Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam.

NeonReflexe · 14.05.2014, 18:48

Hallo, seit kurzer Zeit ich mein Laptop echt ziemlich langsam. Ich weiß nicht woran das liegt ob er alt wird oder was auch immer.
Spiele die ich sonst so lagg frei gespielt habe ruckeln seit neustem.
Wenn ihr mir helfen wollt könnt ich dieses Thema behandeln.

Aber nun zu meinem HAUPTHEMA:
Einige meine Programme funktionieren einfach nicht mehr. Ich kann fast alle Programme starten nur bei manchen bekomm ich name.exe funktioniert nicht mehr. Neuinstallieren funktioniert nicht.
Bitte helft mir.

schrauber · 14.05.2014, 18:56

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

NeonReflexe · 14.05.2014, 18:59

Defogger:

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 19:55 on 14/05/2014 (CodeX)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

FRST

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-05-2014
Ran by CodeX (administrator) on USER-PC on 14-05-2014 19:56:08
Running from C:\Users\CodeX\Downloads
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(IV/Anthrax) C:\Users\CodeX\Desktop\PAWN\Pawnfox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found
AppInit_DLLs-x32: c:\progra~2\sn0310~1.boo => "c:\progra~2\sn0310~1.boo" File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
SearchScopes: HKCU - DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.aartemis.com/web/?type=ds&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]

Chrome: 
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-31]
CHR Extension: (YouTube) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-31]
CHR Extension: (Google-Suche) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-31]
CHR Extension: (AdBlock) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (Google Wallet) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-31]
CHR Extension: (YouTube Unblocker) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-14]
CHR Extension: (Google Mail) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-31]
CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\CodeX\AppData\Local\mysearchdial-speeddial.crx [2014-01-01]
CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\CodeX\AppData\Local\mysearchdial-speeddial.crx [2014-01-01]
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-01]
CHR HKLM-x32\...\Chrome\Extension: [logekkkdbdidmmcgkonmmonclldogceg] - C:\Program Files (x86)\Show-Password\150.crx [2014-01-01]
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\CodeX\AppData\Local\mysearchdial-speeddial.crx [2014-01-01]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S2 1a34a8e0; C:\Program Files (x86)\SNSvc.dll [174928 2014-05-06] ()
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-12-31] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] ()
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()
S2 70e6ca8c; "c:\progra~2\optimi~1\OptProCrash.exe" [X]
S2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe run options=01110010010000000000000000000000 sourceguid=F59A0002-F007-46FB-97D3-3BC5D2551041 [X]
S2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [X]

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-02] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-04-12] (<Turtle Entertainment>)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-14] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-11-13] (Anchorfree Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 DfSdkS; 
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-14 19:56 - 2014-05-14 19:56 - 00018606 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-14 19:56 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-14 19:55 - 2014-05-14 19:55 - 02066944 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-14 19:55 - 2014-05-14 19:55 - 00000472 _____ () C:\Users\CodeX\Downloads\defogger_disable.log
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:54 - 2014-05-14 19:54 - 00050477 _____ () C:\Users\CodeX\Downloads\Defogger.exe
2014-05-14 19:52 - 2014-05-14 19:52 - 00291985 _____ () C:\Users\CodeX\Downloads\Keygen-MBAM.rar
2014-05-14 19:44 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-14 19:43 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 19:43 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 19:43 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 19:42 - 2014-05-14 19:43 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\CodeX\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-14 19:36 - 2014-05-14 19:36 - 04522644 _____ () C:\Users\CodeX\Downloads\1246446932Setup.rar
2014-05-14 19:29 - 2014-05-14 19:29 - 00790066 _____ () C:\Users\CodeX\Downloads\Pawnfox_131.rar
2014-05-14 18:46 - 2014-05-14 18:46 - 00282775 _____ () C:\Users\CodeX\Downloads\YouTube-Unblocker-055.crx
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:37 - 2014-05-10 20:38 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:13 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 19:03 - 2014-05-10 19:03 - 00452608 _____ (ForFree) C:\Users\CodeX\Downloads\Inuria CS GO Full 3.0 CRACKED.exe
2014-05-10 18:40 - 2014-05-10 18:40 - 00087528 _____ () C:\Users\CodeX\Downloads\CSGO Recoil Reducer_mpgh.net.rar
2014-05-10 18:23 - 2014-05-10 18:23 - 00105332 _____ () C:\Users\CodeX\Downloads\DerpRadar CSGO Plugin v1.1.2_[www.unknowncheats.me]_.rar
2014-05-10 18:09 - 2014-05-10 18:09 - 00393120 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_ColdsoupCheats.zip
2014-05-10 17:47 - 2014-05-10 17:47 - 02189048 _____ (Skillbrains ) C:\Users\CodeX\Downloads\setup-lightshot.exe
2014-05-10 17:00 - 2014-05-10 17:01 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-14 18:58 - 00000280 _____ () C:\Windows\setupact.log
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:45 - 2014-05-10 16:45 - 00001084 _____ () C:\Windows\PFRO.log
2014-05-10 14:25 - 2014-05-10 14:25 - 00342510 _____ () C:\Users\CodeX\Downloads\OptiFine-HD-Standard-D5-1.4.7.zip
2014-05-10 14:17 - 2014-05-10 14:17 - 00000000 _____ () C:\Users\CodeX\Downloads\server.log
2014-05-10 14:13 - 2014-05-10 20:16 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 14:13 - 2014-05-10 14:15 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 14:13 - 2014-05-10 14:13 - 04588972 _____ () C:\Users\CodeX\Downloads\launcher^FTB_Launcher.exe
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:20 - 2014-05-10 09:20 - 00543000 _____ () C:\Users\CodeX\Downloads\TunaticSetup.exe
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 09:03 - 2014-05-10 09:03 - 02367646 _____ () C:\Users\CodeX\Downloads\mysql-r38-win.zip
2014-05-10 09:01 - 2014-05-10 09:01 - 02522928 _____ () C:\Users\CodeX\Downloads\includesplugins.rar
2014-05-10 09:01 - 2014-05-10 09:01 - 00236928 _____ () C:\Users\CodeX\Downloads\includesplugins_downloader-auXYI9NV.exe
2014-05-10 08:45 - 2014-05-14 19:30 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-10 08:45 - 2014-05-10 08:45 - 01975133 _____ () C:\Users\CodeX\Downloads\samp03z_svr_R1_win32.zip
2014-05-09 18:08 - 2014-05-09 18:08 - 00396833 _____ () C:\Users\CodeX\Downloads\CSGOsoupbear_mpgh.net.zip
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-07 17:05 - 2014-05-07 17:05 - 01035176 _____ () C:\Users\CodeX\Downloads\R3CLIENT.zip
2014-05-06 18:58 - 2014-05-06 18:58 - 00174928 _____ () C:\Program Files (x86)\SNSvc.dll
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\savee net
2014-05-06 18:57 - 2014-05-06 18:57 - 00335720 _____ (AppReady Software) C:\Users\CodeX\Downloads\Peter Maffay - So bist du (1).exe
2014-05-06 18:56 - 2014-05-06 18:56 - 00335736 _____ (AppReady Software) C:\Users\CodeX\Downloads\Peter Maffay - So bist du.exe
2014-05-06 18:29 - 2014-05-06 18:29 - 625206398 _____ () C:\Windows\MEMORY.DMP
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:38 - 2014-05-06 17:38 - 00000000 ____D () C:\ProgramData\sAve  net
2014-05-06 17:36 - 2014-05-06 17:36 - 04471576 _____ () C:\Users\CodeX\Downloads\installer_dojotech_spotify_recorder_English.exe
2014-05-06 17:32 - 2014-05-06 17:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\SearchProtect
2014-05-06 17:32 - 2014-05-06 17:32 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-06 17:31 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 17:31 - 2014-05-06 17:55 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-05-06 17:31 - 2014-05-06 17:32 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\savve net
2014-05-06 17:30 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:30 - 2014-05-06 17:30 - 00342264 _____ (AppReady Software) C:\Users\CodeX\Downloads\Dojotech Spotify Recorder 3.3.exe
2014-05-06 17:29 - 2014-05-06 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:25 - 2014-05-06 17:25 - 00824106 _____ () C:\Users\CodeX\Downloads\SpotifyRecorderSetup15.exe
2014-05-06 17:01 - 2014-05-06 17:01 - 00347816 _____ (Microsoft Corporation) C:\Users\CodeX\Downloads\MicrosoftFixit.dvd.RNP.111322819196153843.2.1.Run.exe
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-01 18:27 - 2014-05-01 18:27 - 13084896 _____ (Microsoft Corporation) C:\Users\CodeX\Downloads\Silverlight_x64.exe
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:08 - 2014-04-28 19:42 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-27 15:15 - 2014-04-27 15:15 - 00254645 _____ () C:\Users\CodeX\Downloads\[1.7.2]ReiMinimap_v3.4_03beta.zip
2014-04-27 15:13 - 2014-04-27 15:13 - 00216910 _____ () C:\Users\CodeX\Downloads\InventoryTweaks-1.57-116.jar
2014-04-25 19:18 - 2014-04-25 19:18 - 00356321 _____ () C:\Users\CodeX\Downloads\OneDrive-2014-04-25.zip
2014-04-25 12:30 - 2014-04-25 12:30 - 00710922 _____ () C:\Users\CodeX\Downloads\mod_sa.v4.3.3.3.SA-MP.v0.3z R1.Setup.7z
2014-04-25 12:24 - 2014-04-25 12:24 - 00450622 _____ () C:\Users\CodeX\Downloads\mod_sa0.3z.rar
2014-04-25 12:22 - 2014-04-25 12:22 - 09692601 _____ () C:\Users\CodeX\Downloads\[mod_sa]25GHz Project(BETA - v0.1)(0.3z-RC).7z
2014-04-25 11:57 - 2014-04-25 11:59 - 00000000 ____D () C:\Minecraft_Backup
2014-04-25 11:57 - 2014-04-25 11:57 - 00462336 _____ (Dino Chiesa) C:\Users\CodeX\Downloads\Ionic.Zip.dll
2014-04-25 11:55 - 2014-04-25 11:55 - 06699520 _____ (Minecraft Installers) C:\Users\CodeX\Downloads\thehen101's Xray Mod Installer 1.7.9.exe
2014-04-25 11:47 - 2014-04-25 11:47 - 05127324 _____ () C:\Users\CodeX\Downloads\Faithful_3.zip
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:40 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 17:50 - 2014-04-23 17:50 - 11990847 _____ () C:\Users\CodeX\Downloads\sa-mp-0.3z-R1-install.exe
2014-04-23 15:18 - 2014-04-23 15:18 - 00675988 _____ () C:\Users\CodeX\Downloads\Minecraft.exe
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:20 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-04-23 14:20 - 2014-04-23 14:21 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-23 14:20 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-23 14:20 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-21 22:15 - 2014-04-23 14:27 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-04-21 22:15 - 2014-04-21 22:16 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-04-21 22:15 - 2014-04-21 22:15 - 01473129 _____ () C:\Users\CodeX\Downloads\PSC Generator.zip
2014-04-21 22:10 - 2014-04-21 22:10 - 01344600 _____ (ZICO LTD) C:\Users\CodeX\Downloads\TF2HatGenerator__6857_il2865932.exe
2014-04-21 21:56 - 2014-04-21 21:56 - 00000122 _____ () C:\Users\CodeX\Documents\PASSWPRD HERE!!.url
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ESET
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\Program Files\ESET
2014-04-21 21:10 - 2014-04-21 21:10 - 01581384 _____ (ESET) C:\Users\CodeX\Downloads\eset_smart_security_live_installer_.exe
2014-04-21 21:09 - 2014-04-21 21:09 - 00866735 _____ () C:\Users\CodeX\Downloads\DCRemoverV1_setup.zip
2014-04-21 21:09 - 2014-04-21 21:09 - 00001178 _____ () C:\Users\Public\Desktop\DarkComet Remover.lnk
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\Program Files (x86)\PhrozenSoft
2014-04-21 19:50 - 2014-04-21 19:50 - 00527423 _____ ( ) C:\Users\CodeX\Downloads\Lame_v3.99.3_for_Windows.exe
2014-04-21 19:50 - 2014-04-21 19:50 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-04-21 16:36 - 2014-04-21 16:36 - 00613200 _____ (Chip Digital GmbH) C:\Users\CodeX\Downloads\MorphVOX Pro - CHIP-Downloader.exe
2014-04-21 14:44 - 2013-08-01 02:06 - 00000000 ____D () C:\Users\CodeX\Desktop\upload
2014-04-21 14:37 - 2014-04-21 14:38 - 08238263 _____ () C:\Users\CodeX\Downloads\WBB3.1.8_FULL+UPDATE.ZIP
2014-04-20 15:15 - 2014-04-20 15:15 - 00001211 _____ () C:\Users\CodeX\Desktop\Driver Genius.lnk
2014-04-20 15:15 - 2014-04-20 15:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Genius
2014-04-20 15:10 - 2014-04-20 15:14 - 13910880 _____ () C:\Users\CodeX\Downloads\090.rar
2014-04-17 07:53 - 2014-04-17 07:53 - 00201590 _____ () C:\Users\CodeX\Downloads\ImprovedBhop.zip
2014-04-16 08:47 - 2014-04-16 08:47 - 06555942 _____ () C:\Users\CodeX\Downloads\xulrunner-1.8.1.3.en-US.win32.zip
2014-04-16 08:47 - 2014-04-16 08:47 - 06502113 _____ () C:\Users\CodeX\Downloads\xulrunner-1.8.1.3.en-US.win32-20080128.zip
2014-04-15 21:28 - 2010-08-28 22:36 - 00096256 _____ () C:\Users\CodeX\Desktop\WebKitBrowser.dll
2014-04-15 21:28 - 2010-08-28 15:41 - 08002048 _____ (Apple Inc.) C:\Users\CodeX\Desktop\WebKit.dll
2014-04-15 21:28 - 2009-09-08 16:58 - 00192512 _____ (Skybound Software (hxxp://www.skybound.ca)) C:\Users\CodeX\Desktop\Skybound.Gecko.dll
2014-04-15 21:27 - 2014-04-15 21:27 - 00000000 ____D () C:\Program Files (x86)\XUL Runner
2014-04-15 21:26 - 2014-04-15 21:26 - 26415458 _____ () C:\Users\CodeX\Downloads\xulrunner-28.0.en-US.win32.zip
2014-04-15 21:24 - 2014-04-15 21:24 - 00090559 _____ () C:\Users\CodeX\Downloads\Skybound.GeckoFX.bin.v1.9.1.0.zip
2014-04-15 21:23 - 2014-04-15 21:24 - 13911017 _____ () C:\Users\CodeX\Downloads\WebKit.NET-0.5-bin-cairo.zip
2014-04-15 20:57 - 2014-04-15 20:57 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft Corporation
2014-04-15 17:45 - 2014-04-22 21:39 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-04-15 17:29 - 2014-04-15 17:29 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Avnex
2014-04-15 17:27 - 2014-04-22 21:38 - 00000000 ____D () C:\Program Files (x86)\AV Voice Changer 8.0 Diamond
2014-04-15 17:27 - 2008-12-26 12:56 - 00021504 _____ (Avnex) C:\Windows\system32\Drivers\vcsvad.sys
2014-04-15 17:16 - 2009-11-18 13:14 - 05180288 _____ () C:\Users\CodeX\Desktop\MorphVOXPro4_Install-1.exe
2014-04-15 17:15 - 2014-04-15 17:15 - 00000000 ____D () C:\Program Files (x86)\Screaming Bee

==================== One Month Modified Files and Folders =======

2014-05-14 19:56 - 2014-05-14 19:56 - 00018606 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-14 19:56 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-14 19:56 - 2013-12-31 18:54 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Skype
2014-05-14 19:55 - 2014-05-14 19:55 - 02066944 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-14 19:55 - 2014-05-14 19:55 - 00000472 _____ () C:\Users\CodeX\Downloads\defogger_disable.log
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:55 - 2013-12-31 17:18 - 00000000 ____D () C:\Users\CodeX
2014-05-14 19:54 - 2014-05-14 19:54 - 00050477 _____ () C:\Users\CodeX\Downloads\Defogger.exe
2014-05-14 19:52 - 2014-05-14 19:52 - 00291985 _____ () C:\Users\CodeX\Downloads\Keygen-MBAM.rar
2014-05-14 19:49 - 2014-01-02 12:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:49 - 2014-01-02 12:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 19:49 - 2014-01-02 12:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:49 - 2014-01-02 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-14 19:48 - 2013-12-31 17:09 - 01152336 _____ () C:\Windows\WindowsUpdate.log
2014-05-14 19:44 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-14 19:43 - 2014-05-14 19:42 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\CodeX\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:39 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Spotify
2014-05-14 19:39 - 2013-12-31 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-14 19:36 - 2014-05-14 19:36 - 04522644 _____ () C:\Users\CodeX\Downloads\1246446932Setup.rar
2014-05-14 19:35 - 2014-04-12 11:30 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-14 19:30 - 2014-05-10 08:45 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-14 19:29 - 2014-05-14 19:29 - 00790066 _____ () C:\Users\CodeX\Downloads\Pawnfox_131.rar
2014-05-14 18:58 - 2014-05-10 16:46 - 00000280 _____ () C:\Windows\setupact.log
2014-05-14 18:51 - 2014-02-22 19:55 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\TS3Client
2014-05-14 18:46 - 2014-05-14 18:46 - 00282775 _____ () C:\Users\CodeX\Downloads\YouTube-Unblocker-055.crx
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 18:10 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-11 18:10 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-11 15:02 - 2014-04-12 11:04 - 00000276 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-05-11 11:35 - 2014-04-12 11:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-11 09:11 - 2014-01-02 11:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\CrashDumps
2014-05-10 20:38 - 2014-05-10 20:37 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 20:16 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 19:13 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 19:12 - 2014-01-01 19:25 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\UseNeXT
2014-05-10 19:03 - 2014-05-10 19:03 - 00452608 _____ (ForFree) C:\Users\CodeX\Downloads\Inuria CS GO Full 3.0 CRACKED.exe
2014-05-10 18:40 - 2014-05-10 18:40 - 00087528 _____ () C:\Users\CodeX\Downloads\CSGO Recoil Reducer_mpgh.net.rar
2014-05-10 18:23 - 2014-05-10 18:23 - 00105332 _____ () C:\Users\CodeX\Downloads\DerpRadar CSGO Plugin v1.1.2_[www.unknowncheats.me]_.rar
2014-05-10 18:09 - 2014-05-10 18:09 - 00393120 _____ () C:\Users\CodeX\Downloads\[www.OldSchoolHack.de]_ColdsoupCheats.zip
2014-05-10 17:57 - 2014-03-29 09:32 - 00000000 ____D () C:\Users\CodeX\Desktop\Steuerklopfer
2014-05-10 17:47 - 2014-05-10 17:47 - 02189048 _____ (Skillbrains ) C:\Users\CodeX\Downloads\setup-lightshot.exe
2014-05-10 17:01 - 2014-05-10 17:00 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:46 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-10 16:45 - 2014-05-10 16:45 - 00001084 _____ () C:\Windows\PFRO.log
2014-05-10 14:25 - 2014-05-10 14:25 - 00342510 _____ () C:\Users\CodeX\Downloads\OptiFine-HD-Standard-D5-1.4.7.zip
2014-05-10 14:18 - 2013-12-31 20:36 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\.minecraft
2014-05-10 14:17 - 2014-05-10 14:17 - 00000000 _____ () C:\Users\CodeX\Downloads\server.log
2014-05-10 14:15 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 14:13 - 2014-05-10 14:13 - 04588972 _____ () C:\Users\CodeX\Downloads\launcher^FTB_Launcher.exe
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:35 - 2014-04-12 11:35 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-10 09:35 - 2014-04-12 11:35 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-10 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-10 09:20 - 2014-05-10 09:20 - 00543000 _____ () C:\Users\CodeX\Downloads\TunaticSetup.exe
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 09:03 - 2014-05-10 09:03 - 02367646 _____ () C:\Users\CodeX\Downloads\mysql-r38-win.zip
2014-05-10 09:01 - 2014-05-10 09:01 - 02522928 _____ () C:\Users\CodeX\Downloads\includesplugins.rar
2014-05-10 09:01 - 2014-05-10 09:01 - 00236928 _____ () C:\Users\CodeX\Downloads\includesplugins_downloader-auXYI9NV.exe
2014-05-10 08:45 - 2014-05-10 08:45 - 01975133 _____ () C:\Users\CodeX\Downloads\samp03z_svr_R1_win32.zip
2014-05-09 18:08 - 2014-05-09 18:08 - 00396833 _____ () C:\Users\CodeX\Downloads\CSGOsoupbear_mpgh.net.zip
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-08 21:29 - 2014-01-01 13:19 - 00000000 ____D () C:\Users\CodeX\Documents\Camtasia Studio
2014-05-08 15:15 - 2014-03-11 15:31 - 00000000 ____D () C:\Program Files (x86)\GTA
2014-05-07 20:06 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Spotify
2014-05-07 17:05 - 2014-05-07 17:05 - 01035176 _____ () C:\Users\CodeX\Downloads\R3CLIENT.zip
2014-05-06 18:58 - 2014-05-06 18:58 - 00174928 _____ () C:\Program Files (x86)\SNSvc.dll
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\savee net
2014-05-06 18:58 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 18:58 - 2014-05-06 17:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 18:57 - 2014-05-06 18:57 - 00335720 _____ (AppReady Software) C:\Users\CodeX\Downloads\Peter Maffay - So bist du (1).exe
2014-05-06 18:56 - 2014-05-06 18:56 - 00335736 _____ (AppReady Software) C:\Users\CodeX\Downloads\Peter Maffay - So bist du.exe
2014-05-06 18:29 - 2014-05-06 18:29 - 625206398 _____ () C:\Windows\MEMORY.DMP
2014-05-06 18:29 - 2014-01-03 19:34 - 00000000 ____D () C:\Windows\Minidump
2014-05-06 17:55 - 2014-05-06 17:31 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:41 - 2014-05-06 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:38 - 2014-05-06 17:38 - 00000000 ____D () C:\ProgramData\sAve  net
2014-05-06 17:36 - 2014-05-06 17:36 - 04471576 _____ () C:\Users\CodeX\Downloads\installer_dojotech_spotify_recorder_English.exe
2014-05-06 17:32 - 2014-05-06 17:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\SearchProtect
2014-05-06 17:32 - 2014-05-06 17:32 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-06 17:32 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\savve net
2014-05-06 17:31 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-05-06 17:31 - 2013-12-31 17:52 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Google
2014-05-06 17:30 - 2014-05-06 17:30 - 00342264 _____ (AppReady Software) C:\Users\CodeX\Downloads\Dojotech Spotify Recorder 3.3.exe
2014-05-06 17:25 - 2014-05-06 17:25 - 00824106 _____ () C:\Users\CodeX\Downloads\SpotifyRecorderSetup15.exe
2014-05-06 17:01 - 2014-05-06 17:01 - 00347816 _____ (Microsoft Corporation) C:\Users\CodeX\Downloads\MicrosoftFixit.dvd.RNP.111322819196153843.2.1.Run.exe
2014-05-05 13:23 - 2014-01-15 17:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-01 18:27 - 2014-05-01 18:27 - 13084896 _____ (Microsoft Corporation) C:\Users\CodeX\Downloads\Silverlight_x64.exe
2014-05-01 18:23 - 2011-04-12 10:06 - 00765514 _____ () C:\Windows\system32\perfh007.dat
2014-05-01 18:23 - 2011-04-12 10:06 - 00174712 _____ () C:\Windows\system32\perfc007.dat
2014-05-01 18:23 - 2009-07-14 07:13 - 01806010 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:42 - 2014-04-28 19:08 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-27 15:15 - 2014-04-27 15:15 - 00254645 _____ () C:\Users\CodeX\Downloads\[1.7.2]ReiMinimap_v3.4_03beta.zip
2014-04-27 15:13 - 2014-04-27 15:13 - 00216910 _____ () C:\Users\CodeX\Downloads\InventoryTweaks-1.57-116.jar
2014-04-26 14:18 - 2014-04-12 11:30 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-25 19:18 - 2014-04-25 19:18 - 00356321 _____ () C:\Users\CodeX\Downloads\OneDrive-2014-04-25.zip
2014-04-25 12:30 - 2014-04-25 12:30 - 00710922 _____ () C:\Users\CodeX\Downloads\mod_sa.v4.3.3.3.SA-MP.v0.3z R1.Setup.7z
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-25 12:24 - 2014-04-25 12:24 - 00450622 _____ () C:\Users\CodeX\Downloads\mod_sa0.3z.rar
2014-04-25 12:22 - 2014-04-25 12:22 - 09692601 _____ () C:\Users\CodeX\Downloads\[mod_sa]25GHz Project(BETA - v0.1)(0.3z-RC).7z
2014-04-25 11:59 - 2014-04-25 11:57 - 00000000 ____D () C:\Minecraft_Backup
2014-04-25 11:57 - 2014-04-25 11:57 - 00462336 _____ (Dino Chiesa) C:\Users\CodeX\Downloads\Ionic.Zip.dll
2014-04-25 11:55 - 2014-04-25 11:55 - 06699520 _____ (Minecraft Installers) C:\Users\CodeX\Downloads\thehen101's Xray Mod Installer 1.7.9.exe
2014-04-25 11:47 - 2014-04-25 11:47 - 05127324 _____ () C:\Users\CodeX\Downloads\Faithful_3.zip
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:42 - 2014-04-23 20:40 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 17:50 - 2014-04-23 17:50 - 11990847 _____ () C:\Users\CodeX\Downloads\sa-mp-0.3z-R1-install.exe
2014-04-23 15:18 - 2014-04-23 15:18 - 00675988 _____ () C:\Users\CodeX\Downloads\Minecraft.exe
2014-04-23 14:27 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-04-23 14:27 - 2014-04-08 19:25 - 00000000 __SHD () C:\Users\CodeX\Documents\MSDCSC
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:21 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-23 11:04 - 2014-04-12 11:04 - 00000284 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-04-22 21:46 - 2014-02-27 22:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-04-22 21:46 - 2014-01-15 20:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
2014-04-22 21:44 - 2014-04-12 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\psynetic
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Users\CodeX\AppData\Local\PokerStars.NET
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Program Files (x86)\PokerStars.NET
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Local\No23 Recorder
2014-04-22 21:41 - 2014-01-15 20:19 - 00000000 ____D () C:\Users\CodeX\Desktop\Nützliche Programme
2014-04-22 21:41 - 2014-01-01 17:19 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Mobogenie
2014-04-22 21:39 - 2014-04-15 17:45 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-04-22 21:38 - 2014-04-15 17:27 - 00000000 ____D () C:\Program Files (x86)\AV Voice Changer 8.0 Diamond
2014-04-22 21:38 - 2014-04-12 11:04 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\systweak
2014-04-22 21:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-22 21:37 - 2014-01-02 11:31 - 00000000 ____D () C:\Program Files (x86)\Mirillis
2014-04-22 21:37 - 2014-01-02 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-04-22 21:36 - 2014-01-01 17:13 - 00000000 ____D () C:\ProgramData\WPM
2014-04-22 21:29 - 2013-12-31 17:21 - 00000000 ___RD () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-22 12:39 - 2014-01-15 20:40 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-04-22 12:39 - 2014-01-01 17:19 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\newnext.me
2014-04-22 12:38 - 2013-12-31 21:09 - 00000000 __RSD () C:\Windows\SysWOW64\Flashplayer
2014-04-22 09:33 - 2005-03-31 18:59 - 05188397 ____H () C:\Users\CodeX\AppData\Roaming\CodeXlog.dat
2014-04-22 08:35 - 2014-04-11 21:35 - 00000000 ____D () C:\ProgramData\Origin
2014-04-21 22:16 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-04-21 22:15 - 2014-04-21 22:15 - 01473129 _____ () C:\Users\CodeX\Downloads\PSC Generator.zip
2014-04-21 22:10 - 2014-04-21 22:10 - 01344600 _____ (ZICO LTD) C:\Users\CodeX\Downloads\TF2HatGenerator__6857_il2865932.exe
2014-04-21 21:56 - 2014-04-21 21:56 - 00000122 _____ () C:\Users\CodeX\Documents\PASSWPRD HERE!!.url
2014-04-21 21:55 - 2014-01-15 20:39 - 00000000 ____D () C:\Program Files (x86)\Show-Password
2014-04-21 21:17 - 2005-04-19 16:13 - 00000000 _RSHD () C:\Users\CodeX\AppData\Roaming\WinDir
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ESET
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\Program Files\ESET
2014-04-21 21:10 - 2014-04-21 21:10 - 01581384 _____ (ESET) C:\Users\CodeX\Downloads\eset_smart_security_live_installer_.exe
2014-04-21 21:09 - 2014-04-21 21:09 - 00866735 _____ () C:\Users\CodeX\Downloads\DCRemoverV1_setup.zip
2014-04-21 21:09 - 2014-04-21 21:09 - 00001178 _____ () C:\Users\Public\Desktop\DarkComet Remover.lnk
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\Program Files (x86)\PhrozenSoft
2014-04-21 21:06 - 2009-07-14 07:08 - 00011214 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 20:37 - 2014-01-02 11:38 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Audacity
2014-04-21 19:50 - 2014-04-21 19:50 - 00527423 _____ ( ) C:\Users\CodeX\Downloads\Lame_v3.99.3_for_Windows.exe
2014-04-21 19:50 - 2014-04-21 19:50 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-04-21 16:48 - 2013-12-31 17:36 - 01780290 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-21 16:36 - 2014-04-21 16:36 - 00613200 _____ (Chip Digital GmbH) C:\Users\CodeX\Downloads\MorphVOX Pro - CHIP-Downloader.exe
2014-04-21 14:38 - 2014-04-21 14:37 - 08238263 _____ () C:\Users\CodeX\Downloads\WBB3.1.8_FULL+UPDATE.ZIP
2014-04-20 15:24 - 2014-04-12 23:18 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESL Wire Game Client
2014-04-20 15:23 - 2014-04-11 21:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-04-20 15:16 - 2013-12-31 19:38 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-04-20 15:15 - 2014-04-20 15:15 - 00001211 _____ () C:\Users\CodeX\Desktop\Driver Genius.lnk
2014-04-20 15:15 - 2014-04-20 15:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Genius
2014-04-20 15:14 - 2014-04-20 15:10 - 13910880 _____ () C:\Users\CodeX\Downloads\090.rar
2014-04-17 07:53 - 2014-04-17 07:53 - 00201590 _____ () C:\Users\CodeX\Downloads\ImprovedBhop.zip
2014-04-16 08:47 - 2014-04-16 08:47 - 06555942 _____ () C:\Users\CodeX\Downloads\xulrunner-1.8.1.3.en-US.win32.zip
2014-04-16 08:47 - 2014-04-16 08:47 - 06502113 _____ () C:\Users\CodeX\Downloads\xulrunner-1.8.1.3.en-US.win32-20080128.zip
2014-04-15 21:27 - 2014-04-15 21:27 - 00000000 ____D () C:\Program Files (x86)\XUL Runner
2014-04-15 21:26 - 2014-04-15 21:26 - 26415458 _____ () C:\Users\CodeX\Downloads\xulrunner-28.0.en-US.win32.zip
2014-04-15 21:24 - 2014-04-15 21:24 - 00090559 _____ () C:\Users\CodeX\Downloads\Skybound.GeckoFX.bin.v1.9.1.0.zip
2014-04-15 21:24 - 2014-04-15 21:23 - 13911017 _____ () C:\Users\CodeX\Downloads\WebKit.NET-0.5-bin-cairo.zip
2014-04-15 20:57 - 2014-04-15 20:57 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft Corporation
2014-04-15 17:29 - 2014-04-15 17:29 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Avnex
2014-04-15 17:15 - 2014-04-15 17:15 - 00000000 ____D () C:\Program Files (x86)\Screaming Bee
2014-04-14 08:20 - 2009-07-14 06:45 - 00392336 _____ () C:\Windows\system32\FNTCACHE.DAT

Some content of TEMP:
====================
C:\Users\CodeX\AppData\Local\Temp\TsuDB8CB768.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2013-03-02 19:39] - [2013-03-02 19:39] - 0391680 ____A (Microsoft Corporation) 13CD6BA1F798A61AEE985E78D3644A1E

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2871296 ____A (Microsoft Corporation) 70D758D2DBE79757421017EE68143763

C:\Windows\SysWOW64\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2616320 ____A (Microsoft Corporation) B0846DB5BDAB92131529A58E627FCEB7

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 1008128 ____A (Microsoft Corporation) 7FB4D54B502C6CF2E35B8188FA4CC08C

C:\Windows\SysWOW64\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 0833024 ____A (Microsoft Corporation) 9B836EE76E3A99052EF6DEA52B41D1BE

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2013-03-02 20:07] - [2013-03-02 20:07] - 0512512 ____A (Microsoft Corporation) 83D5AD7CFDB1F9D42C3CD102B20FFA0A

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2013-03-02 19:56] - [2013-03-02 19:56] - 0296304 ____A (Microsoft Corporation) A56F2326CE33646CDA95E7A9E7163FFA



LastRegBack: 2014-05-11 12:39

==================== End Of Log ============================

--- --- ---

FRST Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-05-2014
Ran by CodeX at 2014-05-14 19:57:19
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET Smart Security 7.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{C7A772A4-73CF-EB06-172F-75C5F6C80AAC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.06.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Craften Terminal 3.4.5 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DarkComet RAT Remover version 1.0 (HKLM-x32\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Deponia (HKLM-x32\...\Steam App 214340) (Version:  - Daedalic Entertainment)
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dojotech Spotify Recorder (HKLM-x32\...\{D149DB2E-392E-48CC-8036-88BECC09C50A}) (Version: 3.2 - Dojotech Software)
Driver Genius (HKLM-x32\...\Driver Genius_is1) (Version: 14.0 - Driver-Soft Inc.)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.1 - Daedalic Entertainment)
Edna Bricht Aus 6.3 (HKLM-x32\...\{0D00CD3F-AEDC-45F1-A2DD-DADF74407D7B}_is1) (Version:  - )
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version:  - Turtle Entertainment GmbH)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.007 - HTC Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Lollipop (HKCU\...\lollipop_04101237) (Version:  - Lollipop Network, S.L.) <==== ATTENTION
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{F6E484FB-BC48-4A63-8186-E25DF4607B3B}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
RegClean Pro (HKLM-x32\...\RegClean Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
savee net (HKLM-x32\...\{7DD5E91C-3864-77EC-7635-D14910C2A03E}) (Version: 2.1.0.1195 - ssave net)
SavingsbullFilter (Version: 1.0.0.0 - SavingsBull Filter) Hidden <==== ATTENTION
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.12.20.154 - Conduit) <==== ATTENTION
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SN.Booster (HKLM-x32\...\S-014941198) (Version: 2.3.0.1056 - PremiumSoft)
SN.Sustainer 1.80 (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{1a34a8e0}) (Version:  - Certified Publisher) <==== ATTENTION
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Tunatic (HKLM-x32\...\Tunatic) (Version:  - )
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Youtube Downloader HD v. 2.9.9.13 (HKLM-x32\...\Youtube Downloader HD_is1) (Version:  - YoutubeDownloaderHD.com) <==== ATTENTION
YoutubeAdblocker (HKLM-x32\...\{4820778D-AB0D-6D18-C316-52A6A0E1D507}) (Version: 2.1.0.1195 - YoutubeAdblocker) <==== ATTENTION

==================== Restore Points  =========================

21-04-2014 14:54:37 MorphVOX Pro wird installiert
22-04-2014 19:35:41 Supprimé (EMCO EVALUATION PACKAGE) - DG
22-04-2014 19:36:59 TrueCrypt uninstallation
22-04-2014 19:37:38 Removed Advanced Archive Password Recovery
22-04-2014 19:39:23 Entfernt CrazyTalk
22-04-2014 19:43:02 No23 Recorder wird entfernt
06-05-2014 15:25:30 Installed Dojotech Spotify Recorder
06-05-2014 15:28:20 Removed Dojotech Spotify Recorder
06-05-2014 15:28:59 Installed Dojotech Spotify Recorder
06-05-2014 15:40:46 Installed Dojotech Spotify Recorder
14-05-2014 17:37:30 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde installiert.

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05F4A343-9592-4156-A891-8A6074A0FB15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1F824E18-E1C1-4E5F-AE92-4E7A710B3F60} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {6991998A-AE4E-464A-A184-2C64254F2647} - System32\Tasks\{7A680034-4A98-48D7-81A9-FF3A869593C9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {735C8257-D086-4586-8E54-15FD2EBA3C7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: {793F1221-A7AE-404F-BE05-E96108756E24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {91392D79-87F8-4D01-BE2A-48002413C522} - System32\Tasks\SN.Booster-S-014941198 => c:\programdata\appready software\sn.booster\SN.Booster.exe
Task: {9ECA6AE5-B08B-4854-A4B6-49F8A1731DED} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {BB71E53C-A859-47CA-87B9-4136ABAFDFD6} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\CodeX\AppData\Local\FilesFrog Update Checker\update_checker.exe <==== ATTENTION
Task: {D8F2F778-777E-4266-8C01-8633FE30BEB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F5C04EAB-1A3C-4478-A06F-65CE541348B8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-12-06 17:06 - 2013-12-06 17:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 23:18 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe
2014-04-12 23:18 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll
2011-03-31 17:08 - 2011-03-31 17:08 - 00080896 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2013-10-23 14:15 - 2014-03-11 13:59 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2013-10-23 14:15 - 2014-03-11 13:59 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2013-10-23 14:15 - 2014-03-11 13:59 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-10-23 14:15 - 2014-03-11 13:59 - 00577480 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-03-11 13:59 - 2014-03-11 13:59 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-04-22 18:22 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-01 19:40 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-02-15 21:43 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-02-15 21:43 - 2014-04-29 02:37 - 00754688 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 02198720 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-01 19:40 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-02-15 21:43 - 2014-05-10 04:29 - 01145536 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-02-15 21:43 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-02-15 21:43 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 13692232 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94057340

Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94057340

Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94056232

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94056232

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94055234

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94055234

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94054204


System errors:
=============
Error: (05/14/2014 07:41:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dienst "Bonjour"" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/14/2014 07:41:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/14/2014 07:41:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/10/2014 04:47:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/10/2014 04:47:43 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (05/10/2014 04:46:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SavingsbullFilterService64" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/10/2014 04:46:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Level Quality Watcher" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/10/2014 04:44:03 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (05/10/2014 04:44:03 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (05/09/2014 06:39:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "TeamViewer 9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 2000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94057340

Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94057340

Error: (05/14/2014 06:45:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94056232

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94056232

Error: (05/14/2014 06:45:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94055234

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 94055234

Error: (05/14/2014 06:45:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2014 06:45:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 94054204


CodeIntegrity Errors:
===================================
  Date: 2014-05-10 16:45:58.762
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.481
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.870
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.652
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-05 13:24:28.891
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-05 13:24:28.641
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-28 17:35:12.652
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-28 17:35:12.403
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-26 12:20:00.181
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-26 12:19:59.947
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 41%
Total physical RAM: 7654.11 MB
Available physical RAM: 4503.76 MB
Total Pagefile: 15306.41 MB
Available Pagefile: 11347.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.61 GB) (Free:130.03 GB) NTFS
Drive d: () (Fixed) (Total:222.54 GB) (Free:215.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 753715F6)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================

NeonReflexe · 14.05.2014, 19:04

Malwarebytes Anti Malware LOG

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Scan Date: 14.05.2014
Scan Time: 20:02:39
Logfile: Malware log.txt
Administrator: No

Version: 2.00.1.1004
Malware Database: v2014.05.14.08
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: CodeX

Scan Type: Hyper Scan
Result: Completed
Objects Scanned: 252389
Time Elapsed: 12 min, 29 sec

Memory: Enabled
Startup: Enabled
Filesystem: Disabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 25
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean Pro_is1, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SavingsBull.A, HKLM\SOFTWARE\Savings Bull, , [60f0024f6e0dce6868c99401f30f26da], 
PUP.Optional.SavingsBull.A, HKLM\SOFTWARE\SavingsBull Filter, , [87c96ce587f4fc3af1414a4b39c9629e], 
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [0c44d47d4833b0867e5ef5a6b151f50b], 
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [00508ac70c6fb77f94a97546f80bb14f], 
PUP.Optional.AdPeak.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{813BA625-B0FA-48D8-9B75-59759C88C219}, , [de72fa57b0cbf640da39a6dc788a7a86], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [113fdb767803043270e27129ed159967], 
PUP.Optional.SavingsBull.A, HKLM\SOFTWARE\WOW6432NODE\SavingsbullFilter, , [56fa4809f78478be3bf8e9ac010157a9], 
PUP.Optional.SNBoost.A, HKLM\SOFTWARE\WOW6432NODE\SN.Booster, , [87c9d879f883b77fc55be79d51b156aa], 
PUP.Optional.Aartemis.A, HKLM\SOFTWARE\WOW6432NODE\AARTEMISSOFTWARE\aartemishp, , [d57b88c9bbc00135a6eb445742c0768a], 
PUP.Optional.Elex.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\ifohbjbgfchkkfhphahclmkpgejiplfo, , [68e878d9dd9ec076ef644f647c873dc3], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\logekkkdbdidmmcgkonmmonclldogceg, , [014f89c8a2d965d1426e6064fb08926e], 
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [9bb5a5acd0abd264ecf057441be722de], 
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [153b3819d5a660d66cd19f1c5fa4bb45], 
PUP.Optional.BundleInstaller.A, HKLM\SOFTWARE\WOW6432NODE\VITTALIA\AxtanInstaller, , [a0b073de32492b0b43a03b5b4eb4ed13], 
PUP.Optional.AdPeak.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Level Quality Watcher, , [361ad87924578caa46e2771e709250b0], 
Malware.Trace, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DC3_FEXEC, , [d67ae46d601b62d4b9038ead34cf8c74], 
PUP.Optional.SavingsBull.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Savings Bull, , [62ee470a0972ab8b50e043522ad87c84], 
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [29274b065724f0463aa1b1ea24de35cb], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [6ce4e17052299b9b68f3bddcd62cff01], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [123e01503d3eb581d4a4b1feab58f40c], 
PUP.Optional.Qone8, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [2e2291c03843c76f94a8befdcb38b34d], 
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\RegClean Pro, , [3f11cd84a1da57df1b172f8647bc01ff], 
PUP.Optional.YoutubeAdblocker.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, , [7cd43819dba066d0df9e4132be44f010], 

Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0X2O1C0R2R1R, , [123e01503d3eb581d4a4b1feab58f40c]

Registry Data: 11
PUP.Optional.Aartemis, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[034db39ea7d42412c8787cccc341ab55]
PUP.Optional.Aartemis.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (hxxp://www.google.com), Bad: (hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[7dd32d247ffc9e984ffa460224e06997]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=, Good: (hxxp://www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=),,[82cef061611a54e24456b29507fd15eb]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[9ab6361bb9c2ab8bf73890b8b84cd22e]
PUP.Optional.Aartemis, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[133d5ff2cfac7fb7b68a66e238ccd52b]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, hxxp://start.mysearchdial.com/?f=2&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=, Good: (www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=2&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=),,[7bd55ef35f1cf2448bc0ce7026ded828]
PUP.Optional.Aartemis.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (hxxp://www.google.com), Bad: (hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[3818afa2df9c59ddd079a1a7e02441bf]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=, Good: (hxxp://www.google.com), Bad: (hxxp://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0CtD0Fzz0D0Azz0DyBzz0CtByD0E0CtAtN0D0Tzu0SyBtAtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1849395594&ir=),,[5ff100513f3c1f1786146ed91ce8659b]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[9ab6b0a1116a9b9bbf7049ff35cfa55b]
PUP.Optional.Aartemis, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1, Good: (hxxp://www.google.com), Bad: (hxxp://aartemis.com/?type=hp&ts=1388589211&from=vit&uid=ST9500325AS_S2WHHQJ1XXXXS2WHHQJ1),,[fb55222fe8938aac1e20ff4937cd7789]
PUP.Optional.Conduit.A, HKU\S-1-5-21-4045394911-2862759667-1337684740-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=, Good: (hxxp://www.google.com), Bad: (hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=),,[e868f859b2c9af874d4d7ec0d4306d93]

Folders: 34
Stolen.Data, C:\Users\CodeX\AppData\Roaming\imlgs, , [ff5184cd47342313c469cec322e0b34d], 
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs, , [c789f25f572485b1a9d7caa005fec937], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\rep, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\bin, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\rep, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\voice, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\voice\de, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.NextLive.A, C:\Users\CodeX\AppData\Roaming\newnext.me, , [96baafa280fbe74f16e1d59b2cd627d9], 
PUP.Optional.NextLive.A, C:\Users\CodeX\AppData\Roaming\newnext.me\cache, , [96baafa280fbe74f16e1d59b2cd627d9], 
PUP.Optional.Adpeak, C:\Program Files\Level Quality Watcher\v1.01, , [52fe1d341d5e4aec76afb9b8b54d44bc], 
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker, , [82ce84cd81fa7abcbcafc2af61a1c53b], 
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService, , [76da5bf63744b3835cae94de857d9868], 
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update, , [76da5bf63744b3835cae94de857d9868], 
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker, , [7cd43819dba066d0df9e4132be44f010], 
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff, , [ba966ae7d5a6f93dccac4636ed15ee12], 

Files: 179
PUP.Optional.Superfish.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, , [ba961140b2c90432ee18255b45bd619f], 
PUP.Optional.Superfish.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, , [77d992bfb4c7ef47877f8ff1bd458c74], 
PUP.Optional.Conduit.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage, , [fd53dd74ceadb185c2347d0325dd9f61], 
PUP.Optional.Conduit.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage-journal, , [da7678d94a31a29454a2dea24eb45ca4], 
PUP.Optional.Iminent.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, , [f25e6de48bf057dfb426c2bf8b772dd3], 
PUP.Optional.QuickStart.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx, , [b49cb899b1cab58179e6a1ea7c869967], 
Stolen.Data, C:\Users\CodeX\AppData\Roaming\imlgs\08-04-2014, , [ff5184cd47342313c469cec322e0b34d], 
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, , [153b08490378241282ad573c8d7531cf], 
PUP.Optional.NewTab.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx, , [7cd4153cc6b52e0844d0395d887ab050], 
PUP.Optional.MySearchDial.A, C:\Users\CodeX\AppData\Local\mysearchdial-speeddial.crx, , [b39dbb96fc7faf874914a6f4da28d729], 
PUP.Optional.RegCleanerPro.J, C:\Windows\Tasks\RegClean Pro_UPDATES.job, , [56faaca5f685ca6c46702576748e2ad6], 
Trojan.Downloader, C:\Windows\SysWOW64\winupdate.exe, , [3c14d57ce09b979f4bfced01ac567888], 
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-08-3.dc, , [c789f25f572485b1a9d7caa005fec937], 
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-09-4.dc, , [c789f25f572485b1a9d7caa005fec937], 
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-10-5.dc, , [c789f25f572485b1a9d7caa005fec937], 
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-21-2.dc, , [c789f25f572485b1a9d7caa005fec937], 
Stolen.Data, C:\Users\CodeX\AppData\Roaming\dclogs\2014-04-22-3.dc, , [c789f25f572485b1a9d7caa005fec937], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\TraditionalCn_rcp_zh-tw.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Finnish_rcp_fi.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Chinese_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Chinese_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\CleanSchedule.exe, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Danish_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Danish_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Dutch_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Dutch_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\eng_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\eng_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Japanese_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Japanese_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\korean_rcp_ko.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\korean_uninst_ko.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Norwegian_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Norwegian_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\polish_rcp_pl.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\polish_uninst_pl.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\portugese_rcp_pt.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\portugese_uninst_pt.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Portuguese_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Portuguese_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RCPUninstall.exe, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RegCleanPro.dll, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Finnish_uninst_fi.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\French_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\French_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\German_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\German_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\greek_rcp_el.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\greek_uninst_el.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\install_left_image.bmp, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\isxdl.dll, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Italian_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Italian_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\russian_rcp_ru.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\russian_uninst_ru.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Spanish_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\spanish_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\SSDPTstub.exe, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Swedish_rcp.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\swedish_uninst.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\systweakasp.exe, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\TPS.ico, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\traditionalcn_uninst_zh-tw.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\turkish_rcp_tr.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Turkish_uninst_tr.ini, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.dat, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.exe, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.msg, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\xmllite.dll, , [bf91e26fcfacd561ea289d11a360fc04], 
PUP.Optional.RegCleanPro.A, C:\Windows\Tasks\RegClean Pro_DEFAULT.job, , [27292130f18a49edd3409e1032d14db3], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\EULA.txt, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.jpg, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js, , [a9a7e36ed9a2ac8ab6ecf3c63dc6a15f], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\1397293755.reg, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\ExcludeList.rcp, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\German_rcp.dat, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_04-25-2014.log, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_04-26-2014.log, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_04-27-2014.log, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_05-02-2014.log, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_05-10-2014.log, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_05-11-2014.log, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\rcpupdate.ini, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\results.rcp, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\summary2.bin, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\TempHLList.rcp, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rmx, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rxb, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000002.rmx, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000002.rxb, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000003.rmx, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000003.rxb, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000004.rmx, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000004.rxb, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000005.rmx, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000005.rxb, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.RegCleanerPro.A, C:\Users\CodeX\AppData\Roaming\systweak\RegClean Pro\Version 6.1\voice\de\voice.wav, , [58f8d37e205bac8a81442649b9496997], 
PUP.Optional.NextLive.A, C:\Users\CodeX\AppData\Roaming\newnext.me\nengine.cookie, , [96baafa280fbe74f16e1d59b2cd627d9], 
PUP.Optional.NextLive.A, C:\Users\CodeX\AppData\Roaming\newnext.me\cache\spark.bin, , [96baafa280fbe74f16e1d59b2cd627d9], 
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker\OP3fp6cX.dat, , [82ce84cd81fa7abcbcafc2af61a1c53b], 
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker\OP3fp6cX.tlb, , [82ce84cd81fa7abcbcafc2af61a1c53b], 
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker\A9A6Zhez5.dat, , [7cd43819dba066d0df9e4132be44f010], 
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker\A9A6Zhez5.exe, , [7cd43819dba066d0df9e4132be44f010], 
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\000005.ldb, , [ba966ae7d5a6f93dccac4636ed15ee12], 
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\CURRENT, , [ba966ae7d5a6f93dccac4636ed15ee12], 
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\LOCK, , [ba966ae7d5a6f93dccac4636ed15ee12], 
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\LOG.old, , [ba966ae7d5a6f93dccac4636ed15ee12], 
PUP.Optional.MySpeedDial.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\MANIFEST-000009, , [ba966ae7d5a6f93dccac4636ed15ee12], 
PUP.Optional.Conduit.A, C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (   "homepage": "hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=",), ,[2b25e56c02793cfaf6f99bd9c2424ab6]

Physical Sectors: 0
(No malicious items detected)


(end)

schrauber · 15.05.2014, 12:36

Zitat:

Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard

NeonReflexe · 15.05.2014, 12:39

Hatte was getestet soll aber jetzt nicht das problem sein. Schon was gefunden^^? Ich habe Win7 enterprise

schrauber · 16.05.2014, 11:07

Adware & Co. deinstallieren

Lade Dir bitte von hier Revo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:

diesen Zusatz haben:
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

NeonReflexe · 16.05.2014, 12:57

Ok. Also das FRST Addition Log zeigt mir datein die (wie ich jetzt mal vermute) von Malewarebytes schon gelöscht wurden. Trotzdem ComboFix starten?

schrauber · 17.05.2014, 13:19

ja

NeonReflexe · 18.05.2014, 18:35

Ja nur schön, dass es auf Stufe_48 stehen bleibt. was tun ?

schrauber · 19.05.2014, 11:36

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

NeonReflexe · 19.05.2014, 12:32

AdwCleaner

Code:

ATTFilter

# AdwCleaner v3.209 - Bericht erstellt am 19/05/2014 um 13:28:32
# Aktualisiert 18/05/2014 von Xplode
# Betriebssystem : Windows 7 Enterprise Service Pack 1 (64 bits)
# Benutzername : CodeX - USER-PC
# Gestartet von : C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Chromatic Browser
Ordner Gelöscht : C:\Users\CodeX\AppData\Local\Chromatic Browser
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Chromatic Browser
Ordner Gelöscht : C:\Users\Udo\AppData\Local\Chromatic Browser

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Google Chrome v34.0.1847.131

[ Datei : C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Homepage] : hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=

[ Datei : C:\Users\Udo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [21593 octets] - [14/05/2014 20:08:58]
AdwCleaner[R1].txt - [290 octets] - [16/05/2014 13:16:55]
AdwCleaner[R2].txt - [1550 octets] - [19/05/2014 13:27:36]
AdwCleaner[S0].txt - [19096 octets] - [14/05/2014 20:10:24]
AdwCleaner[S1].txt - [1471 octets] - [19/05/2014 13:28:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1531 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Enterprise x64
Ran by CodeX on 19.05.2014 at 13:33:52,47
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\driver genius"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.05.2014 at 13:46:11,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Frst:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by CodeX (administrator) on USER-PC on 19-05-2014 13:48:20
Running from C:\Users\CodeX\Downloads
Platform: PlayboyOS Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Spotify Ltd) C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [Spotify Web Helper] => C:\Users\CodeX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-14] (Spotify Ltd)
HKU\S-1-5-21-4045394911-2862759667-1337684740-1000\...\Run: [GoogleChromeAutoLaunch_BE1CFA243D5ECE5DEDC97B36A79D3335] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
AppInit_DLLs: C:\PROGRA~2\SN_X64~1.BOO => C:\PROGRA~2\SN_X64~1.BOO File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-21]

Chrome: 
=======
CHR HomePage: hxxp://search.conduit.com/?gd=&ctid=CT3324756&octid=EB_ORIGINAL_CTID&ISID=MCD146271-3BBF-4266-B57D-D1841119559A&SearchSource=55&CUI=&UM=2&UP=SPD44E5CDB-27F8-4479-8DDB-41E5F144F8A8&SSPV=
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Drive) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-31]
CHR Extension: (YouTube) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-31]
CHR Extension: (Google-Suche) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-31]
CHR Extension: (AdBlock) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (Google Wallet) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-31]
CHR Extension: (YouTube Unblocker) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-14]
CHR Extension: (Google Mail) - C:\Users\CodeX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-31]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-12-31] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] ()
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
S2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [80896 2011-03-31] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] ()

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-02] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-04-12] (<Turtle Entertainment>)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-19] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-11-13] (Anchorfree Inc.)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
U3 DfSdkS; 
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-19 13:48 - 2014-05-19 13:48 - 00012236 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-19 13:47 - 2014-05-19 13:48 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:32 - 2014-05-18 19:34 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-18 19:03 - 2014-05-18 19:36 - 00000000 ___SD () C:\ComboFix
2014-05-16 13:18 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-16 13:18 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-16 13:18 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-16 13:18 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:15 - 2014-05-16 13:16 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-14 20:08 - 2014-05-19 13:28 - 00000000 ____D () C:\AdwCleaner
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 19:56 - 2014-05-19 13:48 - 00000000 ____D () C:\FRST
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:44 - 2014-05-19 13:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-14 19:43 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-14 19:43 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-14 19:43 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:40 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:37 - 2014-05-10 20:38 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 19:13 - 2014-05-18 18:50 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-10 19:13 - 2014-05-18 18:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-10 19:13 - 2014-05-18 18:50 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-10 17:00 - 2014-05-10 17:01 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-19 13:30 - 00000616 _____ () C:\Windows\setupact.log
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 16:45 - 2014-05-19 13:29 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-10 14:13 - 2014-05-10 20:16 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 14:13 - 2014-05-10 14:15 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-10 08:45 - 2014-05-18 19:37 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:29 - 2014-05-16 13:02 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:31 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 17:31 - 2014-05-06 17:32 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:30 - 2014-05-06 18:58 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:29 - 2014-05-06 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:08 - 2014-04-28 19:42 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-25 11:57 - 2014-04-25 11:59 - 00000000 ____D () C:\Minecraft_Backup
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:40 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:21 - 2014-04-23 14:22 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:20 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-04-23 14:20 - 2014-04-23 14:21 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-23 14:20 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-23 14:20 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-21 22:15 - 2014-05-14 20:47 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-04-21 22:15 - 2014-05-14 20:47 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-04-21 21:56 - 2014-04-21 21:56 - 00000122 _____ () C:\Users\CodeX\Documents\PASSWPRD HERE!!.url
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ESET
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\Program Files\ESET
2014-04-21 21:09 - 2014-04-21 21:09 - 00001178 _____ () C:\Users\Public\Desktop\DarkComet Remover.lnk
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\Program Files (x86)\PhrozenSoft
2014-04-21 19:50 - 2014-04-21 19:50 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-04-21 14:44 - 2013-08-01 02:06 - 00000000 ____D () C:\Users\CodeX\Desktop\upload
2014-04-20 15:15 - 2014-04-20 15:15 - 00001211 _____ () C:\Users\CodeX\Desktop\Driver Genius.lnk

==================== One Month Modified Files and Folders =======

2014-05-19 13:49 - 2014-01-02 12:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-19 13:48 - 2014-05-19 13:48 - 00012236 _____ () C:\Users\CodeX\Downloads\FRST.txt
2014-05-19 13:48 - 2014-05-19 13:47 - 02067456 _____ (Farbar) C:\Users\CodeX\Downloads\FRST64.exe
2014-05-19 13:48 - 2014-05-14 19:56 - 00000000 ____D () C:\FRST
2014-05-19 13:46 - 2014-05-19 13:46 - 00000788 _____ () C:\Users\CodeX\Desktop\JRT.txt
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:41 - 2009-07-14 06:45 - 00022000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-19 13:35 - 2014-04-12 11:30 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-19 13:34 - 2014-05-14 19:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 13:33 - 2014-05-19 13:33 - 01016261 _____ (Thisisu) C:\Users\CodeX\Downloads\JRT.exe
2014-05-19 13:33 - 2014-05-19 13:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 13:31 - 2014-04-12 11:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-19 13:30 - 2014-05-10 16:46 - 00000616 _____ () C:\Windows\setupact.log
2014-05-19 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-19 13:29 - 2014-05-10 16:45 - 00013924 _____ () C:\Windows\PFRO.log
2014-05-19 13:28 - 2014-05-14 20:08 - 00000000 ____D () C:\AdwCleaner
2014-05-19 13:28 - 2013-12-31 17:09 - 01226530 _____ () C:\Windows\WindowsUpdate.log
2014-05-19 13:27 - 2014-05-19 13:27 - 01328723 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.209.exe
2014-05-19 13:26 - 2014-02-22 19:55 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\TS3Client
2014-05-18 19:48 - 2014-05-18 19:48 - 00069827 _____ () C:\Users\CodeX\Downloads\1220357907_SAStreamMemFix2.0.rar
2014-05-18 19:48 - 2014-03-11 15:31 - 00000000 ____D () C:\Program Files (x86)\GTA
2014-05-18 19:37 - 2014-05-10 08:45 - 00000000 ____D () C:\Users\CodeX\Desktop\PAWN
2014-05-18 19:36 - 2014-05-18 19:36 - 02696017 _____ () C:\Users\CodeX\Downloads\alci_imgeditor.rar
2014-05-18 19:36 - 2014-05-18 19:03 - 00000000 ___SD () C:\ComboFix
2014-05-18 19:35 - 2014-05-18 19:35 - 00168711 _____ () C:\Users\CodeX\Downloads\Spark-0.9.2018.zip
2014-05-18 19:34 - 2014-05-18 19:32 - 162889438 _____ () C:\Users\CodeX\Downloads\Herr.Krickls-Car-Mod-Pack-for-GRP-v.1.rar
2014-05-18 18:50 - 2014-05-10 19:13 - 00001861 _____ () C:\Users\CodeX\Desktop\UseNeXT by Tangysoft.lnk
2014-05-18 18:50 - 2014-05-10 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
2014-05-18 18:50 - 2014-05-10 19:13 - 00000000 ____D () C:\Program Files (x86)\UseNeXT
2014-05-18 18:46 - 2013-12-31 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-16 13:17 - 2014-05-16 13:17 - 00000000 ____D () C:\Qoobox
2014-05-16 13:16 - 2014-05-16 13:16 - 00000000 ____D () C:\Windows\erdnt
2014-05-16 13:16 - 2014-05-16 13:15 - 05200990 ____R (Swearware) C:\Users\CodeX\Desktop\ComboFix.exe
2014-05-16 13:10 - 2014-01-02 17:11 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-16 13:06 - 2014-05-16 13:06 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\CodeX\Downloads\revosetup95.exe
2014-05-16 13:06 - 2014-05-16 13:06 - 00001268 _____ () C:\Users\CodeX\Desktop\Revo Uninstaller.lnk
2014-05-16 13:06 - 2014-05-16 13:06 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-16 13:02 - 2014-05-06 18:29 - 625493174 _____ () C:\Windows\MEMORY.DMP
2014-05-16 13:02 - 2014-01-03 19:34 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 13:01 - 2011-04-12 10:21 - 00000000 ____D () C:\Windows\CSC
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\rc9c9j8goa
2014-05-14 20:47 - 2014-04-21 22:15 - 00000000 _RSHD () C:\Users\CodeX\j82fax2bg464k7
2014-05-14 20:29 - 2014-05-14 20:29 - 00044987 _____ () C:\Users\CodeX\Downloads\p.txt
2014-05-14 20:18 - 2014-05-14 20:18 - 00001063 _____ () C:\Users\CodeX\Downloads\GMER LOG.log
2014-05-14 20:10 - 2013-12-31 17:21 - 00000995 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-14 20:10 - 2013-12-31 17:18 - 00000000 ____D () C:\Users\CodeX
2014-05-14 20:09 - 2013-12-31 18:54 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Skype
2014-05-14 20:08 - 2014-05-14 20:08 - 01325827 _____ () C:\Users\CodeX\Downloads\adwcleaner_3.208.exe
2014-05-14 20:03 - 2014-01-02 11:32 - 00000000 ____D () C:\Users\CodeX\AppData\Local\CrashDumps
2014-05-14 19:55 - 2014-05-14 19:55 - 00000000 _____ () C:\Users\CodeX\defogger_reenable
2014-05-14 19:49 - 2014-01-02 12:48 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:49 - 2014-01-02 12:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 19:49 - 2014-01-02 12:48 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:43 - 2014-05-14 19:43 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 19:43 - 2014-05-14 19:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-14 19:40 - 2014-05-14 19:40 - 00006494 _____ () C:\Users\CodeX\Documents\asdasd.amx
2014-05-14 19:40 - 2014-05-14 19:40 - 00003186 _____ () C:\Users\CodeX\Documents\asdasd.pwn
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-05-14 19:40 - 2014-05-14 19:37 - 00000000 ____D () C:\Program Files (x86)\SA-MP Colorpicker
2014-05-14 19:39 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Spotify
2014-05-14 19:37 - 2014-05-14 19:37 - 00001119 _____ () C:\Users\CodeX\Desktop\SA-MP Colorpicker.lnk
2014-05-11 18:35 - 2014-05-11 18:35 - 00001580 _____ () C:\Untitled.amx
2014-05-11 17:49 - 2014-05-11 17:49 - 00001554 _____ () C:\bare.amx
2014-05-11 17:45 - 2014-05-11 17:45 - 00014425 _____ () C:\grandlarc.amx
2014-05-10 20:38 - 2014-05-10 20:37 - 00583760 _____ () C:\Users\CodeX\ts3_recording_14_05_10_20_37_54.wav
2014-05-10 20:16 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\Desktop\Feed the Beast
2014-05-10 19:12 - 2014-01-01 19:25 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\UseNeXT
2014-05-10 17:57 - 2014-03-29 09:32 - 00000000 ____D () C:\Users\CodeX\Desktop\Steuerklopfer
2014-05-10 17:01 - 2014-05-10 17:00 - 06077499 _____ () C:\Users\CodeX\Documents\Intro.wmv
2014-05-10 16:46 - 2014-05-10 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 14:18 - 2013-12-31 20:36 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\.minecraft
2014-05-10 14:15 - 2014-05-10 14:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ftblauncher
2014-05-10 09:35 - 2014-05-10 09:35 - 00000263 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-05-10 09:35 - 2014-04-12 11:35 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-10 09:35 - 2014-04-12 11:35 - 00001090 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-10 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-10 09:20 - 2014-05-10 09:20 - 00001831 _____ () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\Udo\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00001807 _____ () C:\Users\CodeX\Desktop\Tunatic.lnk
2014-05-10 09:20 - 2014-05-10 09:20 - 00000000 ____D () C:\Program Files (x86)\Tunatic
2014-05-08 21:29 - 2014-05-08 21:29 - 00003584 _____ () C:\Users\CodeX\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-08 21:29 - 2014-01-01 13:19 - 00000000 ____D () C:\Users\CodeX\Documents\Camtasia Studio
2014-05-07 20:06 - 2014-01-10 14:44 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Spotify
2014-05-06 18:58 - 2014-05-06 18:58 - 00002722 _____ () C:\Windows\System32\Tasks\SN.Booster-S-014941198
2014-05-06 18:58 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\1a9e6824aed92e
2014-05-06 18:58 - 2014-05-06 17:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-06 17:41 - 2014-05-06 17:41 - 00002649 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-05-06 17:41 - 2014-05-06 17:41 - 00000000 ____D () C:\Program Files (x86)\Dojotech Software
2014-05-06 17:41 - 2014-05-06 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-05-06 17:39 - 2014-05-06 17:39 - 01436483 _____ () C:\Users\CodeX\Desktop\Dojotech Spotify Recorder 3.3.rar
2014-05-06 17:32 - 2014-05-06 17:31 - 00000000 ____D () C:\ProgramData\AppReady Software
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Udo\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Gast
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Packages
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-05-06 17:31 - 2014-05-06 17:31 - 00000000 ____D () C:\Users\Administrator
2014-05-06 17:31 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo\AppData\Local\Google
2014-05-06 17:31 - 2013-12-31 17:52 - 00000000 ____D () C:\Users\CodeX\AppData\Local\Google
2014-05-05 13:23 - 2014-01-15 17:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-01 18:29 - 2014-05-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-01 18:28 - 2014-05-01 18:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-01 18:23 - 2011-04-12 10:06 - 00765514 _____ () C:\Windows\system32\perfh007.dat
2014-05-01 18:23 - 2011-04-12 10:06 - 00174712 _____ () C:\Windows\system32\perfc007.dat
2014-05-01 18:23 - 2009-07-14 07:13 - 01806010 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-29 16:27 - 2014-04-29 16:27 - 12143865 _____ () C:\Users\CodeX\Documents\Thumbnails.rar
2014-04-28 19:42 - 2014-04-28 19:08 - 00003924 _____ () C:\Users\CodeX\eminem.txt
2014-04-26 14:18 - 2014-04-12 11:30 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-04-25 12:30 - 2014-04-03 21:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-04-25 11:59 - 2014-04-25 11:57 - 00000000 ____D () C:\Minecraft_Backup
2014-04-23 20:42 - 2014-04-23 20:42 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.bat
2014-04-23 20:42 - 2014-04-23 20:40 - 00000329 _____ () C:\Users\CodeX\Desktop\Neues Textdokument.txt
2014-04-23 14:27 - 2014-04-08 19:25 - 00000000 __SHD () C:\Users\CodeX\Documents\MSDCSC
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\ATI
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Apple Computer
2014-04-23 14:23 - 2014-04-23 14:23 - 00000000 ____D () C:\Users\Udo\AppData\Local\ATI
2014-04-23 14:22 - 2014-04-23 14:22 - 00001425 _____ () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-23 14:22 - 2014-04-23 14:22 - 00000000 ____D () C:\Users\Udo\AppData\Roaming\Adobe
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-23 14:22 - 2014-04-23 14:21 - 00000000 ___RD () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-23 14:21 - 2014-04-23 14:20 - 00000000 ____D () C:\Users\Udo
2014-04-23 14:20 - 2014-04-23 14:20 - 00000020 ___SH () C:\Users\Udo\ntuser.ini
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Vorlagen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Startmenü
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Netzwerkumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Lokale Einstellungen
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Eigene Dateien
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Druckumgebung
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Musik
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Documents\Eigene Bilder
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Verlauf
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\AppData\Local\Anwendungsdaten
2014-04-23 14:20 - 2014-04-23 14:20 - 00000000 _SHDL () C:\Users\Udo\Anwendungsdaten
2014-04-22 21:44 - 2014-04-12 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\psynetic
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Users\CodeX\AppData\Local\PokerStars.NET
2014-04-22 21:43 - 2014-01-31 17:47 - 00000000 ____D () C:\Program Files (x86)\PokerStars.NET
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2014-04-22 21:43 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\CodeX\AppData\Local\No23 Recorder
2014-04-22 21:41 - 2014-01-15 20:19 - 00000000 ____D () C:\Users\CodeX\Desktop\Nützliche Programme
2014-04-22 21:39 - 2014-04-15 17:45 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-04-22 21:38 - 2014-04-15 17:27 - 00000000 ____D () C:\Program Files (x86)\AV Voice Changer 8.0 Diamond
2014-04-22 21:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-04-22 21:37 - 2014-01-02 11:31 - 00000000 ____D () C:\Program Files (x86)\Mirillis
2014-04-22 21:37 - 2014-01-02 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2014-04-22 21:29 - 2013-12-31 17:21 - 00000000 ___RD () C:\Users\CodeX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-22 12:38 - 2013-12-31 21:09 - 00000000 __RSD () C:\Windows\SysWOW64\Flashplayer
2014-04-22 09:33 - 2005-03-31 18:59 - 05188397 ____H () C:\Users\CodeX\AppData\Roaming\CodeXlog.dat
2014-04-22 08:35 - 2014-04-11 21:35 - 00000000 ____D () C:\ProgramData\Origin
2014-04-21 21:56 - 2014-04-21 21:56 - 00000122 _____ () C:\Users\CodeX\Documents\PASSWPRD HERE!!.url
2014-04-21 21:17 - 2005-04-19 16:13 - 00000000 _RSHD () C:\Users\CodeX\AppData\Roaming\WinDir
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\ESET
2014-04-21 21:13 - 2014-04-21 21:13 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\ProgramData\ESET
2014-04-21 21:12 - 2014-04-21 21:12 - 00000000 ____D () C:\Program Files\ESET
2014-04-21 21:09 - 2014-04-21 21:09 - 00001178 _____ () C:\Users\Public\Desktop\DarkComet Remover.lnk
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
2014-04-21 21:09 - 2014-04-21 21:09 - 00000000 ____D () C:\Program Files (x86)\PhrozenSoft
2014-04-21 21:06 - 2009-07-14 07:08 - 00011970 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 20:37 - 2014-01-02 11:38 - 00000000 ____D () C:\Users\CodeX\AppData\Roaming\Audacity
2014-04-21 19:50 - 2014-04-21 19:50 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-04-21 16:48 - 2013-12-31 17:36 - 01780290 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-20 15:24 - 2014-04-12 23:18 - 00000000 ____D () C:\Users\CodeX\AppData\Local\ESL Wire Game Client
2014-04-20 15:23 - 2014-04-11 21:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-04-20 15:15 - 2014-04-20 15:15 - 00001211 _____ () C:\Users\CodeX\Desktop\Driver Genius.lnk

Some content of TEMP:
====================
C:\Users\CodeX\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2013-03-02 19:39] - [2013-03-02 19:39] - 0391680 ____A (Microsoft Corporation) 13CD6BA1F798A61AEE985E78D3644A1E

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2871296 ____A (Microsoft Corporation) 70D758D2DBE79757421017EE68143763

C:\Windows\SysWOW64\explorer.exe
[2013-03-02 20:02] - [2013-03-02 20:02] - 2616320 ____A (Microsoft Corporation) B0846DB5BDAB92131529A58E627FCEB7

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 1008128 ____A (Microsoft Corporation) 7FB4D54B502C6CF2E35B8188FA4CC08C

C:\Windows\SysWOW64\User32.dll
[2013-03-02 19:26] - [2013-03-02 19:26] - 0833024 ____A (Microsoft Corporation) 9B836EE76E3A99052EF6DEA52B41D1BE

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2013-03-02 20:07] - [2013-03-02 20:07] - 0512512 ____A (Microsoft Corporation) 83D5AD7CFDB1F9D42C3CD102B20FFA0A

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2013-03-02 19:56] - [2013-03-02 19:56] - 0296304 ____A (Microsoft Corporation) A56F2326CE33646CDA95E7A9E7163FFA



LastRegBack: 2014-05-11 12:39

==================== End Of Log ============================

--- --- ---

Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by CodeX at 2014-05-19 13:49:13
Running from C:\Users\CodeX\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{C7A772A4-73CF-EB06-172F-75C5F6C80AAC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.06.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Craften Terminal 3.4.5 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DarkComet RAT Remover version 1.0 (HKLM-x32\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Deponia (HKLM-x32\...\Steam App 214340) (Version:  - Daedalic Entertainment)
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dojotech Spotify Recorder (HKLM-x32\...\{D149DB2E-392E-48CC-8036-88BECC09C50A}) (Version: 3.2 - Dojotech Software)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.1 - Daedalic Entertainment)
Edna Bricht Aus 6.3 (HKLM-x32\...\{0D00CD3F-AEDC-45F1-A2DD-DADF74407D7B}_is1) (Version:  - )
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version:  - Turtle Entertainment GmbH)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.007 - HTC Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Lollipop (HKCU\...\lollipop_04101237) (Version:  - Lollipop Network, S.L.) <==== ATTENTION
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.2.8 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Version: 13.0.2.8 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Tunatic (HKLM-x32\...\Tunatic) (Version:  - )
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Restore Points  =========================

22-04-2014 19:35:41 Supprimé (EMCO EVALUATION PACKAGE) - DG
22-04-2014 19:36:59 TrueCrypt uninstallation
22-04-2014 19:37:38 Removed Advanced Archive Password Recovery
22-04-2014 19:39:23 Entfernt CrazyTalk
22-04-2014 19:43:02 No23 Recorder wird entfernt
06-05-2014 15:25:30 Installed Dojotech Spotify Recorder
06-05-2014 15:28:20 Removed Dojotech Spotify Recorder
06-05-2014 15:28:59 Installed Dojotech Spotify Recorder
06-05-2014 15:40:46 Installed Dojotech Spotify Recorder
14-05-2014 17:37:30 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 wurde installiert.
16-05-2014 11:15:14 Revo Uninstaller's restore point - Youtube Downloader HD v. 2.9.9.13
18-05-2014 17:03:33 ComboFix created restore point

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05F4A343-9592-4156-A891-8A6074A0FB15} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1F824E18-E1C1-4E5F-AE92-4E7A710B3F60} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {6991998A-AE4E-464A-A184-2C64254F2647} - System32\Tasks\{7A680034-4A98-48D7-81A9-FF3A869593C9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {735C8257-D086-4586-8E54-15FD2EBA3C7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: {793F1221-A7AE-404F-BE05-E96108756E24} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {91392D79-87F8-4D01-BE2A-48002413C522} - System32\Tasks\SN.Booster-S-014941198 => c:\programdata\appready software\sn.booster\SN.Booster.exe
Task: {9ECA6AE5-B08B-4854-A4B6-49F8A1731DED} - \RegClean Pro_UPDATES No Task File <==== ATTENTION
Task: {BB71E53C-A859-47CA-87B9-4136ABAFDFD6} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {D8F2F778-777E-4266-8C01-8633FE30BEB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {F5C04EAB-1A3C-4478-A06F-65CE541348B8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-06 17:06 - 2013-12-06 17:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 06:59 - 2013-07-26 06:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-12-06 17:06 - 2013-12-06 17:06 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-12 23:18 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe
2014-04-12 23:18 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll
2011-03-31 17:08 - 2011-03-31 17:08 - 00080896 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-12-06 17:06 - 2013-12-06 17:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-26 14:18 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-05-19 13:30:07.528
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-19 13:30:07.262
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-16 13:02:21.123
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-16 13:02:20.858
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 20:12:22.450
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-14 20:12:22.200
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.762
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-10 16:45:58.481
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.870
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-06 18:29:12.652
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\drivers\vcsvad.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 22%
Total physical RAM: 7654.11 MB
Available physical RAM: 5933.23 MB
Total Pagefile: 15306.41 MB
Available Pagefile: 13284.47 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.61 GB) (Free:128.83 GB) NTFS
Drive d: () (Fixed) (Total:222.54 GB) (Free:215.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 753715F6)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 20.05.2014, 09:18

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

NeonReflexe · 20.05.2014, 12:15

Ja allerdings. Undzwar spuckt mir mein ESET Smart Security 7 "C:\PROGRAMDATA\InstallMate\{irgendwelchezahlen}\Custom.dll aus.
Nach dem "säubern" hab ich dies immernoch.
Bedrohung: Win32/InstalleRex.M

Werde hier die logs gleich posten

Öhm..

SecurityCheck

Code:

ATTFilter

 UNSUPPORTED OPERATING SYSTEM! ABORTED!

Habe Win7 Enterprise.

schrauber · 21.05.2014, 07:47

Securitycheck ignorieren, bitte frisches FRST log.

17.05.2014, 13:19	#9
schrauber /// the machine /// TB-Ausbilder	Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam. ja __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

21.05.2014, 07:47	#15
schrauber /// the machine /// TB-Ausbilder	Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam. Securitycheck ignorieren, bitte frisches FRST log. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam.

Log-Analyse und Auswertung: Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam.