| |
| |||||||
Log-Analyse und Auswertung: Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
22.05.2014, 12:36
| #16 |
 |  Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam. Sorry  ESET Online hat nichts gefunden. Was mir auffällt, dass FRST immernoch Lollipop findet obwohl ich es unter CurrenUserver(HKCU?) gelöscht habe. FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by CodeX (administrator) on USER-PC on 22-05-2014 13:32:31
Running from C:\Users\CodeX\Downloads
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Spotify Ltd) C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Spotify Ltd) C:\Users\CodeX\AppData\Roaming\Spotify\spotify.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\GTA\samp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [109784 2014-05-20] (Siber Systems)
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
Chrome:
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-31]
CHR Extension: (YouTube) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-31]
CHR Extension: (Google-Suche) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-31]
CHR Extension: (AdBlock) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (Google Wallet) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-31]
CHR Extension: (YouTube Unblocker) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-14]
CHR Extension: (Google Mail) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-31]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-05-20]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-12-31] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] ()
S4 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-02] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-04-12] (<Turtle Entertainment>)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-11-13] (Anchorfree Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 DfSdkS;
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-21 21:16 - 2014-05-21 21:16 - 00375786 _____ () C:\Users\CodeX\Documents\ts3_clientui-win64-1394624943-2014-05-21 21_16_12.896150.dmp
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
2014-05-20 21:22 - 2014-05-20 21:22 - 00074329 _____ () C:\Users\CodeX\Downloads\astgen11.zip
2014-05-20 21:12 - 2014-05-20 21:12 - 00000071 _____ () C:\Users\CodeX\Desktop\GameOverlayUI.exe.log
2014-05-20 21:11 - 2014-05-20 21:11 - 00161381 _____ () C:\Users\CodeX\Downloads\blob2ini2blob.zip
2014-05-20 21:08 - 2014-05-20 21:22 - 00008501 _____ () C:\Users\CodeX\Desktop\blabla.html
2014-05-20 20:05 - 2014-05-20 20:05 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Users\CodeX\Documents\My RoboForm Data
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Siber Systems
2014-05-20 20:02 - 2014-05-20 20:02 - 16619392 _____ (Siber Systems) C:\Users\CodeX\Downloads\RoboForm-Setup.exe
2014-05-20 13:37 - 2014-05-20 13:37 - 00855379 _____ () C:\Users\CodeX\Downloads\SecurityCheck.exe
2014-05-20 13:20 - 2014-05-20 13:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 13:19 - 2014-05-20 13:19 - 02347384 _____ (ESET) C:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
2014-05-20 13:13 - 2014-05-20 13:13 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64 (1).exe
2014-05-19 13:49 - 2014-05-19 13:49 - 00031411 _____ () C:\Users\CodeX\Downloads\Addition.txt
2014-05-19 13:48 - 2014-05-22 13:32 - 00013934 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-19 13:47 - 2014-05-19 13:48 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:32 - 2014-05-18 19:34 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-18 19:03 - 2014-05-18 19:36 - 00000000 ___SD () C:\ComboFix
2014-05-16 13:18 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-16 13:18 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-16 13:18 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:15 - 2014-05-16 13:16 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-14 20:08 - 2014-05-19 13:28 - 00000000 ____D () C:\AdwCleaner
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:56 - 2014-05-22 13:32 - 00000000 ____D () C:\FRST
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:44 - 2014-05-19 13:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 19:43 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 19:43 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:37 - 2014-05-10 20:38 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:13 - 2014-05-21 19:54 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-21 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-21 19:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 17:00 - 2014-05-10 17:01 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-21 18:33 - 00000784 _____ () C:\Windows\setupact.log
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:45 - 2014-05-19 13:29 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-10 14:13 - 2014-05-10 20:16 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 14:13 - 2014-05-10 14:15 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 08:45 - 2014-05-18 19:37 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:29 - 2014-05-16 13:02 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:31 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 17:31 - 2014-05-06 17:32 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:30 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:29 - 2014-05-06 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:08 - 2014-04-28 19:42 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-25 11:57 - 2014-04-25 11:59 - 00000000 ____D () C:\Minecraft_Backup
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:40 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:20 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-04-23 14:20 - 2014-04-23 14:21 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-23 14:20 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-23 14:20 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
==================== One Month Modified Files and Folders =======
2014-05-22 13:32 - 2014-05-19 13:48 - 00013934 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-22 13:32 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-22 13:31 - 2013-12-31 18:54 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Skype
2014-05-22 13:26 - 2013-12-31 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-22 13:21 - 2014-02-22 19:55 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\TS3Client
2014-05-22 13:04 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Spotify
2014-05-22 13:04 - 2014-01-02 11:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\CrashDumps
2014-05-21 21:16 - 2014-05-21 21:16 - 00375786 _____ () C:\Users\CodeX\Documents\ts3_clientui-win64-1394624943-2014-05-21 21_16_12.896150.dmp
2014-05-21 20:49 - 2014-01-02 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-21 20:35 - 2014-04-12 11:30 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-21 19:54 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-21 19:54 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-21 19:54 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-21 19:46 - 2011-04-12 10:06 - 00765514 _____ () C:\Windows\system32\perfh007.dat
2014-05-21 19:46 - 2011-04-12 10:06 - 00174712 _____ () C:\Windows\system32\perfc007.dat
2014-05-21 19:46 - 2009-07-14 07:13 - 01806010 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
2014-05-21 18:35 - 2013-12-31 17:09 - 01270218 _____ () C:\Windows\WindowsUpdate.log
2014-05-21 18:33 - 2014-05-10 16:46 - 00000784 _____ () C:\Windows\setupact.log
2014-05-20 21:22 - 2014-05-20 21:22 - 00074329 _____ () C:\Users\CodeX\Downloads\astgen11.zip
2014-05-20 21:22 - 2014-05-20 21:08 - 00008501 _____ () C:\Users\CodeX\Desktop\blabla.html
2014-05-20 21:12 - 2014-05-20 21:12 - 00000071 _____ () C:\Users\CodeX\Desktop\GameOverlayUI.exe.log
2014-05-20 21:11 - 2014-05-20 21:11 - 00161381 _____ () C:\Users\CodeX\Downloads\blob2ini2blob.zip
2014-05-20 20:20 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Spotify
2014-05-20 20:05 - 2014-05-20 20:05 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Users\CodeX\Documents\My RoboForm Data
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Siber Systems
2014-05-20 20:02 - 2014-05-20 20:02 - 16619392 _____ (Siber Systems) C:\Users\CodeX\Downloads\RoboForm-Setup.exe
2014-05-20 13:37 - 2014-05-20 13:37 - 00855379 _____ () C:\Users\CodeX\Downloads\SecurityCheck.exe
2014-05-20 13:20 - 2014-05-20 13:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 13:19 - 2014-05-20 13:19 - 02347384 _____ (ESET) C:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
2014-05-20 13:13 - 2014-05-20 13:13 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64 (1).exe
2014-05-19 13:49 - 2014-05-19 13:49 - 00031411 _____ () C:\Users\CodeX\Downloads\Addition.txt
2014-05-19 13:48 - 2014-05-19 13:47 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:34 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:31 - 2014-04-12 11:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-19 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-19 13:29 - 2014-05-10 16:45 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-19 13:28 - 2014-05-14 20:08 - 00000000 ____D () C:\AdwCleaner
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:48 - 2014-03-11 15:31 - 00000000 ____D () C:\Program Files (x86)\GTA
2014-05-18 19:37 - 2014-05-10 08:45 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:36 - 2014-05-18 19:03 - 00000000 ___SD () C:\ComboFix
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:34 - 2014-05-18 19:32 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:16 - 2014-05-16 13:15 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:10 - 2014-01-02 17:11 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-16 13:02 - 2014-05-06 18:29 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-16 13:02 - 2014-01-03 19:34 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 13:01 - 2011-04-12 10:21 - 00000000 ____D () C:\Windows\CSC
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:10 - 2013-12-31 17:21 - 00000995 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-14 20:10 - 2013-12-31 17:18 - 00000000 ____D () C:\Users\CodeX
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:49 - 2014-01-02 12:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:49 - 2014-01-02 12:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 19:49 - 2014-01-02 12:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:38 - 2014-05-10 20:37 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 20:16 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 19:12 - 2014-01-01 19:25 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\UseNeXT
2014-05-10 17:57 - 2014-03-29 09:32 - 00000000 ____D () C:\Users\CodeX\Desktop\Steuerklopfer
2014-05-10 17:01 - 2014-05-10 17:00 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 14:18 - 2013-12-31 20:36 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\.minecraft
2014-05-10 14:15 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:35 - 2014-04-12 11:35 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-10 09:35 - 2014-04-12 11:35 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-10 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-08 21:29 - 2014-01-01 13:19 - 00000000 ____D () C:\Users\CodeX\Documents\Camtasia Studio
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 18:58 - 2014-05-06 17:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:41 - 2014-05-06 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:32 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-05-06 17:31 - 2013-12-31 17:52 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Google
2014-05-05 13:23 - 2014-01-15 17:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:42 - 2014-04-28 19:08 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-26 14:18 - 2014-04-12 11:30 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-25 11:59 - 2014-04-25 11:57 - 00000000 ____D () C:\Minecraft_Backup
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:42 - 2014-04-23 20:40 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 14:27 - 2014-04-08 19:25 - 00000000 __SHD () C:\Users\CodeX\Documents\MSDCSC
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:21 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-22 21:44 - 2014-04-12 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\psynetic
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Users\CodeX\AppData\Local\PokerStars.NET
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Program Files (x86)\PokerStars.NET
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Local\No23 Recorder
2014-04-22 21:41 - 2014-01-15 20:19 - 00000000 ____D () C:\Users\CodeX\Desktop\Nützliche Programme
2014-04-22 21:39 - 2014-04-15 17:45 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-04-22 21:38 - 2014-04-15 17:27 - 00000000 ____D () C:\Program Files (x86)\AV Voice Changer 8.0 Diamond
2014-04-22 21:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-22 21:37 - 2014-01-02 11:31 - 00000000 ____D () C:\Program Files (x86)\Mirillis
2014-04-22 21:37 - 2014-01-02 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-04-22 21:29 - 2013-12-31 17:21 - 00000000 ___RD () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-22 12:38 - 2013-12-31 21:09 - 00000000 __RSD () C:\Windows\SysWOW64\Flashplayer
2014-04-22 09:33 - 2005-03-31 18:59 - 05188397 ____H () C:\Users\CodeX\AppData\Roaming\CodeXlog.dat
2014-04-22 08:35 - 2014-04-11 21:35 - 00000000 ____D () C:\ProgramData\Origin
Some content of TEMP:
====================
C:\Users\CodeX\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2013-03-02 19:39] - [2013-03-02 19:39] - 0391680 ____A (Microsoft Corporation) 13CD6BA1F798A61AEE985E78D3644A1E
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2871296 ____A (Microsoft Corporation) 70D758D2DBE79757421017EE68143763
C:\Windows\SysWOW64\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2616320 ____A (Microsoft Corporation) B0846DB5BDAB92131529A58E627FCEB7
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 1008128 ____A (Microsoft Corporation) 7FB4D54B502C6CF2E35B8188FA4CC08C
C:\Windows\SysWOW64\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 0833024 ____A (Microsoft Corporation) 9B836EE76E3A99052EF6DEA52B41D1BE
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2013-03-02 20:07] - [2013-03-02 20:07] - 0512512 ____A (Microsoft Corporation) 83D5AD7CFDB1F9D42C3CD102B20FFA0A
ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2013-03-02 19:56] - [2013-03-02 19:56] - 0296304 ____A (Microsoft Corporation) A56F2326CE33646CDA95E7A9E7163FFA
LastRegBack: 2014-05-11 12:39
==================== End Of Log ============================
Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-22 13:33:40
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: ESET Smart Security 7.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
==================== Installed Programs ======================
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{C7A772A4-73CF-EB06-172F-75C5F6C80AAC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In (Version: 2.06.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Craften Terminal 3.4.5 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DarkComet RAT Remover version 1.0 (HKLM-x32\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Deponia (HKLM-x32\...\Steam App 214340) (Version: - Daedalic Entertainment)
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dojotech Spotify Recorder (HKLM-x32\...\{D149DB2E-392E-48CC-8036-88BECC09C50A}) (Version: 3.2 - Dojotech Software)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.1 - Daedalic Entertainment)
Edna Bricht Aus 6.3 (HKLM-x32\...\{0D00CD3F-AEDC-45F1-A2DD-DADF74407D7B}_is1) (Version: - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version: - Turtle Entertainment GmbH)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.007 - HTC Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lollipop (HKCU\...\lollipop_04101237) (Version: - Lollipop Network, S.L.) <==== ATTENTION
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version: - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version: - PokerStars.net)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RoboForm 7-9-7-5 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-7-5 - Siber Systems)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Tunatic (HKLM-x32\...\Tunatic) (Version: - )
Unterstützungsdateien für Microsoft SQL Server 2008-Setup (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
==================== Restore Points =========================
22-04-2014 19:35:41 Supprimé (EMCO EVALUATION PACKAGE) - DG
22-04-2014 19:36:59 TrueCrypt uninstallation
22-04-2014 19:37:38 Removed Advanced Archive Password Recovery
22-04-2014 19:39:23 Entfernt CrazyTalk
22-04-2014 19:43:02 No23 Recorder wird entfernt
06-05-2014 15:25:30 Installed Dojotech Spotify Recorder
06-05-2014 15:28:20 Removed Dojotech Spotify Recorder
06-05-2014 15:28:59 Installed Dojotech Spotify Recorder
06-05-2014 15:40:46 Installed Dojotech Spotify Recorder
14-05-2014 17:37:30 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde installiert.
16-05-2014 11:15:14 Revo Uninstaller's restore point - Youtube Downloader HD v. 2.9.9.13
18-05-2014 17:03:33 ComboFix created restore point
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05F4A343-9592-4156-A891-8A6074A0FB15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1F824E18-E1C1-4E5F-AE92-4E7A710B3F60} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {6991998A-AE4E-464A-A184-2C64254F2647} - System32\Tasks\{7A680034-4A98-48D7-81A9-FF3A869593C9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {735C8257-D086-4586-8E54-15FD2EBA3C7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: {793F1221-A7AE-404F-BE05-E96108756E24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {91392D79-87F8-4D01-BE2A-48002413C522} - System32\Tasks\SN.Booster-S-014941198 => c:\programdata\appready software\sn.booster\SN.Booster.exe
Task: {9ECA6AE5-B08B-4854-A4B6-49F8A1731DED} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {BB71E53C-A859-47CA-87B9-4136ABAFDFD6} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {D8F2F778-777E-4266-8C01-8633FE30BEB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F5C04EAB-1A3C-4478-A06F-65CE541348B8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-12-06 17:06 - 2013-12-06 17:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 23:18 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe
2014-04-12 23:18 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll
2011-03-31 17:08 - 2011-03-31 17:08 - 00080896 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-12-06 17:06 - 2013-12-06 17:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-01-10 14:44 - 2014-05-14 19:39 - 00598072 _____ () C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-02-10 13:40 - 2014-02-10 13:40 - 00412672 _____ () C:\Program Files (x86)\GTA\samp.exe
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2014-01-10 14:44 - 2014-05-14 19:39 - 36966968 _____ () C:\Users\CodeX\AppData\Roaming\Spotify\Data\libcef.dll
2014-01-10 14:44 - 2014-05-14 19:39 - 00886840 _____ () C:\Users\CodeX\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-01-10 14:44 - 2014-05-14 19:39 - 00108600 _____ () C:\Users\CodeX\AppData\Roaming\Spotify\Data\libegl.dll
2014-05-14 19:49 - 2014-05-14 19:49 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-22 18:22 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-02-15 21:43 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-02-15 21:43 - 2014-05-17 03:36 - 00756224 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 02198720 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-02-15 21:43 - 2014-05-21 19:39 - 01145536 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-02-15 21:43 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56839089
Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56839089
Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/22/2014 01:03:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ts3client_win64.exe, Version: 3.0.14.0, Zeitstempel: 0x53204a50
Name des fehlerhaften Moduls: Qt5Core.dll, Version: 5.2.1.0, Zeitstempel: 0x530f4ff6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000a5081
ID des fehlerhaften Prozesses: 0x16b0
Startzeit der fehlerhaften Anwendung: 0xts3client_win64.exe0
Pfad der fehlerhaften Anwendung: ts3client_win64.exe1
Pfad des fehlerhaften Moduls: ts3client_win64.exe2
Berichtskennung: ts3client_win64.exe3
Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56835595
Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56835595
Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56834596
Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56834596
Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
System errors:
=============
Error: (05/21/2014 07:05:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/21/2014 07:05:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Microsoft Office Sessions:
=========================
Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56839089
Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56839089
Error: (05/22/2014 01:03:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/22/2014 01:03:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ts3client_win64.exe3.0.14.053204a50Qt5Core.dll5.2.1.0530f4ff6c000000500000000000a508116b001cf7516f4f9abc4C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exeC:\Program Files\TeamSpeak 3 Client\Qt5Core.dllb4b30020-e1a0-11e3-b9a1-9b3590fd434f
Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56835595
Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56835595
Error: (05/22/2014 01:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 56834596
Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 56834596
Error: (05/22/2014 01:03:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
CodeIntegrity Errors:
===================================
Date: 2014-05-19 13:30:07.528
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-19 13:30:07.262
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-16 13:02:21.123
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-16 13:02:20.858
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-14 20:12:22.450
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-14 20:12:22.200
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-10 16:45:58.762
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-10 16:45:58.481
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-06 18:29:12.870
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-06 18:29:12.652
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 7654.11 MB
Available physical RAM: 4805.15 MB
Total Pagefile: 15306.41 MB
Available Pagefile: 11997.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.61 GB) (Free:127.35 GB) NTFS
Drive d: () (Fixed) (Total:222.54 GB) (Free:215.68 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 753715F6)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
23.05.2014, 11:02
| #17 | ||
| /// the machine /// TB-Ausbilder    | Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam.Zitat:
Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop. SystemLook (64 bit)
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Zitat:
__________________ |
|
23.05.2014, 12:08
| #18 |
| | Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam. Dieser "Käse" ist soweit ich weiß nicht Illegal und wird auch von mir nicht benutzt. Ich habe eine gewisse arbeit bei der ich diese Sachen brauche.
__________________Systemlook: Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 13:06 on 23/05/2014 by CodeX
Administrator - Elevation successful
========== regfind ==========
Searching for "Lollipop"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\not active]
"lollipop_04101237"=""c:\users\codex\appdata\local\lollipop\lollipop_04101237.exe" lollipop_04101237"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
"DisplayName"="Lollipop"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
"Publisher"="Lollipop Network, S.L."
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Run\not active]
"lollipop_04101237"=""c:\users\codex\appdata\local\lollipop\lollipop_04101237.exe" lollipop_04101237"
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
"DisplayName"="Lollipop"
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
"Publisher"="Lollipop Network, S.L."
-= EOF =-
Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-23 13:07:57 Run:1
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
*****************
"C:\PROGRA~2\SN_X64~1.BOO" => Value Data removed successfully.
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV= ==> The Chrome "Settings" can be used to fix the entry.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
==== End of Fixlog ====
|
|
24.05.2014, 11:04
| #19 | |
| /// the machine /// TB-Ausbilder | Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam.Zitat:
Kopiere den Text in der Codebox in deinen Editor (z.B. Notepad) und speichere es unter dem Namen regfix.reg (bei Dateityp bitte "alle Dateien" wählen) Code:
ATTFilter Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\not active]
"lollipop_04101237"=-
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
[HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Run\not active]
"lollipop_04101237"=-
[-HKEY_USERS\S-1-5-21-4045394911-2862759667-1337684740-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04101237]
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter c:\users\codex\appdata\local\lollipop
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Sollte jetzt weg sein. Dann das hier: http://www.trojaner-board.de/126216-...epair-aio.html
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.05.2014, 12:45
| #20 |
| | Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam. Fixlog: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-24 13:41:06 Run:2
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
c:\users\codex\appdata\local\lollipop
*****************
"c:\users\codex\appdata\local\lollipop" => File/Directory not found.
==== End of Fixlog ====
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by CodeX (administrator) on USER-PC on 24-05-2014 13:42:44
Running from C:\Users\CodeX\Downloads
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Spotify Ltd) C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Siber Systems Inc.) C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome-nm-host.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-05-14] (Google Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [109784 2014-05-20] (Siber Systems)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
Chrome:
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-31]
CHR Extension: (YouTube) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-31]
CHR Extension: (Google-Suche) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-31]
CHR Extension: (AdBlock) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (Google Wallet) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-31]
CHR Extension: (YouTube Unblocker) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-14]
CHR Extension: (Google Mail) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-31]
CHR Extension: (RoboForm) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2014-05-24]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-05-20]
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-12-31] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] ()
S4 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-02] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-04-12] (<Turtle Entertainment>)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-11-13] (Anchorfree Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 DfSdkS;
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-24 13:01 - 2014-05-24 13:01 - 00187207 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_yuno.solutions cracked.rar
2014-05-24 07:38 - 2014-05-24 07:38 - 00375728 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_CSGOsoupbear.zip
2014-05-23 19:33 - 2014-05-23 19:33 - 00005353 _____ () C:\Users\CodeX\Downloads\bibanator-cs_go-gaming-config-2014.rar
2014-05-23 13:06 - 2014-05-23 13:06 - 00165376 _____ () C:\Users\CodeX\Downloads\SystemLook_x64.exe
2014-05-23 13:06 - 2014-05-23 13:06 - 00002776 _____ () C:\Users\CodeX\Downloads\SystemLook.txt
2014-05-22 13:55 - 2014-05-22 13:55 - 00001168 _____ () C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2014-05-22 13:55 - 2014-05-22 13:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-05-22 13:44 - 2014-05-22 13:48 - 256616296 _____ () C:\Users\CodeX\Downloads\camtasiade.exe
2014-05-21 21:16 - 2014-05-21 21:16 - 00375786 _____ () C:\Users\CodeX\Documents\ts3_clientui-win64-1394624943-2014-05-21 21_16_12.896150.dmp
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
2014-05-20 21:22 - 2014-05-20 21:22 - 00074329 _____ () C:\Users\CodeX\Downloads\astgen11.zip
2014-05-20 21:12 - 2014-05-20 21:12 - 00000071 _____ () C:\Users\CodeX\Desktop\GameOverlayUI.exe.log
2014-05-20 21:11 - 2014-05-20 21:11 - 00161381 _____ () C:\Users\CodeX\Downloads\blob2ini2blob.zip
2014-05-20 21:08 - 2014-05-20 21:22 - 00008501 _____ () C:\Users\CodeX\Desktop\blabla.html
2014-05-20 20:05 - 2014-05-20 20:05 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Users\CodeX\Documents\My RoboForm Data
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Siber Systems
2014-05-20 20:02 - 2014-05-20 20:02 - 16619392 _____ (Siber Systems) C:\Users\CodeX\Downloads\RoboForm-Setup.exe
2014-05-20 13:37 - 2014-05-20 13:37 - 00855379 _____ () C:\Users\CodeX\Downloads\SecurityCheck.exe
2014-05-20 13:20 - 2014-05-20 13:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 13:19 - 2014-05-20 13:19 - 02347384 _____ (ESET) C:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
2014-05-20 13:13 - 2014-05-20 13:13 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64 (1).exe
2014-05-19 13:49 - 2014-05-22 13:34 - 00037651 _____ () C:\Users\CodeX\Downloads\Addition.txt
2014-05-19 13:48 - 2014-05-24 13:42 - 00013246 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-19 13:47 - 2014-05-19 13:48 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:32 - 2014-05-18 19:34 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-18 19:03 - 2014-05-18 19:36 - 00000000 ___SD () C:\ComboFix
2014-05-16 13:18 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-16 13:18 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-16 13:18 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:15 - 2014-05-16 13:16 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-14 20:08 - 2014-05-19 13:28 - 00000000 ____D () C:\AdwCleaner
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:56 - 2014-05-24 13:42 - 00000000 ____D () C:\FRST
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:44 - 2014-05-19 13:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 19:43 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 19:43 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:37 - 2014-05-10 20:38 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:13 - 2014-05-21 19:54 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-21 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-21 19:54 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 17:00 - 2014-05-10 17:01 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-23 13:04 - 00000840 _____ () C:\Windows\setupact.log
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:45 - 2014-05-19 13:29 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-10 14:13 - 2014-05-24 13:03 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 14:13 - 2014-05-10 14:15 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 08:45 - 2014-05-18 19:37 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:29 - 2014-05-16 13:02 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:31 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 17:31 - 2014-05-06 17:32 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:30 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:29 - 2014-05-06 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:08 - 2014-04-28 19:42 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-25 11:57 - 2014-04-25 11:59 - 00000000 ____D () C:\Minecraft_Backup
==================== One Month Modified Files and Folders =======
2014-05-24 13:42 - 2014-05-19 13:48 - 00013246 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-24 13:42 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-24 13:41 - 2014-04-12 11:30 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-24 13:41 - 2014-04-12 11:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-24 13:22 - 2014-02-22 19:55 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\TS3Client
2014-05-24 13:16 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Spotify
2014-05-24 13:04 - 2013-12-31 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-24 13:03 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-24 13:02 - 2014-01-02 11:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\CrashDumps
2014-05-24 13:01 - 2014-05-24 13:01 - 00187207 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_yuno.solutions cracked.rar
2014-05-24 12:49 - 2014-01-02 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-24 07:46 - 2014-04-12 11:30 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-24 07:38 - 2014-05-24 07:38 - 00375728 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_CSGOsoupbear.zip
2014-05-23 19:33 - 2014-05-23 19:33 - 00005353 _____ () C:\Users\CodeX\Downloads\bibanator-cs_go-gaming-config-2014.rar
2014-05-23 18:58 - 2011-04-12 10:06 - 00765514 _____ () C:\Windows\system32\perfh007.dat
2014-05-23 18:58 - 2011-04-12 10:06 - 00174712 _____ () C:\Windows\system32\perfc007.dat
2014-05-23 18:58 - 2009-07-14 07:13 - 01806010 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-23 13:36 - 2014-04-12 11:30 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-23 13:36 - 2014-04-12 11:30 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-23 13:06 - 2014-05-23 13:06 - 00165376 _____ () C:\Users\CodeX\Downloads\SystemLook_x64.exe
2014-05-23 13:06 - 2014-05-23 13:06 - 00002776 _____ () C:\Users\CodeX\Downloads\SystemLook.txt
2014-05-23 13:04 - 2014-05-10 16:46 - 00000840 _____ () C:\Windows\setupact.log
2014-05-22 19:38 - 2013-12-31 17:09 - 01295096 _____ () C:\Windows\WindowsUpdate.log
2014-05-22 19:08 - 2013-12-31 18:54 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Skype
2014-05-22 13:55 - 2014-05-22 13:55 - 00001168 _____ () C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2014-05-22 13:55 - 2014-05-22 13:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-05-22 13:55 - 2014-01-01 13:19 - 00000000 ____D () C:\Users\CodeX\Documents\Camtasia Studio
2014-05-22 13:55 - 2014-01-01 13:19 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith
2014-05-22 13:48 - 2014-05-22 13:44 - 256616296 _____ () C:\Users\CodeX\Downloads\camtasiade.exe
2014-05-22 13:34 - 2014-05-19 13:49 - 00037651 _____ () C:\Users\CodeX\Downloads\Addition.txt
2014-05-21 21:16 - 2014-05-21 21:16 - 00375786 _____ () C:\Users\CodeX\Documents\ts3_clientui-win64-1394624943-2014-05-21 21_16_12.896150.dmp
2014-05-21 19:54 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-21 19:54 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-21 19:54 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-21 19:43 - 2014-05-21 19:43 - 00094630 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_winject17b.rar
2014-05-21 19:43 - 2014-05-21 19:43 - 00062464 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_unihack_csgo_pub.dll
2014-05-21 19:41 - 2014-05-21 19:41 - 00055733 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_tier0cheats-csgo-1.8.zip
2014-05-20 21:22 - 2014-05-20 21:22 - 00074329 _____ () C:\Users\CodeX\Downloads\astgen11.zip
2014-05-20 21:22 - 2014-05-20 21:08 - 00008501 _____ () C:\Users\CodeX\Desktop\blabla.html
2014-05-20 21:12 - 2014-05-20 21:12 - 00000071 _____ () C:\Users\CodeX\Desktop\GameOverlayUI.exe.log
2014-05-20 21:11 - 2014-05-20 21:11 - 00161381 _____ () C:\Users\CodeX\Downloads\blob2ini2blob.zip
2014-05-20 20:20 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Spotify
2014-05-20 20:05 - 2014-05-20 20:05 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Users\CodeX\Documents\My RoboForm Data
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2014-05-20 20:03 - 2014-05-20 20:03 - 00000000 ____D () C:\Program Files (x86)\Siber Systems
2014-05-20 20:02 - 2014-05-20 20:02 - 16619392 _____ (Siber Systems) C:\Users\CodeX\Downloads\RoboForm-Setup.exe
2014-05-20 13:37 - 2014-05-20 13:37 - 00855379 _____ () C:\Users\CodeX\Downloads\SecurityCheck.exe
2014-05-20 13:20 - 2014-05-20 13:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-20 13:19 - 2014-05-20 13:19 - 02347384 _____ (ESET) C:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
2014-05-20 13:13 - 2014-05-20 13:13 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64 (1).exe
2014-05-19 13:48 - 2014-05-19 13:47 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:34 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-19 13:29 - 2014-05-10 16:45 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-19 13:28 - 2014-05-14 20:08 - 00000000 ____D () C:\AdwCleaner
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:48 - 2014-03-11 15:31 - 00000000 ____D () C:\Program Files (x86)\GTA
2014-05-18 19:37 - 2014-05-10 08:45 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:36 - 2014-05-18 19:03 - 00000000 ___SD () C:\ComboFix
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:34 - 2014-05-18 19:32 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:16 - 2014-05-16 13:15 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:10 - 2014-01-02 17:11 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-16 13:02 - 2014-05-06 18:29 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-16 13:02 - 2014-01-03 19:34 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 13:01 - 2011-04-12 10:21 - 00000000 ____D () C:\Windows\CSC
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:10 - 2013-12-31 17:21 - 00000995 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-14 20:10 - 2013-12-31 17:18 - 00000000 ____D () C:\Users\CodeX
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:49 - 2014-01-02 12:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:49 - 2014-01-02 12:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 19:49 - 2014-01-02 12:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:38 - 2014-05-10 20:37 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:12 - 2014-01-01 19:25 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\UseNeXT
2014-05-10 17:57 - 2014-03-29 09:32 - 00000000 ____D () C:\Users\CodeX\Desktop\Steuerklopfer
2014-05-10 17:01 - 2014-05-10 17:00 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 14:18 - 2013-12-31 20:36 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\.minecraft
2014-05-10 14:15 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:35 - 2014-04-12 11:35 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-10 09:35 - 2014-04-12 11:35 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-10 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 18:58 - 2014-05-06 17:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:41 - 2014-05-06 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:32 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-05-06 17:31 - 2013-12-31 17:52 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Google
2014-05-05 13:23 - 2014-01-15 17:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:42 - 2014-04-28 19:08 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-25 11:59 - 2014-04-25 11:57 - 00000000 ____D () C:\Minecraft_Backup
Some content of TEMP:
====================
C:\Users\CodeX\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2013-03-02 19:39] - [2013-03-02 19:39] - 0391680 ____A (Microsoft Corporation) 13CD6BA1F798A61AEE985E78D3644A1E
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2871296 ____A (Microsoft Corporation) 70D758D2DBE79757421017EE68143763
C:\Windows\SysWOW64\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2616320 ____A (Microsoft Corporation) B0846DB5BDAB92131529A58E627FCEB7
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 1008128 ____A (Microsoft Corporation) 7FB4D54B502C6CF2E35B8188FA4CC08C
C:\Windows\SysWOW64\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 0833024 ____A (Microsoft Corporation) 9B836EE76E3A99052EF6DEA52B41D1BE
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2013-03-02 20:07] - [2013-03-02 20:07] - 0512512 ____A (Microsoft Corporation) 83D5AD7CFDB1F9D42C3CD102B20FFA0A
ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2013-03-02 19:56] - [2013-03-02 19:56] - 0296304 ____A (Microsoft Corporation) A56F2326CE33646CDA95E7A9E7163FFA
LastRegBack: 2014-05-23 15:29
==================== End Of Log ============================
Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-24 13:43:16
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: ESET Smart Security 7.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Disabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
==================== Installed Programs ======================
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{C7A772A4-73CF-EB06-172F-75C5F6C80AAC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In (Version: 2.06.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Camtasia Studio 8 (HKLM-x32\...\{419CEBE1-36E9-4AB2-8586-D6213AE28621}) (Version: 8.4.0.1699 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Craften Terminal 3.4.5 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DarkComet RAT Remover version 1.0 (HKLM-x32\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Deponia (HKLM-x32\...\Steam App 214340) (Version: - Daedalic Entertainment)
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dojotech Spotify Recorder (HKLM-x32\...\{D149DB2E-392E-48CC-8036-88BECC09C50A}) (Version: 3.2 - Dojotech Software)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.1 - Daedalic Entertainment)
Edna Bricht Aus 6.3 (HKLM-x32\...\{0D00CD3F-AEDC-45F1-A2DD-DADF74407D7B}_is1) (Version: - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version: - Turtle Entertainment GmbH)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.007 - HTC Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version: - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version: - PokerStars.net)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RoboForm 7-9-7-5 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-7-5 - Siber Systems)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Tunatic (HKLM-x32\...\Tunatic) (Version: - )
Unterstützungsdateien für Microsoft SQL Server 2008-Setup (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
==================== Restore Points =========================
06-05-2014 15:25:30 Installed Dojotech Spotify Recorder
06-05-2014 15:28:20 Removed Dojotech Spotify Recorder
06-05-2014 15:28:59 Installed Dojotech Spotify Recorder
06-05-2014 15:40:46 Installed Dojotech Spotify Recorder
14-05-2014 17:37:30 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde installiert.
16-05-2014 11:15:14 Revo Uninstaller's restore point - Youtube Downloader HD v. 2.9.9.13
18-05-2014 17:03:33 ComboFix created restore point
22-05-2014 11:53:06 Camtasia Studio 8 wird installiert
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05F4A343-9592-4156-A891-8A6074A0FB15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1F824E18-E1C1-4E5F-AE92-4E7A710B3F60} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {6991998A-AE4E-464A-A184-2C64254F2647} - System32\Tasks\{7A680034-4A98-48D7-81A9-FF3A869593C9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {735C8257-D086-4586-8E54-15FD2EBA3C7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: {793F1221-A7AE-404F-BE05-E96108756E24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {91392D79-87F8-4D01-BE2A-48002413C522} - System32\Tasks\SN.Booster-S-014941198 => c:\programdata\appready software\sn.booster\SN.Booster.exe
Task: {9ECA6AE5-B08B-4854-A4B6-49F8A1731DED} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {BB71E53C-A859-47CA-87B9-4136ABAFDFD6} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {D8F2F778-777E-4266-8C01-8633FE30BEB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F5C04EAB-1A3C-4478-A06F-65CE541348B8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-12-06 17:06 - 2013-12-06 17:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 23:18 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe
2014-04-12 23:18 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll
2011-03-31 17:08 - 2011-03-31 17:08 - 00080896 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-12-06 17:06 - 2013-12-06 17:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-22 18:22 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-02-15 21:43 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-02-15 21:43 - 2014-05-17 03:36 - 00756224 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 02198720 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-02-15 21:43 - 2014-05-21 19:39 - 01145536 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-02-15 21:43 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-24 07:46 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/24/2014 01:02:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: csgo.exe, Version: 0.0.0.0, Zeitstempel: 0x53628ca7
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22379, Zeitstempel: 0x51da487d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e426
ID des fehlerhaften Prozesses: 0x1f44
Startzeit der fehlerhaften Anwendung: 0xcsgo.exe0
Pfad der fehlerhaften Anwendung: csgo.exe1
Pfad des fehlerhaften Moduls: csgo.exe2
Berichtskennung: csgo.exe3
Error: (05/24/2014 08:57:45 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1388
Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1388
Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/24/2014 08:16:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ts3client_win64.exe, Version: 3.0.14.0, Zeitstempel: 0x53204a50
Name des fehlerhaften Moduls: ts3client_win64.exe, Version: 3.0.14.0, Zeitstempel: 0x53204a50
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000002b8972
ID des fehlerhaften Prozesses: 0x1724
Startzeit der fehlerhaften Anwendung: 0xts3client_win64.exe0
Pfad der fehlerhaften Anwendung: ts3client_win64.exe1
Pfad des fehlerhaften Moduls: ts3client_win64.exe2
Berichtskennung: ts3client_win64.exe3
Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1623
Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1623
Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/24/2014 07:35:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 34044597
System errors:
=============
Error: (05/21/2014 07:05:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/21/2014 07:05:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Microsoft Office Sessions:
=========================
Error: (05/24/2014 01:02:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: csgo.exe0.0.0.053628ca7ntdll.dll6.1.7601.2237951da487dc00000050002e4261f4401cf77263d6f8937C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exeC:\Windows\SysWOW64\ntdll.dllea2adbe7-e332-11e3-b9a1-9b3590fd434f
Error: (05/24/2014 08:57:45 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\CodeX\Downloads\esetsmartinstaller_deu.exe
Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1388
Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1388
Error: (05/24/2014 08:16:04 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/24/2014 08:16:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: ts3client_win64.exe3.0.14.053204a50ts3client_win64.exe3.0.14.053204a50c000000500000000002b8972172401cf7692f1acca9dC:\Program Files\TeamSpeak 3 Client\ts3client_win64.exeC:\Program Files\TeamSpeak 3 Client\ts3client_win64.exee1f73bdd-e30a-11e3-b9a1-9b3590fd434f
Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1623
Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1623
Error: (05/24/2014 08:06:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/24/2014 07:35:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 34044597
CodeIntegrity Errors:
===================================
Date: 2014-05-19 13:30:07.528
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-19 13:30:07.262
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-16 13:02:21.123
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-16 13:02:20.858
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-14 20:12:22.450
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-14 20:12:22.200
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-10 16:45:58.762
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-10 16:45:58.481
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-06 18:29:12.870
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-06 18:29:12.652
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 26%
Total physical RAM: 7654.11 MB
Available physical RAM: 5643.43 MB
Total Pagefile: 15306.41 MB
Available Pagefile: 12815.06 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.61 GB) (Free:129.17 GB) NTFS
Drive d: () (Fixed) (Total:222.54 GB) (Free:215.68 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 753715F6)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
25.05.2014, 06:50
| #21 |
| /// the machine /// TB-Ausbilder | Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam. |
|
Linear-Darstellung
