.04.2014 at 23:24:08,84 ====================== |
05.04.2014, 11:02 | #10 |
/// TB-Ausbilder | Probleme bei Downloads und Installationen Servus, du hast die falsche Logdatei von MBAM gepostet. Das ist die Logdatei der Echtzeitüberwachung, ich will die Logdatei des letzten Suchlaufs sehen. Bitte nachreichen, dann kann es weitergehen. |
05.04.2014, 17:14 | #11 |
| Probleme bei Downloads und InstallationenCode:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 04.04.2014 Suchlauf-Zeit: 21:47:57 Logdatei: mbam1.txt Administrator: Ja Version: 2.00.0.1000 Malware Datenbank: v2014.04.04.06 Rootkit Datenbank: v2014.03.27.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Chameleon: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Laptop Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 259771 Verstrichene Zeit: 54 Min, 22 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Shuriken: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 1 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[0ef2af5114ecb050600eba5a7a8a48b8] Ordner: 0 (No malicious items detected) Dateien: 15 Trojan.MSIL, C:\ProgramData\{$1284-9213-2940-1289$}\4813394.exe, In Quarantäne, [25db59a7897777895a7fce85bf4233cd], Trojan.MSIL, C:\ProgramData\{$1284-9213-2940-1289$}\comhost.exe, In Quarantäne, [6e9242bebd4330d06376df74dd243ac6], Trojan.Agent, C:\Windows\SysWOW64\svchosptd.exe, In Quarantäne, [709005fb23dd01ff22d8ed2f11f301ff], PUP.Optional.BundleInstaller.A, C:\Users\Laptop\Downloads\superoneclick-windows-downloader.exe, In Quarantäne, [ce32b44c7c84a858ab2a481d70911fe1], PUP.RiskwareTool.CK, C:\Users\Laptop\Downloads\vegas.pro.12.-patch.rar, In Quarantäne, [b54bb24e30d032ce20c76528fe0353ad], PUP.Optional.InstallBrain.A, C:\Users\Laptop\Downloads\cbsidlm-tr1_15-Kingo_Android_Root-BP-75996768 (1).exe, In Quarantäne, [847ca95701ffc23ef15dcd17a3607a86], PUP.Optional.InstallBrain.A, C:\Users\Laptop\Downloads\cbsidlm-tr1_15-Kingo_Android_Root-BP-75996768.exe, In Quarantäne, [22de6f917c8411efed61e30191729070], Trojan.MSIL, C:\Users\Laptop\Downloads\Cod Ghosts Patcher [PS3].exe, In Quarantäne, [1ae615eb9d63c23e7663a4af9071c53b], PUP.Optional.InstallCore.A, C:\Users\Laptop\Downloads\modio-5-23-en-win-setup.exe, In Quarantäne, [bc44eb15b84809f73dda51e024dc8b75], PUP.Optional.OpenCandy, C:\Users\Laptop\Downloads\MyPhoneExplorer_Setup_1.8.5.exe, In Quarantäne, [23dd9d6313ede61a693c300753b1df21], PUP.Optional.Softonic.A, C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_jdownloader.exe, In Quarantäne, [857bf10fc63aea1693f7f91fe41deb15], PUP.Optional.Softonic.A, C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_malwarebytes-anti-malware (1).exe, In Quarantäne, [9967fc045fa1619f7119d8400ff26d93], PUP.Optional.Softonic.A, C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_malwarebytes-anti-malware.exe, In Quarantäne, [47b9c23e9c6413ed2f5b9d7b24dd946c], PUP.Optional.Bandoo, C:\Users\Laptop\Downloads\iLividSetup-r484-n-bc.exe, In Quarantäne, [70903cc4c04040c0161541c101006997], PUP.Optional.Vittalia, C:\Users\Laptop\Downloads\installer_microsoft_office_publisher_2010_Deutsch.exe, In Quarantäne, [0cf413ed05fba45cb87ece80ad5408f8], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 04.04.2014 Suchlauf-Zeit: 21:47:57 Logdatei: mbam1.txt Administrator: Ja Version: 2.00.0.1000 Malware Datenbank: v2014.04.04.06 Rootkit Datenbank: v2014.03.27.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Chameleon: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Laptop Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 259771 Verstrichene Zeit: 54 Min, 22 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Shuriken: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 1 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[0ef2af5114ecb050600eba5a7a8a48b8] Ordner: 0 (No malicious items detected) Dateien: 15 Trojan.MSIL, C:\ProgramData\{$1284-9213-2940-1289$}\4813394.exe, In Quarantäne, [25db59a7897777895a7fce85bf4233cd], Trojan.MSIL, C:\ProgramData\{$1284-9213-2940-1289$}\comhost.exe, In Quarantäne, [6e9242bebd4330d06376df74dd243ac6], Trojan.Agent, C:\Windows\SysWOW64\svchosptd.exe, In Quarantäne, [709005fb23dd01ff22d8ed2f11f301ff], PUP.Optional.BundleInstaller.A, C:\Users\Laptop\Downloads\superoneclick-windows-downloader.exe, In Quarantäne, [ce32b44c7c84a858ab2a481d70911fe1], PUP.RiskwareTool.CK, C:\Users\Laptop\Downloads\vegas.pro.12.-patch.rar, In Quarantäne, [b54bb24e30d032ce20c76528fe0353ad], PUP.Optional.InstallBrain.A, C:\Users\Laptop\Downloads\cbsidlm-tr1_15-Kingo_Android_Root-BP-75996768 (1).exe, In Quarantäne, [847ca95701ffc23ef15dcd17a3607a86], PUP.Optional.InstallBrain.A, C:\Users\Laptop\Downloads\cbsidlm-tr1_15-Kingo_Android_Root-BP-75996768.exe, In Quarantäne, [22de6f917c8411efed61e30191729070], Trojan.MSIL, C:\Users\Laptop\Downloads\Cod Ghosts Patcher [PS3].exe, In Quarantäne, [1ae615eb9d63c23e7663a4af9071c53b], PUP.Optional.InstallCore.A, C:\Users\Laptop\Downloads\modio-5-23-en-win-setup.exe, In Quarantäne, [bc44eb15b84809f73dda51e024dc8b75], PUP.Optional.OpenCandy, C:\Users\Laptop\Downloads\MyPhoneExplorer_Setup_1.8.5.exe, In Quarantäne, [23dd9d6313ede61a693c300753b1df21], PUP.Optional.Softonic.A, C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_jdownloader.exe, In Quarantäne, [857bf10fc63aea1693f7f91fe41deb15], PUP.Optional.Softonic.A, C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_malwarebytes-anti-malware (1).exe, In Quarantäne, [9967fc045fa1619f7119d8400ff26d93], PUP.Optional.Softonic.A, C:\Users\Laptop\Downloads\SoftonicDownloader_fuer_malwarebytes-anti-malware.exe, In Quarantäne, [47b9c23e9c6413ed2f5b9d7b24dd946c], PUP.Optional.Bandoo, C:\Users\Laptop\Downloads\iLividSetup-r484-n-bc.exe, In Quarantäne, [70903cc4c04040c0161541c101006997], PUP.Optional.Vittalia, C:\Users\Laptop\Downloads\installer_microsoft_office_publisher_2010_Deutsch.exe, In Quarantäne, [0cf413ed05fba45cb87ece80ad5408f8], Physische Sektoren: 0 (No malicious items detected) (end) |
05.04.2014, 18:17 | #12 |
/// TB-Ausbilder | Probleme bei Downloads und Installationen Servus, Wir spüren die letzten Reste auf, damit wir sie später entfernen können: Kontrollscan mit FRST Führe wie zuvor beschrieben einen Scan mit FRST aus. Setze dazu einen Haken bei Addition.txt rechts unten und klicke auf Scan. Es werden zwei Logdateien erzeugt. Poste mir diese. Gibt es noch Probleme mit dem Download oder Installationen? Wenn ja, welche? Wie läuft der Rechner derzeit? Bitte poste mit deiner nächsten Antwort
|
05.04.2014, 19:12 | #13 |
| Probleme bei Downloads und Installationen FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by Laptop (administrator) on LAPTOP-PC on 05-04-2014 20:01:32 Running from C:\Users\Laptop\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7509096 2011-10-18] (Realtek Semiconductor) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-02] (AVAST Software) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] InternetURL: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> C:\ProgramData\27218346293184.exe Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (Stardock) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC2CBB12E83A8CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect119b.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default FF NewTab: hxxp://www.google.com/ FF DefaultSearchEngine: Google FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q= FF NetworkProxy: "autoconfig_url", "" FF NetworkProxy: "http", "" FF NetworkProxy: "http_port", "" FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "type", "" FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Firebug - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\Extensions\firebug@software.joehewitt.com.xpi [2013-10-16] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-10-22] Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-04] CHR Extension: (Google Drive) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-04] CHR Extension: (YouTube) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-10-23] CHR Extension: (Google-Suche) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-10-23] CHR Extension: (Google Wallet) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21] CHR Extension: (Google Mail) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-10-23] ==================== Services (Whitelisted) ================= R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-09] (Atheros) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-02] (AVAST Software) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation) S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) S2 KMSServerService; C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\KMSServerService.exe [X] S2 TunMirror; "C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\TunMirror.exe" [X] ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-02] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-02] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-02] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-02] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-02] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-02] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-02] () S3 ElgatoGC658Y; C:\Windows\System32\Drivers\ElgatoGC658.sys [50288 2012-11-12] (UB658) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-05] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-03-05] (Malwarebytes Corporation) U0 Partizan; C:\Windows\SysWOW64\drivers\Partizan.sys [35816 2014-04-02] (Greatis Software) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-05 18:06 - 2014-04-05 18:06 - 00003438 _____ () C:\Users\Laptop\Desktop\mbam1.txt 2014-04-04 23:19 - 2014-04-04 22:56 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-04-04 23:13 - 2014-04-04 23:24 - 00000000 ____D () C:\zoek 2014-04-04 23:01 - 2014-04-04 23:24 - 00009974 _____ () C:\zoek-results.log 2014-04-04 22:56 - 2014-04-04 23:17 - 00000000 ____D () C:\zoek_backup 2014-04-04 22:53 - 2014-04-04 22:53 - 01285120 _____ () C:\Users\Laptop\Desktop\zoek (1).exe 2014-04-04 22:50 - 2014-04-04 22:51 - 01243715 _____ () C:\Users\Laptop\Downloads\zoek.exe 2014-04-04 22:44 - 2014-04-04 22:44 - 00001657 _____ () C:\Users\Laptop\Desktop\mbam.txt 2014-04-04 20:50 - 2014-04-05 18:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-04 20:50 - 2014-04-04 20:50 - 00001139 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-04 20:50 - 2014-04-04 20:50 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-04 20:50 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-04 20:50 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-04 20:50 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-04 20:49 - 2014-04-04 20:49 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000 (1).exe 2014-04-04 20:31 - 2014-04-04 20:31 - 00001139 _____ () C:\Users\Laptop\Desktop\JRT.txt 2014-04-04 20:20 - 2014-04-04 20:20 - 00000000 ____D () C:\Windows\ERUNT 2014-04-04 20:18 - 2014-04-04 20:19 - 01038974 _____ (Thisisu) C:\Users\Laptop\Desktop\JRT.exe 2014-04-04 20:10 - 2014-04-04 20:13 - 00000000 ____D () C:\AdwCleaner 2014-04-04 20:08 - 2014-04-04 20:07 - 01426178 _____ () C:\Users\Laptop\Desktop\adwcleaner.exe 2014-04-04 20:07 - 2014-04-04 20:07 - 01426178 _____ () C:\Users\Laptop\Downloads\adwcleaner.exe 2014-04-04 12:27 - 2014-01-10 16:54 - 00000000 ____D () C:\Users\Laptop\About Berlin Vol 5 (2014) 2014-04-04 07:59 - 2014-04-04 10:11 - 406958951 _____ () C:\Users\Laptop\Downloads\About Berlin Vol 5 (2014).rar 2014-04-03 22:07 - 2014-04-04 23:22 - 00087728 _____ () C:\Windows\SysWOW64\PARTIZAN.TXT 2014-04-03 21:29 - 2014-04-03 21:29 - 00018826 _____ () C:\ComboFix.txt 2014-04-03 21:12 - 2014-04-03 21:29 - 00000000 ____D () C:\Qoobox 2014-04-03 21:12 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-04-03 21:12 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-04-03 21:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-04-03 21:12 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-04-03 21:12 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-04-03 21:12 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-04-03 21:12 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-04-03 21:12 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-04-03 21:11 - 2014-04-03 21:26 - 00000000 ____D () C:\Windows\erdnt 2014-04-03 21:09 - 2014-04-03 21:09 - 05193944 ____R (Swearware) C:\Users\Laptop\Desktop\ComboFix.exe 2014-04-03 19:54 - 2014-04-03 19:56 - 00035817 _____ () C:\Users\Laptop\Desktop\Addition.txt 2014-04-03 19:52 - 2014-04-05 20:02 - 00012530 _____ () C:\Users\Laptop\Desktop\FRST.txt 2014-04-03 19:52 - 2014-04-05 20:01 - 00000000 ____D () C:\FRST 2014-04-03 19:49 - 2014-04-03 19:49 - 02157056 _____ (Farbar) C:\Users\Laptop\Desktop\FRST64.exe 2014-04-03 19:13 - 2014-04-03 11:15 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Desktop\mbam-setup-2.0.0.1000.exe 2014-04-02 19:07 - 2014-04-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-02 19:06 - 2014-04-02 19:06 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000.exe 2014-04-02 18:29 - 2014-04-02 18:30 - 00030711 _____ () C:\Windows\SysWOW64\Partizan.RRI 2014-04-02 18:29 - 2014-04-02 18:29 - 00040720 _____ (Greatis Software) C:\Windows\system32\Partizan.exe 2014-04-02 18:27 - 2014-04-02 18:27 - 00000000 ____D () C:\@RestoreQuarantine 2014-04-02 18:22 - 2014-04-02 18:32 - 00000000 ____D () C:\Users\Laptop\Documents\RegRun2 2014-04-02 18:22 - 2014-04-02 18:32 - 00000000 ____D () C:\Program Files (x86)\UnHackMe 2014-04-02 18:22 - 2014-04-02 18:31 - 00000000 ____D () C:\Users\Public\Documents\regruninfo 2014-04-02 18:22 - 2014-04-02 18:22 - 00035816 _____ (Greatis Software) C:\Windows\SysWOW64\Drivers\Partizan.sys 2014-04-02 18:22 - 2014-04-02 18:22 - 00001044 _____ () C:\Users\Laptop\Desktop\UnHackMe.lnk 2014-04-02 18:22 - 2014-04-02 18:22 - 00000418 _____ () C:\Windows\Tasks\UnHackMe Task Scheduler.job 2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\winstart.bat 2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\SysWOW64\AUTOEXEC.NT 2014-04-02 18:22 - 2014-03-28 13:02 - 15320504 _____ (Greatis Software, LLC. ) C:\Users\Laptop\Desktop\unhackme_setup.exe 2014-04-02 18:22 - 2014-03-28 13:01 - 00012800 _____ (Greatis Software, LLC.) C:\Windows\SysWOW64\Drivers\UnHackMeDrv.sys 2014-04-02 18:19 - 2014-04-02 18:20 - 15295838 _____ () C:\Users\Laptop\Downloads\unhackme.zip 2014-04-02 18:13 - 2014-04-02 18:14 - 90285632 _____ () C:\Users\Laptop\Downloads\Sophos Virus Removal Tool.exe 2014-04-02 17:52 - 2014-04-02 17:53 - 00709352 _____ ( ) C:\Users\Laptop\Downloads\COMPUTER_BILD-Download-Manager_fuer_WHD_7.4.exe 2014-04-02 17:40 - 2014-04-02 17:40 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.2.Run.exe 2014-04-02 17:38 - 2014-04-02 17:38 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.1.Run.exe 2014-04-02 17:17 - 2014-04-02 17:17 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51.exe 2014-04-02 17:13 - 2014-04-02 17:14 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller (1).exe 2014-04-02 17:08 - 2014-04-02 17:08 - 00002003 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-04-02 17:06 - 2014-04-02 17:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-01 16:40 - 2014-04-01 16:41 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2014-04-01 16:35 - 2014-04-01 16:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-LAPTOP-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat 2014-04-01 16:32 - 2014-04-01 16:32 - 00000000 ____D () C:\RegBackup 2014-04-01 16:25 - 2014-04-01 16:25 - 00003304 ____N () C:\bootsqm.dat 2014-04-01 16:12 - 2014-04-01 16:12 - 00000000 ____D () C:\Users\Laptop\Desktop\Tweaking.com - Windows Repair 2014-04-01 16:11 - 2014-04-01 16:11 - 03098210 _____ () C:\Users\Laptop\Downloads\tweaking.com_windows_repair_aio.zip 2014-04-01 16:09 - 2014-04-01 16:09 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe 2014-04-01 15:56 - 2014-04-01 15:56 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe 2014-03-31 20:44 - 2014-03-31 20:44 - 00001156 _____ () C:\Users\Laptop\Downloads\Max_Herre_-_MTV_Unplugged_KAHEDI_Radio_Show_Limited_Edition_2013_-kjx8dymyeq0zn.dlc 2014-03-31 20:28 - 2014-03-31 20:28 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51 (2).exe 2014-03-31 20:26 - 2014-03-31 20:27 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller.exe 2014-03-31 20:22 - 2014-03-31 20:22 - 00000000 _____ () C:\Users\Laptop\Downloads\be7usd5w 2014-03-31 20:18 - 2014-03-31 20:28 - 27548688 _____ () C:\Users\Laptop\Downloads\15920_mrtr3cd.rar 2014-03-31 17:09 - 2014-03-31 17:09 - 00000000 ____D () C:\Users\Laptop\Downloads\Download.am 2014-03-31 17:08 - 2014-03-31 17:08 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download.am 2014-03-31 17:07 - 2013-11-26 23:01 - 13770682 _____ (COLDWELL AG) C:\Users\Laptop\Desktop\download.am-build233.exe 2014-03-31 16:47 - 2014-03-31 16:47 - 00077976 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstallerJD2.exe 2014-03-31 16:12 - 2014-03-31 16:48 - 106325880 _____ () C:\Users\Laptop\Downloads\maxhermtvunp2013.rar 2014-03-29 03:54 - 2014-03-29 17:44 - 00014183 _____ () C:\Users\Laptop\Desktop\chrome.exe - Verknüpfung.lnk 2014-03-29 03:28 - 2013-12-28 09:36 - 00000000 ____D () C:\Users\Laptop\Desktop\NPUB31419--131218150106 (ORIGINAL BACKUP) 2014-03-29 03:19 - 2014-03-29 03:29 - 00000000 ____D () C:\Users\Laptop\Desktop\Save resigner 2014-03-29 03:18 - 2014-03-29 03:18 - 02173391 _____ () C:\Users\Laptop\Downloads\[PS3]_Save_Resigner_1.4.rar 2014-03-29 02:56 - 2014-03-29 02:56 - 13866963 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\[PS3] Save Resigner 2.0.6 Setup.exe 2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\Users\Laptop\Documents\The Prince of Codes 2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\ProgramData\Caphyon 2014-03-29 02:50 - 2014-03-29 02:50 - 08071966 _____ () C:\Users\Laptop\Downloads\NPUB31419--131218150106.rar 2014-03-29 02:47 - 2014-03-29 02:48 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\The Prince of Codes 2014-03-29 02:45 - 2014-03-29 02:46 - 13449652 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\ps3_save_resigner_2.0.5_setup.exe 2014-03-29 02:29 - 2013-12-20 00:01 - 00000000 ____D () C:\Users\Laptop\Desktop\Save #2 2014-03-29 02:26 - 2014-03-29 02:27 - 16119274 _____ () C:\Users\Laptop\Downloads\Minecraft Saves.zip 2014-03-26 08:23 - 2014-03-26 10:13 - 573294207 _____ () C:\Users\Laptop\Desktop\Ohne Titel (2).mp4 2014-03-25 22:38 - 2014-03-25 22:57 - 00488408 _____ () C:\Users\Laptop\Desktop\mm.sfk 2014-03-25 22:37 - 2014-03-25 22:37 - 62507564 _____ () C:\Users\Laptop\Desktop\mm.wav 2014-03-24 19:54 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\MW3 2014-03-24 19:53 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack 2014-03-24 19:49 - 2014-03-24 19:51 - 40949384 _____ () C:\Users\Laptop\Downloads\PSNModz 6k Non Jailbreak Mod Pack.rar 2014-03-21 14:29 - 2014-03-21 14:29 - 03294805 _____ () C:\Users\Laptop\Downloads\Nova Launcher Prime v2.2.3.zip 2014-03-21 14:29 - 2014-03-21 14:29 - 02641758 _____ () C:\Users\Laptop\Downloads\Lucky Patcher v3.6.5.apk 2014-03-21 14:22 - 2014-03-21 14:24 - 03263625 _____ () C:\Users\Laptop\Downloads\Nicht bestätigt 715706.crdownload 2014-03-21 14:01 - 2014-03-21 14:01 - 09355409 _____ () C:\Users\Laptop\Downloads\CM11_swapped_go_19032014.zip 2014-03-21 13:27 - 2014-03-21 13:28 - 00000000 ____D () C:\Users\Laptop\Desktop\system 2014-03-21 13:27 - 2008-02-29 11:33 - 09107751 ____N () C:\Users\Laptop\Desktop\boot.img 2014-03-21 13:27 - 2008-02-29 11:33 - 00009329 ____N () C:\Users\Laptop\Desktop\file_contexts 2014-03-21 13:20 - 2014-03-21 13:27 - 212605148 _____ () C:\Users\Laptop\Desktop\cm_lotus-ota-19032014.zip 2014-03-21 13:09 - 2014-03-21 13:10 - 13199249 _____ () C:\Users\Laptop\Downloads\WhatsAppPLUSv5.25D-211186.apk 2014-03-18 19:34 - 2014-03-26 14:58 - 00038288 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg 2014-03-18 19:34 - 2014-03-25 22:57 - 00038264 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg.bak 2014-03-18 16:41 - 2014-03-18 19:33 - 1305585413 _____ () C:\Users\Laptop\Desktop\Ohne Titel.mp4 2014-03-17 21:03 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-17 21:03 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-17 21:03 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-17 21:03 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-17 21:03 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-17 21:03 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-17 21:03 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-17 21:03 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-17 21:03 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-17 21:03 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-17 21:03 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-17 21:03 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-17 21:03 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-17 21:03 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-17 21:03 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-17 21:03 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-17 21:03 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-17 21:03 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-17 21:03 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-17 21:03 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-17 21:03 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-17 21:03 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-17 21:03 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-17 21:03 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-17 21:03 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-17 21:03 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-17 21:03 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-17 21:03 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-17 21:03 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-17 21:03 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-17 21:03 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-17 21:03 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-17 21:03 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-17 21:03 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-17 21:03 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-17 21:03 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-17 21:03 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-17 21:03 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-17 21:03 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-17 21:03 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-17 21:01 - 2014-03-17 18:54 - 15102479 _____ () C:\Users\Laptop\Downloads\OPEN_THISgg.psd 2014-03-17 20:59 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-17 20:59 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-17 20:59 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-03-17 20:59 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-03-17 20:58 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-17 20:58 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-17 20:58 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-17 20:58 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-17 20:36 - 2014-03-17 20:36 - 00024628 _____ () C:\Users\Laptop\Downloads\mickey.zip 2014-03-17 20:33 - 2014-03-17 20:34 - 00035454 _____ () C:\Users\Laptop\Downloads\degrassi.zip 2014-03-12 16:09 - 2014-02-24 06:30 - 00000000 ____D () C:\Program Files\eclipse 2014-03-12 16:01 - 2014-03-12 16:05 - 420618021 _____ () C:\Users\Laptop\Downloads\eclipse-standard-kepler-SR2-win32_4.3.2.zip 2014-03-08 14:33 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-03-08 14:33 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-03-08 13:19 - 2014-03-08 13:19 - 00000000 ____D () C:\Users\Laptop\Photoshop 2014-03-08 02:33 - 2014-03-08 02:36 - 55901581 _____ () C:\Users\Laptop\Downloads\Ghost Banner.zip ==================== One Month Modified Files and Folders ======= 2014-04-05 20:02 - 2014-04-03 19:52 - 00012530 _____ () C:\Users\Laptop\Desktop\FRST.txt 2014-04-05 20:01 - 2014-04-03 19:52 - 00000000 ____D () C:\FRST 2014-04-05 20:01 - 2009-07-14 19:58 - 00699682 _____ () C:\Windows\system32\perfh007.dat 2014-04-05 20:01 - 2009-07-14 19:58 - 00149790 _____ () C:\Windows\system32\perfc007.dat 2014-04-05 20:01 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-05 19:59 - 2012-10-09 15:07 - 01327025 _____ () C:\Windows\WindowsUpdate.log 2014-04-05 18:35 - 2014-04-04 20:50 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-05 18:06 - 2014-04-05 18:06 - 00003438 _____ () C:\Users\Laptop\Desktop\mbam1.txt 2014-04-04 23:30 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-04 23:30 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-04 23:24 - 2014-04-04 23:13 - 00000000 ____D () C:\zoek 2014-04-04 23:24 - 2014-04-04 23:01 - 00009974 _____ () C:\zoek-results.log 2014-04-04 23:22 - 2014-04-03 22:07 - 00087728 _____ () C:\Windows\SysWOW64\PARTIZAN.TXT 2014-04-04 23:22 - 2013-09-15 13:03 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-04-04 23:22 - 2012-10-09 20:14 - 00366476 _____ () C:\Windows\PFRO.log 2014-04-04 23:22 - 2009-07-14 06:51 - 00110784 _____ () C:\Windows\setupact.log 2014-04-04 23:17 - 2014-04-04 22:56 - 00000000 ____D () C:\zoek_backup 2014-04-04 23:15 - 2012-10-09 15:15 - 00000000 ____D () C:\Users\Laptop 2014-04-04 22:56 - 2014-04-04 23:19 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-04-04 22:53 - 2014-04-04 22:53 - 01285120 _____ () C:\Users\Laptop\Desktop\zoek (1).exe 2014-04-04 22:51 - 2014-04-04 22:50 - 01243715 _____ () C:\Users\Laptop\Downloads\zoek.exe 2014-04-04 22:44 - 2014-04-04 22:44 - 00001657 _____ () C:\Users\Laptop\Desktop\mbam.txt 2014-04-04 21:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PLA 2014-04-04 21:48 - 2014-02-01 15:30 - 00000000 ___HD () C:\ProgramData\{$1284-9213-2940-1289$} 2014-04-04 20:50 - 2014-04-04 20:50 - 00001139 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-04 20:50 - 2014-04-04 20:50 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-04 20:49 - 2014-04-04 20:49 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000 (1).exe 2014-04-04 20:31 - 2014-04-04 20:31 - 00001139 _____ () C:\Users\Laptop\Desktop\JRT.txt 2014-04-04 20:20 - 2014-04-04 20:20 - 00000000 ____D () C:\Windows\ERUNT 2014-04-04 20:19 - 2014-04-04 20:18 - 01038974 _____ (Thisisu) C:\Users\Laptop\Desktop\JRT.exe 2014-04-04 20:13 - 2014-04-04 20:10 - 00000000 ____D () C:\AdwCleaner 2014-04-04 20:07 - 2014-04-04 20:08 - 01426178 _____ () C:\Users\Laptop\Desktop\adwcleaner.exe 2014-04-04 20:07 - 2014-04-04 20:07 - 01426178 _____ () C:\Users\Laptop\Downloads\adwcleaner.exe 2014-04-04 13:15 - 2013-08-17 13:25 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Mp3tag 2014-04-04 10:11 - 2014-04-04 07:59 - 406958951 _____ () C:\Users\Laptop\Downloads\About Berlin Vol 5 (2014).rar 2014-04-03 21:29 - 2014-04-03 21:29 - 00018826 _____ () C:\ComboFix.txt 2014-04-03 21:29 - 2014-04-03 21:12 - 00000000 ____D () C:\Qoobox 2014-04-03 21:26 - 2014-04-03 21:11 - 00000000 ____D () C:\Windows\erdnt 2014-04-03 21:25 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-04-03 21:09 - 2014-04-03 21:09 - 05193944 ____R (Swearware) C:\Users\Laptop\Desktop\ComboFix.exe 2014-04-03 19:56 - 2014-04-03 19:54 - 00035817 _____ () C:\Users\Laptop\Desktop\Addition.txt 2014-04-03 19:49 - 2014-04-03 19:49 - 02157056 _____ (Farbar) C:\Users\Laptop\Desktop\FRST64.exe 2014-04-03 11:15 - 2014-04-03 19:13 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Desktop\mbam-setup-2.0.0.1000.exe 2014-04-02 19:07 - 2014-04-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-02 19:06 - 2014-04-02 19:06 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000.exe 2014-04-02 18:36 - 2012-10-09 15:15 - 00000000 ___RD () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-02 18:32 - 2014-04-02 18:22 - 00000000 ____D () C:\Users\Laptop\Documents\RegRun2 2014-04-02 18:32 - 2014-04-02 18:22 - 00000000 ____D () C:\Program Files (x86)\UnHackMe 2014-04-02 18:31 - 2014-04-02 18:22 - 00000000 ____D () C:\Users\Public\Documents\regruninfo 2014-04-02 18:30 - 2014-04-02 18:29 - 00030711 _____ () C:\Windows\SysWOW64\Partizan.RRI 2014-04-02 18:29 - 2014-04-02 18:29 - 00040720 _____ (Greatis Software) C:\Windows\system32\Partizan.exe 2014-04-02 18:27 - 2014-04-02 18:27 - 00000000 ____D () C:\@RestoreQuarantine 2014-04-02 18:22 - 2014-04-02 18:22 - 00035816 _____ (Greatis Software) C:\Windows\SysWOW64\Drivers\Partizan.sys 2014-04-02 18:22 - 2014-04-02 18:22 - 00001044 _____ () C:\Users\Laptop\Desktop\UnHackMe.lnk 2014-04-02 18:22 - 2014-04-02 18:22 - 00000418 _____ () C:\Windows\Tasks\UnHackMe Task Scheduler.job 2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\winstart.bat 2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\SysWOW64\AUTOEXEC.NT 2014-04-02 18:20 - 2014-04-02 18:19 - 15295838 _____ () C:\Users\Laptop\Downloads\unhackme.zip 2014-04-02 18:14 - 2014-04-02 18:13 - 90285632 _____ () C:\Users\Laptop\Downloads\Sophos Virus Removal Tool.exe 2014-04-02 17:53 - 2014-04-02 17:52 - 00709352 _____ ( ) C:\Users\Laptop\Downloads\COMPUTER_BILD-Download-Manager_fuer_WHD_7.4.exe 2014-04-02 17:44 - 2013-11-03 16:28 - 00000000 ____D () C:\Program Files (x86)\Kingo Android ROOT 2014-04-02 17:40 - 2014-04-02 17:40 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.2.Run.exe 2014-04-02 17:38 - 2014-04-02 17:38 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.1.Run.exe 2014-04-02 17:38 - 2013-09-11 15:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-02 17:17 - 2014-04-02 17:17 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51.exe 2014-04-02 17:14 - 2014-04-02 17:13 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller (1).exe 2014-04-02 17:08 - 2014-04-02 17:08 - 00002003 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-04-02 17:07 - 2014-02-27 19:11 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job 2014-04-02 17:06 - 2014-04-02 17:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-02 17:06 - 2014-02-27 19:11 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-04-02 17:06 - 2013-03-19 06:11 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-04-02 17:06 - 2013-03-19 06:11 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-04-02 17:06 - 2012-10-22 21:28 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-04-02 17:06 - 2012-10-22 21:28 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-04-02 17:06 - 2012-10-22 21:28 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-04-02 17:06 - 2012-10-22 21:28 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-04-02 17:06 - 2012-10-22 21:28 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-04-01 16:41 - 2014-04-01 16:40 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2014-04-01 16:35 - 2014-04-01 16:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-LAPTOP-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat 2014-04-01 16:32 - 2014-04-01 16:32 - 00000000 ____D () C:\RegBackup 2014-04-01 16:25 - 2014-04-01 16:25 - 00003304 ____N () C:\bootsqm.dat 2014-04-01 16:12 - 2014-04-01 16:12 - 00000000 ____D () C:\Users\Laptop\Desktop\Tweaking.com - Windows Repair 2014-04-01 16:11 - 2014-04-01 16:11 - 03098210 _____ () C:\Users\Laptop\Downloads\tweaking.com_windows_repair_aio.zip 2014-04-01 16:09 - 2014-04-01 16:09 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe 2014-04-01 15:56 - 2014-04-01 15:56 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe 2014-03-31 21:02 - 2013-10-10 16:46 - 00000000 ____D () C:\Users\Laptop\AppData\Local\CrashDumps 2014-03-31 20:44 - 2014-03-31 20:44 - 00001156 _____ () C:\Users\Laptop\Downloads\Max_Herre_-_MTV_Unplugged_KAHEDI_Radio_Show_Limited_Edition_2013_-kjx8dymyeq0zn.dlc 2014-03-31 20:28 - 2014-03-31 20:28 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51 (2).exe 2014-03-31 20:28 - 2014-03-31 20:18 - 27548688 _____ () C:\Users\Laptop\Downloads\15920_mrtr3cd.rar 2014-03-31 20:27 - 2014-03-31 20:26 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller.exe 2014-03-31 20:22 - 2014-03-31 20:22 - 00000000 _____ () C:\Users\Laptop\Downloads\be7usd5w 2014-03-31 17:09 - 2014-03-31 17:09 - 00000000 ____D () C:\Users\Laptop\Downloads\Download.am 2014-03-31 17:08 - 2014-03-31 17:08 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download.am 2014-03-31 16:48 - 2014-03-31 16:12 - 106325880 _____ () C:\Users\Laptop\Downloads\maxhermtvunp2013.rar 2014-03-31 16:47 - 2014-03-31 16:47 - 00077976 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstallerJD2.exe 2014-03-29 17:44 - 2014-03-29 03:54 - 00014183 _____ () C:\Users\Laptop\Desktop\chrome.exe - Verknüpfung.lnk 2014-03-29 03:29 - 2014-03-29 03:19 - 00000000 ____D () C:\Users\Laptop\Desktop\Save resigner 2014-03-29 03:18 - 2014-03-29 03:18 - 02173391 _____ () C:\Users\Laptop\Downloads\[PS3]_Save_Resigner_1.4.rar 2014-03-29 02:56 - 2014-03-29 02:56 - 13866963 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\[PS3] Save Resigner 2.0.6 Setup.exe 2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\Users\Laptop\Documents\The Prince of Codes 2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\ProgramData\Caphyon 2014-03-29 02:50 - 2014-03-29 02:50 - 08071966 _____ () C:\Users\Laptop\Downloads\NPUB31419--131218150106.rar 2014-03-29 02:48 - 2014-03-29 02:47 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\The Prince of Codes 2014-03-29 02:46 - 2014-03-29 02:45 - 13449652 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\ps3_save_resigner_2.0.5_setup.exe 2014-03-29 02:27 - 2014-03-29 02:26 - 16119274 _____ () C:\Users\Laptop\Downloads\Minecraft Saves.zip 2014-03-28 13:02 - 2014-04-02 18:22 - 15320504 _____ (Greatis Software, LLC. ) C:\Users\Laptop\Desktop\unhackme_setup.exe 2014-03-28 13:01 - 2014-04-02 18:22 - 00012800 _____ (Greatis Software, LLC.) C:\Windows\SysWOW64\Drivers\UnHackMeDrv.sys 2014-03-26 15:11 - 2013-12-16 16:50 - 00000132 _____ () C:\Users\Laptop\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen 2014-03-26 15:01 - 2012-12-22 12:56 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\vlc 2014-03-26 14:58 - 2014-03-18 19:34 - 00038288 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg 2014-03-26 10:13 - 2014-03-26 08:23 - 573294207 _____ () C:\Users\Laptop\Desktop\Ohne Titel (2).mp4 2014-03-25 22:57 - 2014-03-25 22:38 - 00488408 _____ () C:\Users\Laptop\Desktop\mm.sfk 2014-03-25 22:57 - 2014-03-18 19:34 - 00038264 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg.bak 2014-03-25 22:45 - 2014-01-24 13:24 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Audacity 2014-03-25 22:37 - 2014-03-25 22:37 - 62507564 _____ () C:\Users\Laptop\Desktop\mm.wav 2014-03-24 19:54 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\MW3 2014-03-24 19:54 - 2014-03-24 19:53 - 00000000 ____D () C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack 2014-03-24 19:51 - 2014-03-24 19:49 - 40949384 _____ () C:\Users\Laptop\Downloads\PSNModz 6k Non Jailbreak Mod Pack.rar 2014-03-21 14:29 - 2014-03-21 14:29 - 03294805 _____ () C:\Users\Laptop\Downloads\Nova Launcher Prime v2.2.3.zip 2014-03-21 14:29 - 2014-03-21 14:29 - 02641758 _____ () C:\Users\Laptop\Downloads\Lucky Patcher v3.6.5.apk 2014-03-21 14:24 - 2014-03-21 14:22 - 03263625 _____ () C:\Users\Laptop\Downloads\Nicht bestätigt 715706.crdownload 2014-03-21 14:01 - 2014-03-21 14:01 - 09355409 _____ () C:\Users\Laptop\Downloads\CM11_swapped_go_19032014.zip 2014-03-21 13:28 - 2014-03-21 13:27 - 00000000 ____D () C:\Users\Laptop\Desktop\system 2014-03-21 13:27 - 2014-03-21 13:20 - 212605148 _____ () C:\Users\Laptop\Desktop\cm_lotus-ota-19032014.zip 2014-03-21 13:10 - 2014-03-21 13:09 - 13199249 _____ () C:\Users\Laptop\Downloads\WhatsAppPLUSv5.25D-211186.apk 2014-03-19 18:08 - 2013-08-05 14:44 - 00000000 ____D () C:\Windows\system32\MRT 2014-03-19 18:05 - 2012-10-23 03:05 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-03-18 19:33 - 2014-03-18 16:41 - 1305585413 _____ () C:\Users\Laptop\Desktop\Ohne Titel.mp4 2014-03-17 21:26 - 2009-07-14 06:45 - 05078888 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-17 21:25 - 2014-02-02 20:57 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-17 21:25 - 2014-02-02 20:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-17 21:22 - 2012-10-09 19:43 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-03-17 21:04 - 2012-12-30 00:29 - 00000000 ____D () C:\Users\Laptop\Documents\Programm 2014-03-17 21:02 - 2014-02-26 21:51 - 00000000 ____D () C:\Users\Laptop\Desktop\Elagto 2014-03-17 21:02 - 2013-12-15 18:43 - 00000000 ____D () C:\Users\Laptop\Ps3 Designer 2014-03-17 20:40 - 2012-10-13 01:06 - 00110080 _____ () C:\Users\Laptop\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-17 20:36 - 2014-03-17 20:36 - 00024628 _____ () C:\Users\Laptop\Downloads\mickey.zip 2014-03-17 20:34 - 2014-03-17 20:33 - 00035454 _____ () C:\Users\Laptop\Downloads\degrassi.zip 2014-03-17 18:54 - 2014-03-17 21:01 - 15102479 _____ () C:\Users\Laptop\Downloads\OPEN_THISgg.psd 2014-03-17 17:49 - 2013-12-25 19:33 - 00000000 ____D () C:\Users\Laptop\Documents\Aufnahmen 2014-03-12 16:05 - 2014-03-12 16:01 - 420618021 _____ () C:\Users\Laptop\Downloads\eclipse-standard-kepler-SR2-win32_4.3.2.zip 2014-03-08 13:19 - 2014-03-08 13:19 - 00000000 ____D () C:\Users\Laptop\Photoshop 2014-03-08 02:36 - 2014-03-08 02:33 - 55901581 _____ () C:\Users\Laptop\Downloads\Ghost Banner.zip 2014-03-08 02:00 - 2013-11-21 22:23 - 00000000 ____D () C:\Users\Laptop\Elagto ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 19:35 ==================== End Of Log ============================ --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014 Ran by Laptop at 2014-04-05 20:02:54 Running from C:\Users\Laptop\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM-x32\...\{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.2.1.260 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.43 - Adobe Systems Incorporated) Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2016 - Avast Software) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.80 - Atheros Communications) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version: - Microsoft) EasyBox Key Decrypter (HKLM-x32\...\EasyBox Key Decrypter) (Version: 1.4 - WLanKeyFinder) Elgato Game Capture HD (HKLM-x32\...\{DDA520BF-FB7B-4052-91CC-CA3059D6F487}) (Version: 1.42.13.528 - Elgato Systems GmbH) Flashtool (HKLM-x32\...\Flashtool) (Version: 0.8.0.0 - Androxyde) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Freemake Video Converter Version 4.0.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.0.4 - Ellora Assets Corporation) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 32.0.1700.102 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden High-Definition Video Playback (x32 Version: 11.1.10400.2.65 - Nero AG) Hidden HP Product Detection (HKLM-x32\...\{4F38594F-2C4A-4C42-B2C4-505E225F6F80}) (Version: 11.14.0004 - HP) HxD Hex Editor Version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Maël Hörz) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation) Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft XNA Framework Redistributable 2.0 (HKLM-x32\...\{245F6C7A-0C22-4DE0-8202-2AAA620A1D3A}) (Version: 2.0.11128.1 - Microsoft Corporation) Minimal ADB and Fastboot version 1.1.3 (HKLM-x32\...\{DE46417A-9E9E-4BCD-BBDD-DA21943193BB}_is1) (Version: 1.1.3 - ) Mixxx 1.10.0 (HKLM-x32\...\Mixxx (1.10.0)) (Version: 1.10.0 - Verti Techology Group, Inc) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 25.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 25.0.1 (x86 de)) (Version: 25.0.1 - Mozilla) Mp3tag v2.57 (HKLM-x32\...\Mp3tag) (Version: v2.57 - Florian Heidenreich) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 11 (HKLM-x32\...\{8A7ABBD4-A617-4AE8-9C6D-1510DE46EC35}) (Version: 11.0.15500 - Nero AG) Nero 11 Cliparts (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Disc Menus 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Disc Menus 2 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Disc Menus 3 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Disc Menus Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Effects Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Image Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes 2 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes 3 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes 4 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 PiP Effects 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 PiP Effects Basic (x32 Version: 11.0.11300.12.0 - Nero AG) Hidden Nero 11 Video Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Video Transitions 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden Nero BackItUp 11 (x32 Version: 6.0.16000.13.100 - Nero AG) Hidden Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.10000.1.0 - Nero AG) Nero Burning ROM 11 (x32 Version: 11.0.12200.23.100 - Nero AG) Hidden Nero Burning ROM 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero ControlCenter 11 (x32 Version: 11.0.12300.0.23 - Nero AG) Hidden Nero ControlCenter 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Core Components 11 (x32 Version: 11.0.15000.1.12 - Nero AG) Hidden Nero CoverDesigner 11 (x32 Version: 6.0.10800.11.100 - Nero AG) Hidden Nero CoverDesigner 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Express 11 (x32 Version: 11.0.11700.23.100 - Nero AG) Hidden Nero Express 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Kwik Media (x32 Version: 1.10.19300.93.100 - Nero AG) Hidden Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden Nero Recode 11 (x32 Version: 5.0.13300.32.100 - Nero AG) Hidden Nero Recode 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100 - Nero AG) Hidden Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden Nero SoundTrax 11 (x32 Version: 5.0.10400.4.100 - Nero AG) Hidden Nero SoundTrax 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden Nero Update (x32 Version: 11.0.10623.22.0 - Nero AG) Hidden Nero Video 11 (x32 Version: 8.0.14000.21.100 - Nero AG) Hidden Nero Video 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero WaveEditor 11 (x32 Version: 6.0.10800.5.100 - Nero AG) Hidden Nero WaveEditor 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden nero.prerequisites.msi (x32 Version: 11.0.20007 - Nero AG) Hidden ObjectDock Free (HKLM-x32\...\ObjectDock Free) (Version: 2.0 - Stardock Corporation) ObjectDock Free (x32 Version: 2.0 - Stardock Corporation) Hidden PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden PS3 Theme Builder 2.5 (HKLM-x32\...\{3569D403-23C1-4432-9A33-3E82C47BE470}_is1) (Version: - LiliChan Software) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) Sony Mobile Update Service (HKLM-x32\...\Update Service) (Version: 2.13.7.201306141231 - Sony Mobile Communications AB) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.1.21 - Safer-Networking Ltd.) Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) TubeBox (HKLM-x32\...\{cb69ca7b-a22a-4654-b672-94507e0560cf}) (Version: 4.3.0.13 - Freetec) TubeBox (x32 Version: 4.3.0.13 - Freetec) Hidden UnHackMe 7.11 release (HKLM-x32\...\UnHackMe_is1) (Version: - Greatis Software, LLC.) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version: - Microsoft) Vegas Pro 12.0 (64-bit) (HKLM\...\{A7C8BBDE-FE98-11E1-87C9-F04DA23A5C58}) (Version: 12.0.367 - Sony) VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN) welcome (x32 Version: 11.0.21500.0.4 - Nero AG) Hidden WhiteCap (HKLM-x32\...\WhiteCap) (Version: 6.1.3 - SoundSpectrum) Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden WinRAR 5.00 beta 8 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.8 - win.rar GmbH) Xross Media Simulator 1.0 (HKLM-x32\...\{2A9B8C94-2781-4B36-941E-CB37957DE0C0}_is1) (Version: - Lili-Chan Software) ==================== Restore Points ========================= 25-03-2014 15:04:54 Windows Update 29-03-2014 00:24:21 Windows Update 29-03-2014 00:49:41 Installed [PS3] Save Resigner 29-03-2014 00:58:31 Removed [PS3] Save Resigner 01-04-2014 14:29:58 Tweaking.com - Windows Repair 01-04-2014 15:06:00 Windows Update 02-04-2014 15:02:06 avast! antivirus system restore point 04-04-2014 18:06:01 Windows Update 04-04-2014 21:01:53 zoek.exe restore point ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-04-03 21:25 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {0F62A33C-7001-446F-910E-F5E4EA5008A0} - \Software Updater Ui No Task File Task: {112720AC-46AC-4450-8060-66F41F646040} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {7D131DE8-FA6A-4400-A93A-F9C65459AB7B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {7EABD3D1-8063-404C-B7DD-34CB1258C0D1} - \Hoolapp Init No Task File Task: {8C3E1BFF-6E43-41E8-969E-C178F15070DE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-02] (AVAST Software) Task: {900F74C0-B5D9-4E59-BE4D-7F6E0D68BE42} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-22] (Google Inc.) Task: {9A9179D9-25B7-4D08-9649-5D6F98BC5DB7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-25] (Adobe Systems Incorporated) Task: {A918FEAF-A38F-4219-BE53-285BBD7A7F55} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-22] (Google Inc.) Task: {B0C889F3-3813-4C27-B595-E359251FD444} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {B50863F5-1C57-4D87-80CA-292C7D48C8C0} - \Hoolapp for Android No Task File Task: {E0E1F458-B0F9-437A-92CC-6F0CE648C2EB} - \Dealply No Task File Task: {F9A0B490-532B-4931-AE89-5D5F773C43F9} - \Software Updater No Task File Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\UnHackMe Task Scheduler.job => C:\Program Files (x86)\UnHackMe\hackmon.exe ==================== Loaded Modules (whitelisted) ============= 2010-10-04 19:54 - 2010-10-04 19:54 - 00776704 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.dll 2013-10-16 19:02 - 2013-10-16 19:02 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2012-10-10 14:42 - 2011-10-21 18:49 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-04-04 11:23 - 2014-04-04 11:23 - 02189312 _____ () C:\Program Files\AVAST Software\Avast\defs\14040400\algo.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00807936 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\CrashRpt.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00053760 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\zlib.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-04 19:54 - 2010-10-04 19:54 - 00675840 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\DockShellHook.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00094208 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Docklets\Clock\Clock.dll 2013-12-11 16:39 - 2013-12-11 16:39 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-01-29 21:33 - 2014-01-23 07:56 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libglesv2.dll 2014-01-29 21:33 - 2014-01-23 07:56 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libegl.dll 2014-01-29 21:33 - 2014-01-23 07:55 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll 2014-01-29 21:33 - 2014-01-23 07:56 - 13615896 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll 2014-01-29 21:33 - 2014-01-23 07:56 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll 2014-01-29 21:33 - 2014-01-23 07:57 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== MSCONFIG\Services: AERTFilters => 2 MSCONFIG\Services: AxInstSV => 3 MSCONFIG\Services: bthserv => 3 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: NAUpdate => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCEPServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: Spybot-S&D Cleaning => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean MSCONFIG\startupreg: svchospt => C:\Windows\SysWOW64\svchospt.exe MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/05/2014 08:01:23 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/05/2014 08:01:23 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (04/05/2014 08:01:13 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/05/2014 08:01:13 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (04/05/2014 08:01:02 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/05/2014 08:01:02 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (04/05/2014 08:00:52 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/05/2014 08:00:52 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (04/05/2014 08:00:42 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (04/05/2014 08:00:42 PM) (Source: ESENT) (User: ) Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. System errors: ============= Error: (04/05/2014 07:59:23 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/05/2014 06:30:17 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (04/05/2014 05:54:14 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/04/2014 11:38:30 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (04/04/2014 11:38:27 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (04/04/2014 11:22:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (04/04/2014 11:22:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%5 Error: (04/04/2014 11:22:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "TunMirror" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (04/04/2014 11:22:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%5 Error: (04/04/2014 11:22:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "KMSServerService" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Microsoft Office Sessions: ========================= Error: (04/05/2014 08:01:23 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/05/2014 08:01:23 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert Error: (04/05/2014 08:01:13 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/05/2014 08:01:13 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert Error: (04/05/2014 08:01:02 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/05/2014 08:01:02 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert Error: (04/05/2014 08:00:52 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/05/2014 08:00:52 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert Error: (04/05/2014 08:00:42 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (04/05/2014 08:00:42 PM) (Source: ESENT)(User: ) Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert CodeIntegrity Errors: =================================== Date: 2014-04-03 21:23:42.379 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-03 21:23:42.194 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 74% Total physical RAM: 1893.86 MB Available physical RAM: 474.35 MB Total Pagefile: 3787.72 MB Available Pagefile: 1945.85 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:297.99 GB) (Free:133.44 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 73256BD4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Und bisher hab ich keine Probleme mehr beim Herunterladen und Installieren. Das beste Bsp. war Ja Maleware Bytes, weil ich das Programm ja vorher nicht vollständig herunterladen konnte und die Installation fehlschlug. Diesmal hat alles Reibungslos geklappt. Eine Frage habe ich noch und zwar was ist mit den Dateien die in der Quarantäne von Mbam waren.? Wurden diese jetzt durch zoek entfernt.? Ansonsten bin ich dir unendlich Dankbar Vielen vielen Dank |
06.04.2014, 12:08 | #14 | |
/// TB-Ausbilder | Probleme bei Downloads und Installationen Servus, die Malware hat MBAM durch einen entsprechenden Eintrag in der Registry blockiert, daher mussten wir zuerst mit FRST ran, damit die Blockade aufgehoben wurde. Zitat:
Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern. Im Anschluss daran räumen wir auf und ich gebe dir noch ein paar Tipps mit auf den Weg. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start C:\ProgramData\{$1284-9213-2940-1289$} InternetURL: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> C:\ProgramData\27218346293184.exe C:\ProgramData\27218346293184.exe S2 TunMirror; "C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\TunMirror.exe" [X] S2 KMSServerService; C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\KMSServerService.exe [X] Task: {0F62A33C-7001-446F-910E-F5E4EA5008A0} - \Software Updater Ui No Task File Task: {7EABD3D1-8063-404C-B7DD-34CB1258C0D1} - \Hoolapp Init No Task File Task: {B50863F5-1C57-4D87-80CA-292C7D48C8C0} - \Hoolapp for Android No Task File Task: {E0E1F458-B0F9-437A-92CC-6F0CE648C2EB} - \Dealply No Task File Task: {F9A0B490-532B-4931-AE89-5D5F773C43F9} - \Software Updater No Task File end Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 3 ESET Online Scanner
Schritt 4 Downloade Dir bitte SecurityCheck und:
Bitte poste mit deiner nächsten Antwort
|
06.04.2014, 14:02 | #15 |
| Probleme bei Downloads und InstallationenCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014 Ran by Laptop at 2014-04-06 14:36:28 Run:2 Running from C:\Users\Laptop\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** start C:\ProgramData\{$1284-9213-2940-1289$} InternetURL: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> C:\ProgramData\27218346293184.exe C:\ProgramData\27218346293184.exe S2 TunMirror; "C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\TunMirror.exe" [X] S2 KMSServerService; C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\KMSServerService.exe [X] Task: {0F62A33C-7001-446F-910E-F5E4EA5008A0} - \Software Updater Ui No Task File Task: {7EABD3D1-8063-404C-B7DD-34CB1258C0D1} - \Hoolapp Init No Task File Task: {B50863F5-1C57-4D87-80CA-292C7D48C8C0} - \Hoolapp for Android No Task File Task: {E0E1F458-B0F9-437A-92CC-6F0CE648C2EB} - \Dealply No Task File Task: {F9A0B490-532B-4931-AE89-5D5F773C43F9} - \Software Updater No Task File end ***************** C:\ProgramData\{$1284-9213-2940-1289$} => Moved successfully. C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url => Moved successfully. "C:\ProgramData\27218346293184.exe" => File/Directory not found. TunMirror => Service deleted successfully. KMSServerService => Service deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0F62A33C-7001-446F-910E-F5E4EA5008A0} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F62A33C-7001-446F-910E-F5E4EA5008A0} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Software Updater Ui => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{7EABD3D1-8063-404C-B7DD-34CB1258C0D1} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7EABD3D1-8063-404C-B7DD-34CB1258C0D1} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hoolapp Init => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B50863F5-1C57-4D87-80CA-292C7D48C8C0} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B50863F5-1C57-4D87-80CA-292C7D48C8C0} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hoolapp for Android => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0E1F458-B0F9-437A-92CC-6F0CE648C2EB} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0E1F458-B0F9-437A-92CC-6F0CE648C2EB} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dealply => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F9A0B490-532B-4931-AE89-5D5F773C43F9} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9A0B490-532B-4931-AE89-5D5F773C43F9} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Software Updater => Key deleted successfully. Code:
ATTFilter HitmanPro 3.7.9.216 www.hitmanpro.com Computer name . . . . : LAPTOP-PC Windows . . . . . . . : 6.1.1.7601.X64/2 User name . . . . . . : Laptop-PC\Laptop UAC . . . . . . . . . : Enabled License . . . . . . . : Free Scan date . . . . . . : 2014-04-06 14:42:13 Scan mode . . . . . . : Normal Scan duration . . . . : 8m 0s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 7 Traces . . . . . . . : 58 Objects scanned . . . : 2.030.837 Files scanned . . . . : 40.247 Remnants scanned . . : 419.946 files / 1.570.644 keys Malware _____________________________________________________________________ C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\Red-EyeX32 - Black Ops Game Save Editor.exe Size . . . . . . . : 559.104 bytes Age . . . . . . . : 12.8 days (2014-03-24 19:53:29) Entropy . . . . . : 7.9 SHA-256 . . . . . : 6E8274330BBFFB7C4C88BB9953467EC5E6B70E4ED5DC550E615899DB053CD57D Product . . . . . : Red-EyeX32 - Black Ops Game Save Editor Publisher . . . . : Hewlett-Packard Company Description . . . : Red-EyeX32 - Black Ops Game Save Editor Version . . . . . : 1.0.0.0 Copyright . . . . : Copyright © Hewlett-Packard Company 2013 > G Data . . . . . . : Gen:Variant.Symmi.3833 (Engine A) Fuzzy . . . . . . : 109.0 Forensic Cluster -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\ -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\games.conf -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\ -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\ -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\global.conf -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\global.conf -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\global.conf -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\keys.elf -0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\pfdtool.exe -0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\pfdtool.exe -0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\pfdtool.exe -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\README.txt 0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\Red-EyeX32 - Black Ops Game Save Editor.exe 0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\sfopatcher.exe 0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\titleid.txt 0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\ 0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\README.txt 0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\Red-EyeX32 - Black Ops II Save Editor.exe 0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\Red-EyeX32 - Black Ops II Save Editor.exe 0.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\ 0.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\CFG Optimizing Program.exe 0.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\ICSharpCode.TextEditor.dll 0.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\ICSharpCode.TextEditor.dll 0.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\ICSharpCode.TextEditor.dll 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\README.txt 1.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\ 1.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\README.txt 1.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\Red-EyeX32 - COD4 Save Editor.exe 1.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\Red-EyeX32 - COD4 Save Editor.exe 1.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\Red-EyeX32 - COD4 Save Editor.exe 1.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ 1.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\GPAD0_CM.PRF 1.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\ 1.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\ 1.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\GPAD0_MP.PRF 2.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ICON0.png 2.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\PARAM.PFD 2.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\PARAM.SFO 2.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ZORK.DAT 2.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\_gspinfo.dat 2.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\DevComponents.DotNetBar2.dll 2.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\games.conf 2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\getopt.lib 2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\getopt.lib 2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\global.conf 2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\global.conf 2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\global.conf 2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\global.conf 2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\msvcr100.dll 2.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\pfdtool.exe 2.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\ 2.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\ 2.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\ 2.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\Profiles.conf 2.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\PS3Resigner Plugin.bin 2.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[A] msvcr100.dll 3.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[B] msvcr100.dll 3.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[C] msvcr100.dll 3.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[D] msvcr100.dll 3.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[ORIGINAL] msvcr100.dll 3.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\polarssl.lib 3.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Read Me.txt 3.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\[PS3] Save Resigner 1.5.exe 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\GTAIV Save Editor\ 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\GTAIV Save Editor\README.txt C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\Red-EyeX32 - Black Ops II Save Editor.exe Size . . . . . . . : 695.296 bytes Age . . . . . . . : 12.8 days (2014-03-24 19:53:30) Entropy . . . . . : 7.5 SHA-256 . . . . . : AC3DBF8AC719550BCB62975E87C2B5FC65D5FEEE123BF7557695FB7958AA381E Product . . . . . : Red-EyeX32 - Black Ops II Save Editor Description . . . : Red-EyeX32 - Black Ops II Save Editor Version . . . . . : 1.0.0.0 Copyright . . . . : Copyright © 2013 > G Data . . . . . . : Gen:Variant.Kazy.84607 Fuzzy . . . . . . : 106.0 Forensic Cluster -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\ -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\games.conf -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\ -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\ -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\global.conf -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\global.conf -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\global.conf -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\keys.elf -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\pfdtool.exe -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\pfdtool.exe -0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\pfdtool.exe -0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\README.txt -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\Red-EyeX32 - Black Ops Game Save Editor.exe -0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\sfopatcher.exe -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO1 Game Save Editor\titleid.txt 0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\ 0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\README.txt 0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\Red-EyeX32 - Black Ops II Save Editor.exe 0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\BO2 Game Save Editor\Red-EyeX32 - Black Ops II Save Editor.exe 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\ 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\CFG Optimizing Program.exe 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\ICSharpCode.TextEditor.dll 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\ICSharpCode.TextEditor.dll 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\ICSharpCode.TextEditor.dll 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\CFG Optimizer\README.txt 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\ 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\README.txt 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\Red-EyeX32 - COD4 Save Editor.exe 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\Red-EyeX32 - COD4 Save Editor.exe 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\COD4 Game Save Editor\Red-EyeX32 - COD4 Save Editor.exe 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\GPAD0_CM.PRF 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\ 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\ 1.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\GPAD0_MP.PRF 1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ICON0.png 1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\PARAM.PFD 1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\PARAM.SFO 1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ZORK.DAT 1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\_gspinfo.dat 1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\DevComponents.DotNetBar2.dll 1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\games.conf 1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\getopt.lib 1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\getopt.lib 1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\global.conf 1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\global.conf 1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\global.conf 1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\global.conf 1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\msvcr100.dll 2.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\pfdtool.exe 2.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\ 2.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\ 2.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\ 2.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\Profiles.conf 2.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\PS3Resigner Plugin.bin 2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[A] msvcr100.dll 2.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[B] msvcr100.dll 2.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[C] msvcr100.dll 2.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[D] msvcr100.dll 2.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Plugins\[ORIGINAL] msvcr100.dll 2.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\polarssl.lib 2.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\Read Me.txt 2.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\Game Save Resigner\[PS3] Save Resigner 1.5.exe 3.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\GTAIV Save Editor\ 3.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\GTAIV Save Editor\README.txt C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\Red-EyeX32 - Black Ops Game Save Editor.exe Size . . . . . . . : 559.104 bytes Age . . . . . . . : 12.8 days (2014-03-24 19:54:17) Entropy . . . . . : 7.9 SHA-256 . . . . . : 6E8274330BBFFB7C4C88BB9953467EC5E6B70E4ED5DC550E615899DB053CD57D Product . . . . . : Red-EyeX32 - Black Ops Game Save Editor Publisher . . . . : Hewlett-Packard Company Description . . . : Red-EyeX32 - Black Ops Game Save Editor Version . . . . . : 1.0.0.0 Copyright . . . . : Copyright © Hewlett-Packard Company 2013 > G Data . . . . . . : Gen:Variant.Symmi.3833 (Engine A) Fuzzy . . . . . . : 109.0 Forensic Cluster -3.1s C:\ProgramData\AVAST Software\Avast\chest\00000018 -3.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW2 1.14 CFG Maker\ -3.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW2 1.14 CFG Maker\MW2 1.14 CFG Maker.exe -2.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW2 Save Editor\ -2.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW2 Save Editor\README.txt -2.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW2 Save Editor\Red-EyeX32 - Modern Warfare 2 Save Editor.exe -2.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW2 1.14 CFG Maker\README.txt -2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\ -2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\MPDATA Editor\ -2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\MPDATA Editor\games.conf -2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\MPDATA Editor\global.conf -2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\MPDATA Editor\keys.elf -2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\MPDATA Editor\pfdtool.exe -2.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\MPDATA Editor\Red-EyeX32 - MW3 MPDATA Editor.exe -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\MPDATA Editor\titleid.txt -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\README.txt -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 MPDATA Editor\README.txt -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\ -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\ -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\games.conf -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\games.conf -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\global.conf -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\keys.elf -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\pfdtool.exe -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\pfdtool.exe -1.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\Red-EyeX32 - MW3 Save Decrypter.exe -1.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\MW3 Save Editor\sfopatcher.exe -1.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Save Editor\README.txt -1.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Special Ops Editor\ -1.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Special Ops Editor\MW3 Special Ops Editor\ -1.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Special Ops Editor\MW3 Special Ops Editor\games.conf -1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Special Ops Editor\MW3 Special Ops Editor\global.conf -1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Special Ops Editor\MW3 Special Ops Editor\pfdtool.exe -1.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Special Ops Editor\MW3 Special Ops Editor\Red-EyeX32 - MW3 Special Ops Editor.exe -0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\MW3 Special Ops Editor\README.txt -0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\WAW Game Save Editor\ -0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\WAW Game Save Editor\COD5 Game Save Editor PS3.exe -0.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\WAW Game Save Editor\DevComponents.DotNetBar2.dll -0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\WAW Game Save Editor\games.conf -0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\WAW Game Save Editor\global.conf -0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\WAW Game Save Editor\pfdtool.exe -0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\WAW Game Save Editor\README.txt -0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\All Programs\WAW Game Save Editor\sfopatcher.exe -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\ -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\BEST BLACK OPS SAVE.rar -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Big XP.txt -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\ -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\games.conf -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\global.conf -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\keys.elf -0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\pfdtool.exe 0.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\Red-EyeX32 - Black Ops Game Save Editor.exe 0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\sfopatcher.exe 0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\COD7 GAME SAVE EDITOR\titleid.txt 0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\ 0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\BLES01031-AUTO-\ 0.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\BLES01031-AUTO-\GPAD0_CM.PRF 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\BLES01031-AUTO-\GPAD0_MP.PRF 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\BLES01031-AUTO-\GPAD0_SP.PRF 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\BLES01031-AUTO-\ICON0.PNG 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\BLES01031-AUTO-\PARAM.PFD 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\BLES01031-AUTO-\PARAM.SFO 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\CreZino_v1_CFG_Mod.cfg 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Modded Zombies Codes.txt 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\NEW ZOMBIES CODES.txt 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\CreZino v1 CFG Mod\BLES01031-AUTO-\ZORK.DAT 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\BLUS30591-AUTO-\ 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\BLUS30591-AUTO-\GPAD0_CM.PRF 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\BLUS30591-AUTO-\GPAD0_MP.PRF 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\ 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\ 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\ 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\BLUS30591-AUTO-\GPAD0_SP.PRF 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\BLUS30591-AUTO-\ICON0.PNG 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\BLUS30591-AUTO-\PARAM.PFD 0.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\BLUS30591-AUTO-\PARAM.SFO 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\PS3\SAVEDATA\BLUS30591-AUTO-\ZORK.DAT 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade BIG XP (NO BAN\README.txt 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\ 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\ 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\ 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\GPAD0_CM.PRF 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\GPAD0_MP.PRF 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\ 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\GPAD0_SP.PRF 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\ICON0.PNG 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\ICON0.PNG 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\PARAM.PFD 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\PARAM.SFO 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\ZORK.DAT 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\PS3\SAVEDATA\BLUS30591-AUTO-\_gspinfo.dat 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\Premade Zombies Binds\README.txt 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\xYARDSALEx Menu Offline Only\BO\ 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\xYARDSALEx Menu Offline Only\BO\my.cfg 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO1\xYARDSALEx Menu Offline Only\ 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Black Ops 2 Game Save Editor\ 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Black Ops 2 Game Save Editor\Red-EyeX32 - Black Ops II Save Editor.exe 0.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\ 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Campaign DVARS.txt 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\ 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\GPAD0_CM.PRF 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\GPAD0_MP.PRF 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\ 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\ 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\ 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\GPAD0_SP.PRF 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\ICON0.PNG 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\PARAM.PFD 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\PARAM.SFO 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\SAVEGAME.SVG 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\PS3\SAVEDATA\BLUS31011-AUTO-\STATS.SVG 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\COD4 Save Editor\ 0.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Premade Modded Campaign\README.txt 0.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\COD4 Save Editor\README.txt 0.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\COD4 Save Editor\Red-EyeX32 - COD4 Save Editor.exe 0.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ 0.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\GPAD0_CM.PRF 0.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\GPAD0_MP.PRF 0.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\ 0.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\ 0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ICON0.png 0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\PARAM.PFD 0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\PARAM.SFO 0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\ZORK.DAT 0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Backup Folder\BLUS30591-AUTO-\_gspinfo.dat 0.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\DevComponents.DotNetBar2.dll 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\games.conf 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\getopt.lib 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\global.conf 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\global.conf 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\msvcr100.dll 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\pfdtool.exe 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Plugins\ 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Plugins\Profiles.conf 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Plugins\PS3Resigner Plugin.bin 0.9s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Plugins\[A] msvcr100.dll 1.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Plugins\[B] msvcr100.dll 1.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Plugins\[C] msvcr100.dll 1.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Plugins\[D] msvcr100.dll 1.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Plugins\[ORIGINAL] msvcr100.dll 1.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\polarssl.lib 1.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\Read Me.txt 1.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\Game Save Resigner\[PS3] Save Resigner 1.5.exe 1.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\ 1.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\GTAIV Save Editor\ 1.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\GTAIV Save Editor\README.txt 1.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\GTAIV Save Editor\README.txt 1.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\GTAIV Save Editor\README.txt 3.4s C:\ProgramData\AVAST Software\Avast\chest\00000019 3.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\ 3.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\PS3\SAVEDATA\BLUS30127SGTA412\ 3.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\PS3\SAVEDATA\BLUS30127SGTA412\ICON0.PNG 3.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\PS3\SAVEDATA\BLUS30127SGTA412\PARAM.PFD 3.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\PS3\SAVEDATA\BLUS30127SGTA412\PARAM.SFO 3.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\PS3\ 3.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\PS3\SAVEDATA\ 3.4s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\PS3\SAVEDATA\BLUS30127SGTA412\RAGE.SAV 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\GTAIV\Modded GTA Save\README.txt 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\1337.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\AllPerk.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\buttons_default.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\CClasses.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\DXp.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\Exp.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\Exp.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\MC.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\Negative.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\README.txt 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\RXp.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\Unlock.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Achil's V1\Unlock.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Joka-_-MoDz V3.2 CFG Menu\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Joka-_-MoDz V3.2 CFG Menu\buttons_default.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Joka-_-MoDz V3.2 CFG Menu\Read Me.txt 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\-----Unlock__All___________________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\buttons_default.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Deagle_____Classes_____.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\Destroy-Out-Of-Memory-----.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Functionz___2_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\__Prestige_Selector_________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Coloured_Classes________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\___Super_Lemon_Haze_Remake_Base.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\____Button_Classes______.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\____Button_Classes______.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\____Button_Classes______.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\____Button_Classes______.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\____Button_Classes______.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\____Button_Classes______.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\_____Flashing_DoHeart___________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\______Accoloades_______________________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\______Accoloades_______________________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\______Functions_________________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\_______Funtionz__3_______________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Lemon Haze 1.14\_______Max___Stats____________________.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MadGamer's V5 Release\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MadGamer's V5 Release\buttons_default.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MadGamer's V5 Release\Unlock.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MadGamer's V5 Release\Unlock.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MY_AIM_IS_NAST3Y v1\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MY_AIM_IS_NAST3Y v1\buttons_default.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MY_AIM_IS_NAST3Y v1\Classes.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MY_AIM_IS_NAST3Y v1\ColorClasses.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MY_AIM_IS_NAST3Y v1\Functions.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MY_AIM_IS_NAST3Y v1\README.txt 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\MY_AIM_IS_NAST3Y v1\UnlockAll.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Purple Whisper\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Purple Whisper\buttons_default.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Pink Thunder\ 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Pink Thunder\buttons_default.cfg 3.6s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Pink Thunder\README.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Purple Whisper\CC.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Purple Whisper\unlockal.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Purple Whisper\{iM} READ ME {iM}.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\ 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\ButtonClasses.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\buttons_default.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\ColorClasses.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\HighStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Something Sticky Private V2\ 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Something Sticky Private V2\ 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\NegativeStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\README.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\ResetStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\RiftenModz v1\UnlockAll.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Something Sticky Private V2\buttons_default.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\Something Sticky Private V2\READ ME.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\ 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\buttons_default.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\buttons_default.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\buttons_default.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes2.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes2.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes2.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes2.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes2.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Classes2.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\MaxStats.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\Players.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\READ FIRST.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\READ FIRST.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\READ FIRST.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\READ FIRST.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\READ FIRST.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\READ FIRST.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZeBraTutrtleHD Project 115\UNLOCK_ALL.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\ 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\buttons_default.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Sweety Patch\ 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Sweety Patch\buttons_default.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Sweety Patch\README.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\README.txt 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\ZuRoMoDZ_Classess.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\ZuRoMoDZ_Classess.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\ZuRoMoDZ_Classess.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\ZuRoMoDZ_Statssss.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\ZuRoMoDZ_Statssss.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\ZuRoMoDZ Ultimate V2 For CFG\ZuRoMoDZ_Unlock_Allsssssssssss.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\{CL} & {NB}\ 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\{CL} & {NB}\buttons_default.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\{CL} & {NB}\CCN.cfg 3.7s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\{CL} & {NB}\README.txt 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Optimizer\ 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Optimizer\CFG Optimizing Program.exe 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\{CL} & {NB}\Stats.cfg 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Menus\{CL} & {NB}\UnlockAll.cfg 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\CFG Optimizer\ICSharpCode.TextEditor.dll 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\MW2 1.14 CFG Maker\ 3.8s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\MW2 1.14 CFG Maker\MW2 1.14 CFG Maker.exe 4.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\MW2 1.14 CFG Maker\README.txt 4.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\MW2 Save Editor\ 4.0s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW2\MW2 Save Editor\Red-EyeX32 - Modern Warfare 2 Save Editor.exe 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\PS3\SAVEDATA\BLUS30838-PROFILESP-PSNMODZ\ 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\PS3\SAVEDATA\BLUS30838-PROFILESP-PSNMODZ\ICON0.PNG 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\PS3\SAVEDATA\BLUS30838-PROFILESP-PSNMODZ\MPDATA 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\PS3\SAVEDATA\BLUS30838-PROFILESP-PSNMODZ\PARAM.PFD 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\ 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\PS3\SAVEDATA\ 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\PS3\ 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\ 4.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\PS3\SAVEDATA\BLUS30838-PROFILESP-PSNMODZ\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Spec Ops Profile\README.txt 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\ICON0.PNG 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\MPDATA 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\MPDATA 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\MPDATA 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.PFD 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.PFD 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\PS3\SAVEDATA\BLUS30838-PROFILEMP-BLAH\PARAM.SFO 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\README.txt 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\README.txt 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\README.txt 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\README.txt 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\README.txt 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\README.txt 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Maxed Splitscreen Profile\README.txt 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\ 4.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\ 4.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\MPDATA Editor\ 4.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\MPDATA Editor\games.conf 4.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\MPDATA Editor\global.conf 4.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\MPDATA Editor\keys.elf 4.3s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\MPDATA Editor\pfdtool.exe 4.5s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\MPDATA Editor\Red-EyeX32 - MW3 MPDATA Editor.exe 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\README.txt 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\README.txt 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 MPDATA Editor\MPDATA Editor\titleid.txt 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\ 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\games.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\games.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\games.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\games.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\global.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\global.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\global.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\global.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\global.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\global.conf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\keys.elf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\keys.elf 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\pfdtool.exe 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\ 5.1s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\Red-EyeX32 - MW3 Save Decrypter.exe 5.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\MW3 Save Editor\sfopatcher.exe 5.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Special Ops Editor\ 5.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Special Ops Editor\MW3 Special Ops Editor\ 5.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Special Ops Editor\MW3 Special Ops Editor\games.conf 5.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Special Ops Editor\MW3 Special Ops Editor\global.conf 5.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Special Ops Editor\MW3 Special Ops Editor\pfdtool.exe 5.2s C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\MW3\MW3 Save Editor\README.txt C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack\BO2\Black Ops 2 Game Save Editor\Red-EyeX32 - Black Ops II Save Editor.exe Size . . . . . . . : 695.296 bytes Age . . . . . . . : 12.8 days (2014-03-24 19:54:17) Entropy . . . . . : 7.5 SHA-256 . . . . . : AC3DBF8AC719550BCB62975E87C2B5FC65D5FEEE123BF7557695FB7958AA381E Product . . . . . : Red-EyeX32 - Black Ops II Save Editor Description . . . : Red-EyeX32 - Black Ops II Save Editor Version . . . . . : 1.0.0.0 Copyright . . . . : Copyright © 2013 > G Data . . . . . . : Gen:Variant.Kazy.84607 Fuzzy . . . . . . : 106.0 |
Themen zu Probleme bei Downloads und Installationen |
anti-malware, aufsetzen, avast, beenden, datei, dateien, downloaden funtioniert nicht, firefox, free, funktioniert, gen, hilfe bei virus, installation, installation fehlgeschlagen, laptop, neu, problem, probleme, programme, schutz, task manager, usb, verdacht, version., virenschutz, virus, voll, win7, öffnen |