Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
BupSystem Trojaner gefangen

BupSystem Trojaner gefangen


Plagegeister aller Art und deren Bekämpfung: BupSystem Trojaner gefangen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 2 1 2
Alt 23.05.2014, 21:07   #1
Nightzone
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Hi Leute kann mir bitte jemand behilflich sein wie ich dieses Trojaner los werde Danke im voraus.

Alt 23.05.2014, 21:58   #2
Machiavelli
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Hallo und willkommen an Board, Nightzone

Mein Name ist Machiavelli und werde bei Deinem Malware Problemen behilflich sein. Falls Du Dich im abgesicherten Modus befindest, würde ich Dir raten, alle Anweisungen von mir auszudrucken, um besseren Überblick auf die Gesamtsituation zu bekommen. Ich bin hier im Malwareteam und daher ist es mir möglich, Dir zu helfen.

Damit eine Bereinigung ermöglicht werden kann, musst Du ein paar Regeln/Tipps beachten:
  • Malware zu entfernen ist normalerweise recht schwierig
    Heutige Malware kann sich sehr gut verstecken, so kann es sein, dass es bestimmte Tools nicht sehen. Eine Neuinstallation ist daher oft das klügere.
  • Bitte folge meinen Anweisung bis in das kleinste Detail
    Falls Du was falsches machst, wie z.B. irgendwas fixt, was nicht durch mich genehmigt wurde, kann der PC dadurch beschädigt werden. Daher folge meinen Anweisungen ganz genau
  • Bleibe mit mir in Kontakt, bis Deine Probleme vollständig gelöst sind
    Themen, in welchen innerhalb von 4 Tagen keine Antwort gepostet wird, werden geschlossen.
  • Bitte lasse keine anderen Tools laufen, während ich bereinige
    Wenn Du Tools wie z.B. Malwarebytes etc. ohne meines Wissens laufen lässt, kann es unter Umständen Ergebnisse verfälschen.
  • Ließ meine Posts vollständig durch
    Falls nicht, kann das zu schwerwiegenden Problemen (z.B. PC bootet nicht mehr) führen oder der Prozess der Malwareentfernung wird länger


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
Alt 23.05.2014, 22:06   #3
Nightzone
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


So hier ist der erste Scan.
FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-05-2014
Ran by Salih (administrator) on SALIH-PC on 23-05-2014 23:02:36
Running from C:\Users\Salih\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Spigot, Inc.) C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\fshoster32.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\CCF_Reputation\fsorsp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Common\FSHDLL64.EXE
(Dell) C:\Users\Salih\AppData\Local\Apps\2.0\C1ZA9A2E.ZXZ\ADHCWG0B.M2N\dell..tion_0f612f649c4a10af_0005.0007_59de4fd2458fcaec\DellSystemDetect.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\Run: [Personal ID] => C:\coolspot AG\Personal ID\pid.exe [1132984 2014-05-17] (coolspot AG, Düsseldorf)
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\Run: [DellSystemDetect] => C:\Users\Salih\AppData\Local\Apps\2.0\C1ZA9A2E.ZXZ\ADHCWG0B.M2N\dell..tion_0f612f649c4a10af_0005.0007_59de4fd2458fcaec\DellSystemDetect.exe [254976 2014-05-22] (Dell)
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\MountPoints2: {110d7a04-61ea-11e3-868b-806e6f6e6963} - D:\CD_Start.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=402027&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE4E9D08EB6F5CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKCU - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.2\iobitappsToolbarIE64.dll (Spigot, Inc.)
URLSearchHook: HKCU - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.2\iobitappsToolbarIE.dll (Spigot, Inc.)
SearchScopes: HKCU - DefaultScope {B3EF0B22-C356-4898-925A-886F5ACF06DA} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
SearchScopes: HKCU - {B3EF0B22-C356-4898-925A-886F5ACF06DA} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
BHO: Slick Savings - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\Salih\AppData\Roaming\Slick Savings\Coupons64.dll (Spigot, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.2\iobitappsToolbarIE.dll (Spigot, Inc.)
BHO-x32: Slick Savings - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\Salih\AppData\Roaming\Slick Savings\Coupons.dll (Spigot, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.2\iobitappsToolbarIE64.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\9.2\iobitappsToolbarIE.dll (Spigot, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\Users\Salih\AppData\Roaming\Mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Users\Salih\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)

Chrome: 
=======
CHR HomePage: hxxp://de.search.yahoo.com/?type=402027&fr=spigot-yhp-ch
CHR Extension: (Google Docs) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-10]
CHR Extension: (Google Drive) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-10]
CHR Extension: (YouTube) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-10]
CHR Extension: (Google-Suche) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-10]
CHR Extension: (Domain Error Assistant) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj [2014-03-10]
CHR Extension: (Slick Savings) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk [2014-03-10]
CHR Extension: (Securita Scout) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfkilfadjoneaheacgmkahfgcjchkpad [2014-05-03]
CHR Extension: (Google Wallet) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-10]
CHR Extension: (Google Mail) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-10]
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx [2013-10-14]
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx [2013-12-27]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx [2013-04-26]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Salih\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-05-03]
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22]

==================== Services (Whitelisted) =================

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-05-01] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-05-01] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-05-01] (BlueStack Systems, Inc.)
R2 fshoster; C:\Program Files (x86)\Kabel Deutschland\fshoster32.exe [188400 2013-01-18] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Common\FSMA32.EXE [207808 2013-08-20] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\Kabel Deutschland\apps\CCF_Reputation\fsorsp.exe [60352 2013-12-10] (F-Secure Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-05-01] (BlueStack Systems)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [203304 2014-04-24] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\HIPS\drivers\fshs.sys [69928 2014-05-21] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-12-10] ()
R0 fsbts; C:\Windows\SysWOW64\Drivers\fsbts.sys [41024 2013-12-10] ()
R3 fsni; C:\Program Files (x86)\Kabel Deutschland\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
R1 fsvista; C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-20] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-23 23:02 - 2014-05-23 23:02 - 00012059 _____ () C:\Users\Salih\Downloads\FRST.txt
2014-05-23 23:02 - 2014-05-23 23:02 - 00000000 ____D () C:\FRST
2014-05-23 23:01 - 2014-05-23 23:01 - 02067456 _____ (Farbar) C:\Users\Salih\Downloads\FRST64.exe
2014-05-23 21:58 - 2014-05-23 22:46 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-23 21:58 - 2014-05-23 22:30 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-23 21:58 - 2014-05-23 21:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-23 21:57 - 2014-05-23 22:45 - 00000000 ____D () C:\Users\Salih\Desktop\mbar
2014-05-23 21:57 - 2014-05-23 22:29 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-23 21:56 - 2014-05-23 21:57 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Salih\Downloads\mbar-1.07.0.1009.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 28685824 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 24107520 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 08866928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-05-23 21:37 - 2014-05-23 21:37 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-05-23 21:37 - 2014-05-23 21:37 - 00848896 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00806912 _____ (AMD) C:\Windows\system32\coinst_14.100.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00723841 _____ () C:\Windows\system32\atiicdxx.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 00580816 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-05-23 21:37 - 2014-05-23 21:37 - 00580816 _____ () C:\Windows\system32\atiapfxx.blb
2014-05-23 21:37 - 2014-05-23 21:37 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 00275124 _____ () C:\Windows\system32\ativvaxy_vi.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00274656 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 00273712 _____ () C:\Windows\system32\ativvaxy_vi_nd.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00234804 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00233008 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00138832 _____ () C:\Windows\system32\samu_krnl_isv_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00138832 _____ () C:\Windows\system32\samu_krnl_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00134192 _____ () C:\Windows\system32\ativce03.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00127872 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00117560 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00095744 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00082128 _____ () C:\Windows\system32\ativce02.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00042544 _____ () C:\Windows\system32\kapp_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00035408 _____ () C:\Windows\system32\kapp_si.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-05-23 21:36 - 2014-05-23 21:36 - 00110080 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2014-05-23 21:36 - 2014-05-23 21:36 - 00094720 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2014-05-22 13:47 - 2014-05-22 13:47 - 00374463 _____ () C:\Users\Salih\Downloads\DELL_U2410_MONITOR_A00_00_DRVR_XVHXT.exe
2014-05-22 13:47 - 2014-05-22 13:47 - 00000000 ____D () C:\Dell
2014-05-22 13:40 - 2014-05-22 13:40 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\PCDr
2014-05-22 13:39 - 2014-05-22 13:39 - 00417872 _____ () C:\Users\Salih\Downloads\DellSystemDetect.exe
2014-05-22 13:39 - 2014-05-22 13:39 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2014-05-22 13:24 - 2014-05-22 13:24 - 00643147 _____ () C:\Users\Salih\Downloads\setup_ir12.exe
2014-05-22 13:24 - 2014-05-22 13:24 - 00001100 _____ () C:\Users\Salih\Desktop\Zero Assumption Digital Image Recovery.lnk
2014-05-22 13:24 - 2014-05-22 13:24 - 00001100 _____ () C:\Users\Gast\Desktop\Zero Assumption Digital Image Recovery.lnk
2014-05-22 13:24 - 2014-05-22 13:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zero Assumption Digital Image Recovery
2014-05-22 13:24 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files (x86)\Zero Assumption Digital Image Recovery
2014-05-21 22:14 - 2014-05-21 22:31 - 00000000 ____D () C:\Users\Salih\Documents\FIFA World
2014-05-21 16:37 - 2014-05-21 16:37 - 00001192 _____ () C:\Users\Public\Desktop\EA Sports FIFA World.lnk
2014-05-21 16:37 - 2014-05-21 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Sports FIFA World
2014-05-21 16:35 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-05-21 16:34 - 2014-05-21 16:35 - 00017533 _____ () C:\Windows\DirectX.log
2014-05-21 16:26 - 2014-05-21 16:26 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-21 16:24 - 2014-05-21 22:13 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Origin
2014-05-21 16:24 - 2014-05-21 16:26 - 00000000 ____D () C:\Users\Salih\AppData\Local\Origin
2014-05-21 16:23 - 2014-05-21 22:43 - 00000000 ____D () C:\ProgramData\Origin
2014-05-21 16:23 - 2014-05-21 22:14 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-21 16:23 - 2014-05-21 16:23 - 00000986 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-21 16:23 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-21 16:23 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-21 16:22 - 2014-05-21 16:23 - 23516512 _____ (Electronic Arts, Inc.) C:\Users\Salih\Downloads\EASportsFIFAWorld.exe
2014-05-19 16:16 - 2014-05-19 16:32 - 00000000 ____D () C:\Users\Salih\AppData\Local\Microsoft Games
2014-05-19 16:16 - 2014-05-19 16:16 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-05-19 13:16 - 2014-05-19 13:17 - 00000000 ____D () C:\ProgramData\Hair Concept
2014-05-19 13:16 - 2014-05-19 13:16 - 00001042 _____ () C:\Users\Public\Desktop\Hair Concept.lnk
2014-05-19 13:16 - 2014-05-19 13:16 - 00001006 _____ () C:\Users\Public\Desktop\Hair Concept Friseur Edition.lnk
2014-05-19 13:16 - 2014-05-19 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hair Concept
2014-05-19 13:13 - 2014-05-19 13:17 - 00000000 ____D () C:\Program Files (x86)\Hair Concept
2014-05-17 16:08 - 2014-05-17 16:08 - 00000000 ____D () C:\Users\Salih\Documents\bitComposer Games
2014-05-17 16:08 - 2014-05-17 16:08 - 00000000 ____D () C:\ProgramData\Wildlife Park 3
2014-05-17 16:04 - 2014-05-17 16:04 - 00001233 _____ () C:\Users\Salih\Desktop\Starte Wildlife Park 3.lnk
2014-05-17 16:04 - 2014-05-17 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bitComposer Games
2014-05-17 15:49 - 2014-05-17 15:49 - 00000000 ____D () C:\Program Files (x86)\bitComposer Games
2014-05-17 15:45 - 2014-05-17 15:47 - 327126016 _____ (Microsoft Corporation) C:\Users\Salih\Downloads\sc_speedpack.exe
2014-05-17 15:36 - 2014-05-17 15:36 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\.minecraft
2014-05-17 15:35 - 2014-05-17 15:35 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-17 15:34 - 2014-05-17 15:34 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\ProgramData\Sun
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-17 15:33 - 2014-05-17 15:33 - 00921512 _____ (Oracle Corporation) C:\Users\Salih\Downloads\chromeinstall-7u55.exe
2014-05-17 15:31 - 2014-05-17 15:31 - 04186549 _____ (Mojang ) C:\Users\Salih\Downloads\minecraft_pcgdemo.exe
2014-05-17 15:05 - 2014-05-23 22:22 - 00002650 _____ () C:\Windows\PFRO.log
2014-05-17 12:12 - 2014-05-17 12:12 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Der Planer 4
2014-05-17 12:11 - 2014-05-17 12:11 - 00001035 _____ () C:\Users\Public\Desktop\Der Planer 4.lnk
2014-05-17 12:11 - 2014-05-17 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 4
2014-05-17 11:59 - 2014-05-17 12:11 - 00000000 ____D () C:\Program Files (x86)\Der Planer 4
2014-05-17 11:58 - 2014-02-15 19:42 - 00000426 _____ () C:\AVScanner.ini
2014-05-17 11:53 - 2014-05-17 11:53 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Personal ID
2014-05-17 11:49 - 2014-05-17 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal ID
2014-05-17 11:49 - 2014-05-17 11:49 - 00000000 ____D () C:\coolspot AG
2014-05-17 11:48 - 2014-05-17 11:48 - 00836416 _____ () C:\Users\Salih\Downloads\pidsetup.exe
2014-05-17 11:46 - 2014-05-17 11:46 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Utherverse
2014-05-16 16:52 - 2014-05-16 16:52 - 00002470 _____ () C:\Users\Salih\Desktop\Secret City.lnk
2014-05-16 16:52 - 2014-05-16 16:52 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Secret City
2014-05-16 16:51 - 2014-05-16 16:52 - 16797312 _____ () C:\Users\Salih\Downloads\VWWSetup (1).exe
2014-05-16 13:55 - 2014-05-16 13:56 - 00021544 _____ () C:\Windows\iis7.log
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\inetpub
2014-05-16 13:48 - 2014-05-16 13:49 - 04523576 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Salih\Downloads\GhostReconPhantoms_Setup(EU) (1).exe
2014-05-16 13:46 - 2014-05-16 13:46 - 04523576 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Salih\Downloads\GhostReconPhantoms_Setup(EU).exe
2014-05-16 13:19 - 2014-05-16 13:19 - 00001917 _____ () C:\Users\Public\Desktop\Play Online at ubi.com!.lnk
2014-05-16 13:19 - 2014-05-16 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ubi.com
2014-05-16 13:19 - 2001-04-12 18:00 - 00182272 _____ () C:\Windows\patchw32.dll
2014-05-16 13:18 - 2014-05-16 13:18 - 00000000 ____D () C:\Program Files (x86)\ubi.com
2014-05-16 12:53 - 2014-05-16 12:53 - 00000000 ____D () C:\Program Files (x86)\IObit Apps Toolbar
2014-05-16 12:53 - 2014-05-16 12:53 - 00000000 ____D () C:\Program Files (x86)\Application Updater
2014-05-15 14:19 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 14:19 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 14:19 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 14:19 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 14:19 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 14:19 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 13:38 - 2014-05-15 13:38 - 00001814 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-05-15 13:38 - 2014-05-15 13:38 - 00001786 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-05-15 13:37 - 2014-05-15 13:44 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-05-15 13:37 - 2014-05-15 13:37 - 00000000 ____D () C:\Users\Salih\AppData\Local\Bluestacks
2014-05-15 13:36 - 2014-05-15 13:36 - 00629584 _____ (Chip Digital GmbH) C:\Users\Salih\Downloads\BlueStacks App Player - CHIP-Downloader.exe
2014-05-15 13:30 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 13:30 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 13:30 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 13:30 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 13:29 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 13:29 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 13:29 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 13:29 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 13:29 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 13:29 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 13:29 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 13:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 13:29 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 13:29 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 13:29 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 13:29 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 13:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 13:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 13:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 13:29 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-12 18:49 - 2014-05-23 22:22 - 00006935 _____ () C:\Windows\setupact.log
2014-05-12 18:49 - 2014-05-12 18:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 12:13 - 2014-05-10 12:13 - 00000000 ____D () C:\Windows\pss
2014-05-10 11:36 - 2014-05-10 12:24 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-05-10 11:36 - 2014-05-10 11:36 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-10 11:36 - 2014-05-10 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-10 11:36 - 2014-05-10 11:36 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-10 11:35 - 2014-05-10 11:34 - 04745984 _____ (Piriform Ltd) C:\Users\Salih\Downloads\ccsetup413.exe
2014-05-10 11:33 - 2014-05-10 11:33 - 00686664 _____ ( ) C:\Users\Salih\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup413.exe
2014-05-06 15:09 - 2014-05-06 15:09 - 00041472 _____ () C:\Users\Salih\Downloads\launcher64.dll
2014-05-06 15:09 - 2014-05-06 15:09 - 00021712 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2014-05-06 15:09 - 2014-05-06 15:09 - 00000000 ____D () C:\Users\Salih\AppData\Local\eSupport.com
2014-05-06 15:08 - 2014-05-06 15:08 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Salih\Downloads\biosagentplus_796.exe
2014-05-06 15:02 - 2014-05-06 15:02 - 00001982 _____ () C:\Users\Salih\Desktop\Driver Cleaner Pro.lnk
2014-05-06 15:02 - 2014-05-06 15:02 - 00001982 _____ () C:\Users\Gast\Desktop\Driver Cleaner Pro.lnk
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\Program Files (x86)\Driver Cleaner Pro
2014-05-06 15:01 - 2014-05-06 15:01 - 02817354 _____ () C:\Users\Salih\Downloads\DCProSetup_15.zip
2014-05-06 14:57 - 2014-05-06 14:57 - 10314904 _____ (FinalWire Ltd. ) C:\Users\Salih\Downloads\everest_19088.exe
2014-05-06 14:57 - 2014-05-06 14:57 - 00001241 _____ () C:\Users\Salih\Desktop\EVEREST Ultimate Edition.lnk
2014-05-06 14:57 - 2014-05-06 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
2014-05-06 14:57 - 2014-05-06 14:57 - 00000000 ____D () C:\Program Files (x86)\Lavalys
2014-05-06 02:05 - 2014-05-06 02:05 - 16797312 _____ () C:\Users\Salih\Downloads\VWWSetup.exe
2014-05-06 02:05 - 2014-05-06 02:05 - 00000000 ____D () C:\Program Files (x86)\Utherverse Digital Inc
2014-05-06 02:05 - 2014-05-06 02:05 - 00000000 ____D () C:\Program Files (x86)\SecretCity 3DChat
2014-05-06 01:43 - 2014-05-06 01:43 - 00000000 ____D () C:\Program Files\AMD
2014-05-06 01:42 - 2014-05-06 01:42 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.251.dll
2014-05-06 01:42 - 2014-05-06 01:42 - 00047887 _____ () C:\Windows\atiogl.xml
2014-05-06 00:29 - 2014-05-06 00:29 - 01643096 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Salih\Downloads\GPU-Z.0.7.8.exe
2014-05-06 00:19 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\ATI
2014-05-06 00:19 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Salih\AppData\Local\ATI
2014-05-06 00:16 - 2014-05-06 00:16 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-05-06 00:14 - 2014-05-06 14:40 - 00000000 ____D () C:\ProgramData\AMD
2014-05-06 00:14 - 2014-05-06 00:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-05-06 00:12 - 2014-05-06 00:12 - 00000000 ____D () C:\Program Files\ATI
2014-05-05 23:39 - 2014-05-10 11:58 - 00000000 ___DC () C:\Users\Salih\AppData\Local\MigWiz
2014-05-05 23:02 - 2014-05-10 12:24 - 00003034 _____ () C:\Windows\System32\Tasks\{6FD8087B-3B56-43AA-B292-281027ADADBE}
2014-05-05 22:56 - 2014-05-05 22:56 - 00000000 ____D () C:\AMD
2014-05-05 22:35 - 2014-05-05 22:35 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-03 15:42 - 2014-05-03 15:45 - 228978112 _____ (NVIDIA Corporation) C:\Users\Salih\Downloads\307.83-desktop-win7-winvista-64bit-international-whql.exe
2014-05-03 15:34 - 2014-05-03 15:34 - 00000000 ____D () C:\Crash
2014-05-03 14:03 - 2014-05-03 14:03 - 00000000 ____D () C:\Users\Salih\AppData\Local\SCE
2014-05-03 14:02 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-05-03 14:02 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-05-03 14:02 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-05-03 14:02 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-05-03 14:02 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-05-03 14:02 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-05-03 14:02 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-05-03 14:02 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-05-03 14:02 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-05-03 14:02 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-05-03 14:02 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-05-03 14:02 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-05-03 14:02 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-05-03 14:02 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-05-03 14:02 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-05-03 14:02 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-05-03 14:02 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-05-03 14:02 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-05-03 14:02 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-05-03 14:02 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-05-03 14:02 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-05-03 14:02 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-05-03 14:02 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-05-03 14:02 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-05-03 14:02 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-05-03 14:02 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-05-03 14:02 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-05-03 14:02 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-05-03 14:02 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-05-03 14:02 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-05-03 14:02 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-05-03 14:02 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-05-03 14:02 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-05-03 14:02 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-05-03 14:02 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-05-03 14:02 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-05-03 14:02 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-05-03 14:02 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-05-03 14:02 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-05-03 14:02 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-05-03 14:02 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-05-03 14:02 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-05-03 14:02 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-05-03 14:02 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-05-03 14:02 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-05-03 14:02 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-05-03 14:02 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-05-03 14:02 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-05-03 14:02 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-05-03 14:02 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-05-03 14:02 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-05-03 14:01 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-05-03 14:01 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-05-03 14:01 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-05-03 14:01 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-05-03 14:01 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-05-03 14:01 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-05-03 14:01 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-05-03 14:01 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-05-03 14:01 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-05-03 14:01 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-05-03 14:01 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-05-03 14:01 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-05-03 14:01 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-05-03 14:01 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-05-03 14:01 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-05-03 14:01 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-05-03 14:01 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-05-03 14:01 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-05-03 14:01 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-05-03 14:01 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-05-03 14:01 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-05-03 14:01 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-05-03 14:01 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-05-03 14:01 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-05-03 14:01 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-05-03 14:01 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-05-03 14:01 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-05-03 14:01 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-05-03 14:01 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-05-03 14:01 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-05-03 14:01 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-05-03 14:01 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-05-03 14:01 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-05-03 14:01 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-05-03 14:01 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-05-03 14:01 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-05-03 14:01 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-05-03 14:01 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-05-03 14:01 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-05-03 14:01 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-05-03 14:01 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-05-03 14:01 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-05-03 14:01 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-05-03 14:01 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-05-03 14:01 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-05-03 14:01 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-05-03 14:01 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-05-03 14:01 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-05-03 14:01 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-05-03 14:01 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-05-03 14:01 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-05-03 14:01 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-05-03 14:00 - 2014-05-16 16:52 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-05-03 13:59 - 2014-05-16 16:52 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-05-03 13:59 - 2014-05-03 13:59 - 23968184 _____ () C:\Users\Salih\Downloads\PS2_PSG_setup.exe
2014-05-03 13:59 - 2014-05-03 13:59 - 00002519 _____ () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2 PSG.lnk
2014-05-03 13:59 - 2014-05-03 13:59 - 00002489 _____ () C:\Users\Salih\Desktop\PlanetSide 2 PSG.lnk
2014-05-03 13:59 - 2014-05-03 13:59 - 00000000 ____D () C:\Users\Public\Sony Online Entertainment
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\ChromeExtensions
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\AppData\Local\Tempc2dfb07db597e7f0d6fe11c1d39151a1
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\AppData\Local\Temp1329c86db49aa64ba44c7ad1de2bf329
2014-05-03 13:27 - 2014-05-23 21:48 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\BupSystem
2014-05-03 13:27 - 2014-05-03 13:27 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Security System 2
2014-05-03 13:26 - 2014-05-03 13:26 - 01062288 _____ () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall (1).exe
2014-05-03 13:25 - 2014-05-03 13:25 - 01062288 _____ () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall.exe
2014-05-03 12:52 - 2014-05-03 12:52 - 00000000 ____D () C:\Users\Public\Documents\sun
2014-05-03 12:50 - 2014-05-03 12:51 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-05-03 12:50 - 2014-05-03 12:50 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.0.lnk
2014-05-03 12:44 - 2014-05-03 12:44 - 00000000 ____D () C:\Users\Salih\Desktop\OpenOffice 4.1.0 (de) Installation Files
2014-05-03 12:43 - 2014-05-03 12:44 - 164962843 _____ () C:\Users\Salih\Downloads\Apache_OpenOffice_4.1.0_Win_x86_install_de.exe
2014-05-03 12:37 - 2014-05-03 12:37 - 00000000 __SHD () C:\Users\Salih\AppData\Local\EmieUserList
2014-05-03 12:37 - 2014-05-03 12:37 - 00000000 __SHD () C:\Users\Salih\AppData\Local\EmieSiteList
2014-04-30 01:35 - 2014-05-16 12:35 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-25 13:50 - 2014-05-23 21:39 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896}
2014-04-24 14:44 - 2014-04-24 14:44 - 00001998 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\ProgramData\Visan
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations

==================== One Month Modified Files and Folders =======

2014-05-23 23:02 - 2014-05-23 23:02 - 00012059 _____ () C:\Users\Salih\Downloads\FRST.txt
2014-05-23 23:02 - 2014-05-23 23:02 - 00000000 ____D () C:\FRST
2014-05-23 23:01 - 2014-05-23 23:01 - 02067456 _____ (Farbar) C:\Users\Salih\Downloads\FRST64.exe
2014-05-23 22:46 - 2014-05-23 21:58 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-23 22:45 - 2014-05-23 21:57 - 00000000 ____D () C:\Users\Salih\Desktop\mbar
2014-05-23 22:31 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-23 22:31 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-23 22:30 - 2014-05-23 21:58 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-23 22:29 - 2014-05-23 21:57 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-23 22:28 - 2013-12-11 00:29 - 01152020 _____ () C:\Windows\WindowsUpdate.log
2014-05-23 22:22 - 2014-05-17 15:05 - 00002650 _____ () C:\Windows\PFRO.log
2014-05-23 22:22 - 2014-05-12 18:49 - 00006935 _____ () C:\Windows\setupact.log
2014-05-23 22:22 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-23 22:22 - 2009-07-14 06:45 - 00000000 ____D () C:\Windows\Setup
2014-05-23 21:58 - 2014-05-23 21:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-23 21:57 - 2014-05-23 21:56 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Salih\Downloads\mbar-1.07.0.1009.exe
2014-05-23 21:48 - 2014-05-03 13:27 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\BupSystem
2014-05-23 21:39 - 2014-04-25 13:50 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896}
2014-05-23 21:37 - 2014-05-23 21:37 - 28685824 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 24107520 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 08866928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-05-23 21:37 - 2014-05-23 21:37 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-05-23 21:37 - 2014-05-23 21:37 - 00848896 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00806912 _____ (AMD) C:\Windows\system32\coinst_14.100.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00723841 _____ () C:\Windows\system32\atiicdxx.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 00580816 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-05-23 21:37 - 2014-05-23 21:37 - 00580816 _____ () C:\Windows\system32\atiapfxx.blb
2014-05-23 21:37 - 2014-05-23 21:37 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 00275124 _____ () C:\Windows\system32\ativvaxy_vi.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00274656 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 00273712 _____ () C:\Windows\system32\ativvaxy_vi_nd.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00234804 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00233008 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00138832 _____ () C:\Windows\system32\samu_krnl_isv_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00138832 _____ () C:\Windows\system32\samu_krnl_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00134192 _____ () C:\Windows\system32\ativce03.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00127872 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00117560 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00095744 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00082128 _____ () C:\Windows\system32\ativce02.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00042544 _____ () C:\Windows\system32\kapp_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00035408 _____ () C:\Windows\system32\kapp_si.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-05-23 21:37 - 2013-03-29 04:37 - 01343272 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2014-05-23 21:37 - 2013-03-29 04:37 - 01117184 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2014-05-23 21:37 - 2013-03-29 04:37 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2014-05-23 21:37 - 2013-03-29 04:37 - 00099520 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2014-05-23 21:37 - 2013-03-29 04:36 - 10335208 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2014-05-23 21:37 - 2013-03-29 04:36 - 06799688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2014-05-23 21:37 - 2013-03-29 04:36 - 06796592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2014-05-23 21:37 - 2013-03-29 03:35 - 00586240 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-05-23 21:37 - 2013-03-29 03:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-05-23 21:37 - 2013-03-29 03:10 - 01177600 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-05-23 21:36 - 2014-05-23 21:36 - 00110080 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2014-05-23 21:36 - 2014-05-23 21:36 - 00094720 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2014-05-23 21:33 - 2014-03-30 13:22 - 00002854 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Salih)
2014-05-23 21:33 - 2014-03-10 17:41 - 00003214 _____ () C:\Windows\System32\Tasks\Driver Booster Scan
2014-05-23 21:33 - 2014-03-10 17:41 - 00003158 _____ () C:\Windows\System32\Tasks\Driver Booster Update
2014-05-23 21:33 - 2014-03-10 17:41 - 00001177 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-05-23 21:33 - 2014-03-10 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-05-22 13:47 - 2014-05-22 13:47 - 00374463 _____ () C:\Users\Salih\Downloads\DELL_U2410_MONITOR_A00_00_DRVR_XVHXT.exe
2014-05-22 13:47 - 2014-05-22 13:47 - 00000000 ____D () C:\Dell
2014-05-22 13:40 - 2014-05-22 13:40 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\PCDr
2014-05-22 13:40 - 2013-12-10 18:09 - 00000000 ____D () C:\Users\Salih\AppData\Local\Deployment
2014-05-22 13:39 - 2014-05-22 13:39 - 00417872 _____ () C:\Users\Salih\Downloads\DellSystemDetect.exe
2014-05-22 13:39 - 2014-05-22 13:39 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2014-05-22 13:24 - 2014-05-22 13:24 - 00643147 _____ () C:\Users\Salih\Downloads\setup_ir12.exe
2014-05-22 13:24 - 2014-05-22 13:24 - 00001100 _____ () C:\Users\Salih\Desktop\Zero Assumption Digital Image Recovery.lnk
2014-05-22 13:24 - 2014-05-22 13:24 - 00001100 _____ () C:\Users\Gast\Desktop\Zero Assumption Digital Image Recovery.lnk
2014-05-22 13:24 - 2014-05-22 13:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zero Assumption Digital Image Recovery
2014-05-22 13:24 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files (x86)\Zero Assumption Digital Image Recovery
2014-05-22 12:35 - 2012-10-01 08:29 - 00787908 _____ () C:\Windows\system32\perfh007.dat
2014-05-22 12:35 - 2012-10-01 08:29 - 00182010 _____ () C:\Windows\system32\perfc007.dat
2014-05-22 12:35 - 2009-07-14 07:13 - 01845296 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-21 22:43 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Origin
2014-05-21 22:31 - 2014-05-21 22:14 - 00000000 ____D () C:\Users\Salih\Documents\FIFA World
2014-05-21 22:14 - 2014-05-21 16:23 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-21 22:13 - 2014-05-21 16:24 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Origin
2014-05-21 16:37 - 2014-05-21 16:37 - 00001192 _____ () C:\Users\Public\Desktop\EA Sports FIFA World.lnk
2014-05-21 16:37 - 2014-05-21 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Sports FIFA World
2014-05-21 16:37 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-21 16:35 - 2014-05-21 16:34 - 00017533 _____ () C:\Windows\DirectX.log
2014-05-21 16:26 - 2014-05-21 16:26 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-21 16:26 - 2014-05-21 16:24 - 00000000 ____D () C:\Users\Salih\AppData\Local\Origin
2014-05-21 16:23 - 2014-05-21 16:23 - 00000986 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-21 16:23 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-21 16:23 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-21 16:23 - 2014-05-21 16:22 - 23516512 _____ (Electronic Arts, Inc.) C:\Users\Salih\Downloads\EASportsFIFAWorld.exe
2014-05-19 16:32 - 2014-05-19 16:16 - 00000000 ____D () C:\Users\Salih\AppData\Local\Microsoft Games
2014-05-19 16:16 - 2014-05-19 16:16 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-05-19 13:36 - 2013-12-21 15:42 - 00000000 ____D () C:\Users\Salih\Desktop\Neuer Ordner
2014-05-19 13:17 - 2014-05-19 13:16 - 00000000 ____D () C:\ProgramData\Hair Concept
2014-05-19 13:17 - 2014-05-19 13:13 - 00000000 ____D () C:\Program Files (x86)\Hair Concept
2014-05-19 13:16 - 2014-05-19 13:16 - 00001042 _____ () C:\Users\Public\Desktop\Hair Concept.lnk
2014-05-19 13:16 - 2014-05-19 13:16 - 00001006 _____ () C:\Users\Public\Desktop\Hair Concept Friseur Edition.lnk
2014-05-19 13:16 - 2014-05-19 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hair Concept
2014-05-18 13:13 - 2013-12-10 23:10 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-18 13:13 - 2013-12-10 23:10 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 16:16 - 2013-12-10 18:10 - 00002182 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-17 16:08 - 2014-05-17 16:08 - 00000000 ____D () C:\Users\Salih\Documents\bitComposer Games
2014-05-17 16:08 - 2014-05-17 16:08 - 00000000 ____D () C:\ProgramData\Wildlife Park 3
2014-05-17 16:04 - 2014-05-17 16:04 - 00001233 _____ () C:\Users\Salih\Desktop\Starte Wildlife Park 3.lnk
2014-05-17 16:04 - 2014-05-17 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bitComposer Games
2014-05-17 15:49 - 2014-05-17 15:49 - 00000000 ____D () C:\Program Files (x86)\bitComposer Games
2014-05-17 15:47 - 2014-05-17 15:45 - 327126016 _____ (Microsoft Corporation) C:\Users\Salih\Downloads\sc_speedpack.exe
2014-05-17 15:36 - 2014-05-17 15:36 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\.minecraft
2014-05-17 15:35 - 2014-05-17 15:35 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-17 15:34 - 2014-05-17 15:34 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\ProgramData\Sun
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-17 15:33 - 2014-05-17 15:33 - 00921512 _____ (Oracle Corporation) C:\Users\Salih\Downloads\chromeinstall-7u55.exe
2014-05-17 15:31 - 2014-05-17 15:31 - 04186549 _____ (Mojang ) C:\Users\Salih\Downloads\minecraft_pcgdemo.exe
2014-05-17 12:12 - 2014-05-17 12:12 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Der Planer 4
2014-05-17 12:11 - 2014-05-17 12:11 - 00001035 _____ () C:\Users\Public\Desktop\Der Planer 4.lnk
2014-05-17 12:11 - 2014-05-17 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 4
2014-05-17 12:11 - 2014-05-17 11:59 - 00000000 ____D () C:\Program Files (x86)\Der Planer 4
2014-05-17 11:53 - 2014-05-17 11:53 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Personal ID
2014-05-17 11:49 - 2014-05-17 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal ID
2014-05-17 11:49 - 2014-05-17 11:49 - 00000000 ____D () C:\coolspot AG
2014-05-17 11:48 - 2014-05-17 11:48 - 00836416 _____ () C:\Users\Salih\Downloads\pidsetup.exe
2014-05-17 11:46 - 2014-05-17 11:46 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Utherverse
2014-05-17 11:33 - 2014-04-22 14:57 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-05-17 11:33 - 2014-02-10 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tractor Racer 2
2014-05-16 16:52 - 2014-05-16 16:52 - 00002470 _____ () C:\Users\Salih\Desktop\Secret City.lnk
2014-05-16 16:52 - 2014-05-16 16:52 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Secret City
2014-05-16 16:52 - 2014-05-16 16:51 - 16797312 _____ () C:\Users\Salih\Downloads\VWWSetup (1).exe
2014-05-16 16:52 - 2014-05-03 14:00 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-05-16 16:52 - 2014-05-03 13:59 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-05-16 13:56 - 2014-05-16 13:55 - 00021544 _____ () C:\Windows\iis7.log
2014-05-16 13:56 - 2013-04-16 02:03 - 01730080 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\inetpub
2014-05-16 13:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2014-05-16 13:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-16 13:49 - 2014-05-16 13:48 - 04523576 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Salih\Downloads\GhostReconPhantoms_Setup(EU) (1).exe
2014-05-16 13:46 - 2014-05-16 13:46 - 04523576 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Salih\Downloads\GhostReconPhantoms_Setup(EU).exe
2014-05-16 13:19 - 2014-05-16 13:19 - 00001917 _____ () C:\Users\Public\Desktop\Play Online at ubi.com!.lnk
2014-05-16 13:19 - 2014-05-16 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ubi.com
2014-05-16 13:18 - 2014-05-16 13:18 - 00000000 ____D () C:\Program Files (x86)\ubi.com
2014-05-16 13:18 - 2013-12-12 18:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-16 12:53 - 2014-05-16 12:53 - 00000000 ____D () C:\Program Files (x86)\IObit Apps Toolbar
2014-05-16 12:53 - 2014-05-16 12:53 - 00000000 ____D () C:\Program Files (x86)\Application Updater
2014-05-16 12:52 - 2013-12-10 15:39 - 00000000 ___RD () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-16 12:52 - 2013-12-10 15:39 - 00000000 ___RD () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 12:35 - 2014-04-30 01:35 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 14:18 - 2013-12-18 18:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 14:16 - 2013-12-18 18:38 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 13:44 - 2014-05-15 13:37 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-05-15 13:38 - 2014-05-15 13:38 - 00001814 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-05-15 13:38 - 2014-05-15 13:38 - 00001786 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-05-15 13:38 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-15 13:37 - 2014-05-15 13:37 - 00000000 ____D () C:\Users\Salih\AppData\Local\Bluestacks
2014-05-15 13:36 - 2014-05-15 13:36 - 00629584 _____ (Chip Digital GmbH) C:\Users\Salih\Downloads\BlueStacks App Player - CHIP-Downloader.exe
2014-05-12 18:49 - 2014-05-12 18:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-12 18:49 - 2013-12-10 18:10 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-12 18:49 - 2013-12-10 18:10 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-10 12:24 - 2014-05-10 11:36 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-05-10 12:24 - 2014-05-05 23:02 - 00003034 _____ () C:\Windows\System32\Tasks\{6FD8087B-3B56-43AA-B292-281027ADADBE}
2014-05-10 12:24 - 2013-12-13 19:18 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2014-05-10 12:24 - 2013-12-12 18:51 - 00003086 _____ () C:\Windows\System32\Tasks\{C8B849E0-0022-47D4-932C-5728C6C3CE87}
2014-05-10 12:24 - 2013-12-10 18:10 - 00004116 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 12:24 - 2013-12-10 18:10 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-10 12:13 - 2014-05-10 12:13 - 00000000 ____D () C:\Windows\pss
2014-05-10 12:13 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-10 12:12 - 2013-04-16 02:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-05-10 11:58 - 2014-05-05 23:39 - 00000000 ___DC () C:\Users\Salih\AppData\Local\MigWiz
2014-05-10 11:58 - 2013-04-16 02:54 - 00000000 ____D () C:\Windows\Panther
2014-05-10 11:36 - 2014-05-10 11:36 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-10 11:36 - 2014-05-10 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-10 11:36 - 2014-05-10 11:36 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-10 11:34 - 2014-05-10 11:35 - 04745984 _____ (Piriform Ltd) C:\Users\Salih\Downloads\ccsetup413.exe
2014-05-10 11:33 - 2014-05-10 11:33 - 00686664 _____ ( ) C:\Users\Salih\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup413.exe
2014-05-09 08:14 - 2014-05-15 13:30 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 13:30 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 15:09 - 2014-05-06 15:09 - 00041472 _____ () C:\Users\Salih\Downloads\launcher64.dll
2014-05-06 15:09 - 2014-05-06 15:09 - 00021712 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2014-05-06 15:09 - 2014-05-06 15:09 - 00000000 ____D () C:\Users\Salih\AppData\Local\eSupport.com
2014-05-06 15:08 - 2014-05-06 15:08 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Salih\Downloads\biosagentplus_796.exe
2014-05-06 15:02 - 2014-05-06 15:02 - 00001982 _____ () C:\Users\Salih\Desktop\Driver Cleaner Pro.lnk
2014-05-06 15:02 - 2014-05-06 15:02 - 00001982 _____ () C:\Users\Gast\Desktop\Driver Cleaner Pro.lnk
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\Program Files (x86)\Driver Cleaner Pro
2014-05-06 15:01 - 2014-05-06 15:01 - 02817354 _____ () C:\Users\Salih\Downloads\DCProSetup_15.zip
2014-05-06 14:57 - 2014-05-06 14:57 - 10314904 _____ (FinalWire Ltd. ) C:\Users\Salih\Downloads\everest_19088.exe
2014-05-06 14:57 - 2014-05-06 14:57 - 00001241 _____ () C:\Users\Salih\Desktop\EVEREST Ultimate Edition.lnk
2014-05-06 14:57 - 2014-05-06 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
2014-05-06 14:57 - 2014-05-06 14:57 - 00000000 ____D () C:\Program Files (x86)\Lavalys
2014-05-06 14:54 - 2014-01-11 13:24 - 00000000 ____D () C:\Program Files (x86)\Amigabit Powerbooster
2014-05-06 14:40 - 2014-05-06 00:14 - 00000000 ____D () C:\ProgramData\AMD
2014-05-06 06:40 - 2014-05-15 14:19 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 14:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 14:19 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 14:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 14:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 14:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-06 02:05 - 2014-05-06 02:05 - 16797312 _____ () C:\Users\Salih\Downloads\VWWSetup.exe
2014-05-06 02:05 - 2014-05-06 02:05 - 00000000 ____D () C:\Program Files (x86)\Utherverse Digital Inc
2014-05-06 02:05 - 2014-05-06 02:05 - 00000000 ____D () C:\Program Files (x86)\SecretCity 3DChat
2014-05-06 01:43 - 2014-05-06 01:43 - 00000000 ____D () C:\Program Files\AMD
2014-05-06 01:42 - 2014-05-06 01:42 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.251.dll
2014-05-06 01:42 - 2014-05-06 01:42 - 00047887 _____ () C:\Windows\atiogl.xml
2014-05-06 00:29 - 2014-05-06 00:29 - 01643096 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Salih\Downloads\GPU-Z.0.7.8.exe
2014-05-06 00:19 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\ATI
2014-05-06 00:19 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Salih\AppData\Local\ATI
2014-05-06 00:16 - 2014-05-06 00:16 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-05-06 00:14 - 2014-05-06 00:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-05-06 00:12 - 2014-05-06 00:12 - 00000000 ____D () C:\Program Files\ATI
2014-05-05 22:56 - 2014-05-05 22:56 - 00000000 ____D () C:\AMD
2014-05-05 22:36 - 2013-12-10 16:47 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-05 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-05-05 22:35 - 2014-05-05 22:35 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-03 15:59 - 2013-12-10 17:08 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-03 15:59 - 2013-12-10 17:08 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-03 15:56 - 2009-07-14 06:45 - 00314152 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-03 15:45 - 2014-05-03 15:42 - 228978112 _____ (NVIDIA Corporation) C:\Users\Salih\Downloads\307.83-desktop-win7-winvista-64bit-international-whql.exe
2014-05-03 15:34 - 2014-05-03 15:34 - 00000000 ____D () C:\Crash
2014-05-03 14:03 - 2014-05-03 14:03 - 00000000 ____D () C:\Users\Salih\AppData\Local\SCE
2014-05-03 13:59 - 2014-05-03 13:59 - 23968184 _____ () C:\Users\Salih\Downloads\PS2_PSG_setup.exe
2014-05-03 13:59 - 2014-05-03 13:59 - 00002519 _____ () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2 PSG.lnk
2014-05-03 13:59 - 2014-05-03 13:59 - 00002489 _____ () C:\Users\Salih\Desktop\PlanetSide 2 PSG.lnk
2014-05-03 13:59 - 2014-05-03 13:59 - 00000000 ____D () C:\Users\Public\Sony Online Entertainment
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\ChromeExtensions
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\AppData\Local\Tempc2dfb07db597e7f0d6fe11c1d39151a1
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\AppData\Local\Temp1329c86db49aa64ba44c7ad1de2bf329
2014-05-03 13:28 - 2013-12-10 15:39 - 00000000 ____D () C:\Users\Salih
2014-05-03 13:27 - 2014-05-03 13:27 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Security System 2
2014-05-03 13:26 - 2014-05-03 13:26 - 01062288 _____ () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall (1).exe
2014-05-03 13:25 - 2014-05-03 13:25 - 01062288 _____ () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall.exe
2014-05-03 12:53 - 2013-12-10 15:39 - 00068056 _____ () C:\Users\Salih\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-03 12:52 - 2014-05-03 12:52 - 00000000 ____D () C:\Users\Public\Documents\sun
2014-05-03 12:51 - 2014-05-03 12:50 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-05-03 12:51 - 2013-12-10 18:29 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-05-03 12:50 - 2014-05-03 12:50 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.0.lnk
2014-05-03 12:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-03 12:44 - 2014-05-03 12:44 - 00000000 ____D () C:\Users\Salih\Desktop\OpenOffice 4.1.0 (de) Installation Files
2014-05-03 12:44 - 2014-05-03 12:43 - 164962843 _____ () C:\Users\Salih\Downloads\Apache_OpenOffice_4.1.0_Win_x86_install_de.exe
2014-05-03 12:37 - 2014-05-03 12:37 - 00000000 __SHD () C:\Users\Salih\AppData\Local\EmieUserList
2014-05-03 12:37 - 2014-05-03 12:37 - 00000000 __SHD () C:\Users\Salih\AppData\Local\EmieSiteList
2014-05-01 14:46 - 2014-03-10 17:41 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Slick Savings
2014-05-01 14:45 - 2014-03-11 13:22 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\HpUpdate
2014-04-24 14:44 - 2014-04-24 14:44 - 00001998 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\ProgramData\Visan
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-04-24 14:44 - 2014-03-11 13:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-04-24 13:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-21 23:02

==================== End Of Log ============================
--- --- ---

--- --- ---
__________________
Alt 23.05.2014, 22:09   #4
Machiavelli
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Das Addition Log fehlt. Es sollte sich hier befinden: C:\Users\Salih\Downloads

Alt 23.05.2014, 22:47   #5
Nightzone
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Irgendwie ladet es nicht
Braucht es vielleicht länger zu laden ist am laden aber schickt nicht ab .

FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-05-2014
Ran by Salih at 2014-05-23 23:03:04
Running from C:\Users\Salih\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Computer Sicherheit (Enabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}
AS: Computer Sicherheit (Enabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Ahnenblatt 2.64 (HKLM-x32\...\Ahnenblatt_is1) (Version: 2.64.1.3 - Dirk Boettcher)
AMD Catalyst Install Manager (HKLM\...\{ACA7CBDB-A6F3-4D1A-0B03-A519B6EC0FF0}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Amigabit Powerbooster 3.2.5 (HKLM-x32\...\{15C38046-3AED-450d-9F03-1EFDA5FC5786}_is1) (Version:  - Amigabit, Inc.)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.9.3088 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{4C02AFA8-074D-44FE-B0E1-A73D4AA65390}) (Version: 0.8.9.3088 - BlueStack Systems, Inc.)
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
Computer Security 12.77.101.0 (release) (x32 Version: 12.77.101.0 - F-Secure Corporation) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell System Detect (HKCU\...\9204f5692a8faf3b) (Version: 5.7.0.6 - Dell)
Der Planer 4 Version 1.3 (HKLM-x32\...\{BA9E9ED5-FFF3-4E0D-95B9-62527672268B}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
DH Driver Cleaner Professional Edition (HKLM-x32\...\Driver Cleaner Pro) (Version: Version 1.5 - Ruud Ketelaars)
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.4 - IObit)
EA Sports FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 5.3.0.40277 - Electronic Arts, Inc.)
EVEREST Ultimate Edition v5.50 (HKLM-x32\...\EVEREST Ultimate Edition_is1) (Version: 5.50 - FinalWire Ltd.)
Flatcast Viewer Plugin 5.3.0.784 (HKLM-x32\...\Flatcast Viewer 5.3_is1) (Version:  - 1 mal 1 Software GmbH)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Free Audio CD to MP3 Converter version 1.3.12.1228 (HKLM-x32\...\Free Audio CD to MP3 Converter_is1) (Version: 1.3.12.1228 - DVDVideoSoft Ltd.)
F-Secure CCF Reputation (x32 Version: 1.0.25.1756 - F-Secure) Hidden
F-Secure CCF Scanning 1.23.124.8831 (release) (x32 Version: 1.23.124.8831 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.02.128 (x32 Version: 1.02.128.1 - F-Secure Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Hair Concept (HKLM-x32\...\Hair Concept) (Version:  - Style Concept SC KG)
HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (HKLM\...\{F28BD099-9FC0-4A03-A605-E069B8D17D47}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710a-f Hilfe (HKLM-x32\...\{037CD593-D760-4A00-B030-7BBAFA1123FE}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IObit Apps Toolbar v9.2 (HKLM-x32\...\{4F5E5430-1DA8-4B2B-BB26-B29C0E7DBFDB}) (Version: 9.2 - Spigot, Inc.) <==== ATTENTION
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Kabel Deutschland Launchpad (HKLM-x32\...\F-Secure ServiceEnabler 44553) (Version: 1.77.243.0 - F-Secure Corporation)
Kabel Deutschland Launchpad (x32 Version: 1.77.243.0 - F-Secure Corporation) Hidden
LibreOffice 3.6 (HKLM-x32\...\{C2F438B6-7010-453B-93EC-B2FC053AA97B}) (Version: 3.6.1.2 - The Document Foundation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobistel Cynus T2 Drivers(x64) (HKLM-x32\...\{C3F57607-592D-458F-81AE-349FD05DFA74}) (Version: 1.00 - Mobistel)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
Online Safety 2.77.1170.803 (x32 Version: 2.77.1170.803 - F-Secure Corporation) Hidden
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDF-XChange Editor (HKLM-x32\...\{57476447-95ee-4c7c-8373-875ad649bbb9}) (Version: 3.0.306.1 - Tracker Software Products (Canada) Ltd.)
PDF-XChange Editor (Version: 3.0.306.1 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Lite 2012 (HKLM\...\{AD09CC9A-6901-4921-B66D-9402FF32EF27}_is1) (Version: 5.0.272.1 - Tracker Software Products Ltd)
Personal ID (HKLM-x32\...\{F722209B-739E-40E4-ADB1-062BD032A0DB}) (Version: 1.8.5.202 - coolspot AG)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
PlanetSide 2 (HKCU\...\SOE-PlanetSide 2 PSG) (Version: 1.0.3.183 - Sony Online Entertainment)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Secret City (HKLM-x32\...\Secret City) (Version: 1.9.4662 - Utherverse Digital Inc)
Securita Scout (HKLM-x32\...\Securita Scout) (Version:  - )
Slick Savings (HKLM-x32\...\{3A787631-66A2-4634-B928-A37E73B58FB6}) (Version: 1.3 - Spigot, Inc.) <==== ATTENTION
ubi.com (HKLM-x32\...\{AEDDF5A3-29CE-11D5-A8C2-000102246AAE}) (Version:  - )
Wildlife Park 3 v1.11 (HKLM-x32\...\Wildlife Park 3_is1) (Version:  - bitComposer Games)
Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Zero Assumption Digital Image Recovery 1.2 (HKLM-x32\...\Zero Assumption Digital Image Recovery_is1) (Version:  - Zero Assumption Recovery Software)

==================== Restore Points  =========================

16-05-2014 11:46:44 DirectX wurde installiert
16-05-2014 11:48:27 DirectX wurde installiert
16-05-2014 11:49:16 DirectX wurde installiert
16-05-2014 11:54:46 Windows Modules Installer
16-05-2014 11:57:23 DirectX wurde installiert
16-05-2014 12:06:26 DirectX wurde installiert
16-05-2014 14:22:42 DirectX wurde installiert
17-05-2014 09:14:49 DirectX wurde installiert
17-05-2014 13:33:52 Installed Java 7 Update 55
17-05-2014 13:39:31 DirectX wurde installiert
20-05-2014 21:12:13 Windows Update
21-05-2014 14:32:53 DirectX wurde installiert
22-05-2014 11:06:11 Konfiguriert Mobistel Cynus T2 Drivers(x64)
23-05-2014 19:35:17 Driver Booster : AMD Radeon HD 7700 Series
23-05-2014 20:20:58 Malwarebytes Anti-Rootkit Restore Point

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {01244A81-D6A7-4ACC-B0D1-65351570B19C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {53EDE55F-1DE8-4169-B0D3-CE9C22BB1340} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1497994543-823861307-399158431-1000
Task: {741F93A8-D1BC-4607-9236-706A5EC29C77} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-10] (Google Inc.)
Task: {7EB2D2ED-B743-4C6D-885C-EBABABE0D09D} - System32\Tasks\Driver Booster SkipUAC (Salih) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-05-09] (IObit)
Task: {9AB09729-BB71-4050-ABD5-BDB79C781F74} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-10] (Google Inc.)
Task: {B1C40FB3-9F51-4C50-BE9B-88F9D39ACCC7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {B87CD9ED-4588-49A3-B1C8-988E80AE464B} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-03-07] (IObit)
Task: {EF6B9F1A-3A26-4E61-BA6A-B8DBEEA3AA61} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2014-05-09] (IObit)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-10 17:29 - 2013-08-20 10:57 - 00045504 _____ () C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng
2013-01-18 12:06 - 2013-01-18 12:06 - 00208880 _____ () C:\Program Files (x86)\Kabel Deutschland\daas2.dll
2013-12-10 17:36 - 2013-12-10 17:36 - 00030888 _____ () C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2013-12-10 17:29 - 2013-12-12 18:47 - 00212008 _____ () C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Spam Control\fsas.dll
2013-12-10 17:29 - 2014-05-21 12:51 - 00949288 _____ () C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\fm4av.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\chrome_elf.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\libglesv2.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\libegl.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\pdf.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amigabit Powerbooster Tray => "C:\Program Files (x86)\Amigabit Powerbooster\PowerboosterTray.exe" -startup
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: F-Secure Hoster (44553) => "C:\Program Files (x86)\Kabel Deutschland\fshoster32.exe" -app -hosterid:1
MSCONFIG\startupreg: F-Secure Manager => "C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Common\FSM32.EXE" /splash
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
MSCONFIG\startupreg: SearchSettings => "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
MSCONFIG\startupreg: Slick Savings => "C:\Users\Salih\AppData\Roaming\Slick Savings\CouponsHelper.exe"

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/23/2014 10:24:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2014 09:52:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2014 09:48:27 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 8  2014-05-23  21:48:27+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in computer SALIH-PC. 
 Infection: Trojan.Agent.BDDE 
 Action: The scanner was unable to remove the infection.

Error: (05/23/2014 09:46:24 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 7  2014-05-23  21:46:24+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:45:22 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 6  2014-05-23  21:45:22+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:45:21 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 5  2014-05-23  21:45:21+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:44:37 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 4  2014-05-23  21:44:37+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:40:44 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description: ATI EEU Client event error

Error: (05/23/2014 09:33:28 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 3  2014-05-23  21:33:28+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:33:24 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 2  2014-05-23  21:33:24+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\USERS\SALIH\APPDATA\ROAMING\BUPSYSTEM\BUP.EXE. 
 Infection: Trojan.Agent.BDDE


System errors:
=============
Error: (05/23/2014 09:51:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Net.Tcp Listener Adapter" ist vom Dienst "Net.Tcp Port Sharing Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1053

Error: (05/23/2014 09:51:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Net.Tcp Port Sharing Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/23/2014 09:51:36 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Net.Tcp Port Sharing Service erreicht.

Error: (05/23/2014 09:48:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "BUP Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/23/2014 09:27:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Net.Tcp Listener Adapter" ist vom Dienst "Net.Tcp Port Sharing Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1053

Error: (05/23/2014 09:27:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Net.Tcp Port Sharing Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/23/2014 09:27:02 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Net.Tcp Port Sharing Service erreicht.

Error: (05/21/2014 03:42:11 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/19/2014 01:06:29 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (05/19/2014 01:03:28 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.


Microsoft Office Sessions:
=========================
Error: (05/23/2014 10:24:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2014 09:52:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2014 09:48:27 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 8  2014-05-23  21:48:27+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in computer SALIH-PC. 
 Infection: Trojan.Agent.BDDE 
 Action: The scanner was unable to remove the infection.

Error: (05/23/2014 09:46:24 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 7  2014-05-23  21:46:24+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:45:22 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 6  2014-05-23  21:45:22+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:45:21 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 5  2014-05-23  21:45:21+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:44:37 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 4  2014-05-23  21:44:37+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:40:44 PM) (Source: ATIeRecord) (EventID: 16388) (User: )
Description: 

Error: (05/23/2014 09:33:28 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 3  2014-05-23  21:33:28+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\Users\Salih\AppData\Roaming\BupSystem\bup.exe. 
 Infection: Trojan.Agent.BDDE

Error: (05/23/2014 09:33:24 PM) (Source: FSecure-FSecure-F-Secure Anti-Virus) (EventID: 103) (User: )
Description: 2  2014-05-23  21:33:24+02:00  SALIH-PC  Salih-PC\Salih  F-Secure Anti-Virus
 Malicious code found in file C:\USERS\SALIH\APPDATA\ROAMING\BUPSYSTEM\BUP.EXE. 
 Infection: Trojan.Agent.BDDE


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 4093.98 MB
Available physical RAM: 2175.35 MB
Total Pagefile: 8186.15 MB
Available Pagefile: 5936.65 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:223.12 GB) (Free:141.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: AAF07BE7)
Partition 1: (Active) - (Size=10 GB) - (Type=27)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---

Zitat:
Zitat von Machiavelli Beitrag anzeigen
Das Addition Log fehlt. Es sollte sich hier befinden: C:\Users\Salih\Downloads
Schade jetzt klappt es und jetzt bist du weg


Alt 24.05.2014, 10:30   #6
Machiavelli
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Zitat:
Schade jetzt klappt es und jetzt bist du weg
Ich kann nicht die ganze Nacht online sein ...

Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.



Schritt 4
Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Bitte poste mir die Inhalte der Logs von Adwarecleaner, MBAM, JRT und FRST hier in den Thread.

Alt 24.05.2014, 18:18   #7
Nightzone
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Ok sorry hast recht AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v3.210 - Bericht erstellt am 24/05/2014 um 18:14:13
# Aktualisiert 19/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Salih - SALIH-PC
# Gestartet von : C:\Users\Salih\Downloads\adwcleaner_3.210.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : Application Updater

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\Application Updater
Ordner Gelöscht : C:\Program Files (x86)\IObit Apps Toolbar
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Spigot
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\Search Settings
Ordner Gelöscht : C:\Users\Salih\AppData\Local\eSupport.com
Ordner Gelöscht : C:\Users\Salih\AppData\Local\Slick Savings
Ordner Gelöscht : C:\Users\Salih\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Salih\AppData\LocalLow\Search Settings
Ordner Gelöscht : C:\Users\Salih\AppData\Roaming\BupSystem
Ordner Gelöscht : C:\Users\Salih\AppData\Roaming\Slick Savings
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Ordner Gelöscht : C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Ordner Gelöscht : C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
Datei Gelöscht : C:\Windows\System32\Tasks\Driver Booster Update

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Search Settings
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Search Settings
Schlüssel Gelöscht : HKLM\Software\Application Updater
Schlüssel Gelöscht : HKLM\Software\Search Settings
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Google Chrome v34.0.1847.137

[ Datei : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : hbcennhacfaagdopikcegfcobcadeocj
Gelöscht [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
Gelöscht [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
Gelöscht [Extension] : pfndaklgolladniicklehhancnlgocpp

[ Datei : C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : bopakagnckmlgajfccecajhnimjiiedh
Gelöscht [Extension] : hbcennhacfaagdopikcegfcobcadeocj
Gelöscht [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
Gelöscht [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
Gelöscht [Extension] : mkcedibhemacmilmkpndpkoidlnmgngg
Gelöscht [Extension] : pfndaklgolladniicklehhancnlgocpp

*************************

AdwCleaner[R0].txt - [5505 octets] - [24/05/2014 18:12:08]
AdwCleaner[S0].txt - [5306 octets] - [24/05/2014 18:14:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5366 octets] ##########
--- --- ---


Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 24.05.2014
Suchlauf-Zeit: 18:33:50
Logdatei: Log1.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.05.24.05
Rootkit Datenbank: v2014.05.21.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Salih

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 299689
Verstrichene Zeit: 12 Min, 54 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 2
PUP.Optional.Spigot, HKU\S-1-5-21-1497994543-823861307-399158431-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, In Quarantäne, [eb4a064f6f0c2b0badd5ad839e645ca4],
PUP.Optional.Spigot, HKU\S-1-5-21-1497994543-823861307-399158431-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, In Quarantäne, [eb4a064f6f0c2b0badd5ad839e645ca4],

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 4
PUP.Optional.SlickSavings.A, C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj, In Quarantäne, [52e3e96cbac165d121b283f7cc366f91],
PUP.Optional.SlickSavings.A, C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk, In Quarantäne, [10252a2b53285fd79440ed8d41c19b65],
PUP.Optional.SlickSavings.A, C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp, In Quarantäne, [44f15bfa97e4c571973eec8efb07ed13],
PUP.Optional.Spigot.A, C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj, In Quarantäne, [af8681d47cffc076f653b2d2fd058080],

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Salih on 24.05.2014 at 19:02:59,88
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.05.2014 at 19:10:34,52
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

So hab mal alles gepostet

Alt 24.05.2014, 18:28   #8
Machiavelli
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Zitat:
So hab mal alles gepostet
Nö.

Schritt 4 fehlt.

Alt 24.05.2014, 18:49   #9
Nightzone
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-05-2014 1
Ran by Salih at 2014-05-24 19:46:30
Running from C:\Users\Salih\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Computer Sicherheit (Enabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}
AS: Computer Sicherheit (Enabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Ahnenblatt 2.64 (HKLM-x32\...\Ahnenblatt_is1) (Version: 2.64.1.3 - Dirk Boettcher)
AMD Catalyst Install Manager (HKLM\...\{ACA7CBDB-A6F3-4D1A-0B03-A519B6EC0FF0}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Amigabit Powerbooster 3.2.5 (HKLM-x32\...\{15C38046-3AED-450d-9F03-1EFDA5FC5786}_is1) (Version:  - Amigabit, Inc.)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.9.3088 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{4C02AFA8-074D-44FE-B0E1-A73D4AA65390}) (Version: 0.8.9.3088 - BlueStack Systems, Inc.)
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
Computer Security 12.77.101.0 (release) (x32 Version: 12.77.101.0 - F-Secure Corporation) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell System Detect (HKCU\...\9204f5692a8faf3b) (Version: 5.7.0.6 - Dell)
Der Planer 4 Version 1.3 (HKLM-x32\...\{BA9E9ED5-FFF3-4E0D-95B9-62527672268B}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
DH Driver Cleaner Professional Edition (HKLM-x32\...\Driver Cleaner Pro) (Version: Version 1.5 - Ruud Ketelaars)
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.4 - IObit)
EA Sports FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 5.3.0.40277 - Electronic Arts, Inc.)
EVEREST Ultimate Edition v5.50 (HKLM-x32\...\EVEREST Ultimate Edition_is1) (Version: 5.50 - FinalWire Ltd.)
Flatcast Viewer Plugin 5.3.0.784 (HKLM-x32\...\Flatcast Viewer 5.3_is1) (Version:  - 1 mal 1 Software GmbH)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Free Audio CD to MP3 Converter version 1.3.12.1228 (HKLM-x32\...\Free Audio CD to MP3 Converter_is1) (Version: 1.3.12.1228 - DVDVideoSoft Ltd.)
F-Secure CCF Reputation (x32 Version: 1.0.25.1756 - F-Secure) Hidden
F-Secure CCF Scanning 1.23.124.8831 (release) (x32 Version: 1.23.124.8831 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.02.128 (x32 Version: 1.02.128.1 - F-Secure Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Hair Concept (HKLM-x32\...\Hair Concept) (Version:  - Style Concept SC KG)
HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (HKLM\...\{F28BD099-9FC0-4A03-A605-E069B8D17D47}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710a-f Hilfe (HKLM-x32\...\{037CD593-D760-4A00-B030-7BBAFA1123FE}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IObit Apps Toolbar v9.2 (HKLM-x32\...\{4F5E5430-1DA8-4B2B-BB26-B29C0E7DBFDB}) (Version: 9.2 - Spigot, Inc.) <==== ATTENTION
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Kabel Deutschland Launchpad (HKLM-x32\...\F-Secure ServiceEnabler 44553) (Version: 1.77.243.0 - F-Secure Corporation)
Kabel Deutschland Launchpad (x32 Version: 1.77.243.0 - F-Secure Corporation) Hidden
LibreOffice 3.6 (HKLM-x32\...\{C2F438B6-7010-453B-93EC-B2FC053AA97B}) (Version: 3.6.1.2 - The Document Foundation)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobistel Cynus T2 Drivers(x64) (HKLM-x32\...\{C3F57607-592D-458F-81AE-349FD05DFA74}) (Version: 1.00 - Mobistel)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
Online Safety 2.77.1170.803 (x32 Version: 2.77.1170.803 - F-Secure Corporation) Hidden
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.10.4710 - Electronic Arts, Inc.)
PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDF-XChange Editor (HKLM-x32\...\{57476447-95ee-4c7c-8373-875ad649bbb9}) (Version: 3.0.306.1 - Tracker Software Products (Canada) Ltd.)
PDF-XChange Editor (Version: 3.0.306.1 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Lite 2012 (HKLM\...\{AD09CC9A-6901-4921-B66D-9402FF32EF27}_is1) (Version: 5.0.272.1 - Tracker Software Products Ltd)
Personal ID (HKLM-x32\...\{F722209B-739E-40E4-ADB1-062BD032A0DB}) (Version: 1.8.5.202 - coolspot AG)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
PlanetSide 2 (HKCU\...\SOE-PlanetSide 2 PSG) (Version: 1.0.3.183 - Sony Online Entertainment)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Secret City (HKLM-x32\...\Secret City) (Version: 1.9.4662 - Utherverse Digital Inc)
Securita Scout (HKLM-x32\...\Securita Scout) (Version:  - )
ubi.com (HKLM-x32\...\{AEDDF5A3-29CE-11D5-A8C2-000102246AAE}) (Version:  - )
Wildlife Park 3 v1.11 (HKLM-x32\...\Wildlife Park 3_is1) (Version:  - bitComposer Games)
Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Zero Assumption Digital Image Recovery 1.2 (HKLM-x32\...\Zero Assumption Digital Image Recovery_is1) (Version:  - Zero Assumption Recovery Software)

==================== Restore Points  =========================

16-05-2014 11:46:44 DirectX wurde installiert
16-05-2014 11:48:27 DirectX wurde installiert
16-05-2014 11:49:16 DirectX wurde installiert
16-05-2014 11:54:46 Windows Modules Installer
16-05-2014 11:57:23 DirectX wurde installiert
16-05-2014 12:06:26 DirectX wurde installiert
16-05-2014 14:22:42 DirectX wurde installiert
17-05-2014 09:14:49 DirectX wurde installiert
17-05-2014 13:33:52 Installed Java 7 Update 55
17-05-2014 13:39:31 DirectX wurde installiert
20-05-2014 21:12:13 Windows Update
21-05-2014 14:32:53 DirectX wurde installiert
22-05-2014 11:06:11 Konfiguriert Mobistel Cynus T2 Drivers(x64)
23-05-2014 19:35:17 Driver Booster : AMD Radeon HD 7700 Series
23-05-2014 20:20:58 Malwarebytes Anti-Rootkit Restore Point

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {01244A81-D6A7-4ACC-B0D1-65351570B19C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {53EDE55F-1DE8-4169-B0D3-CE9C22BB1340} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1497994543-823861307-399158431-1000
Task: {741F93A8-D1BC-4607-9236-706A5EC29C77} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-10] (Google Inc.)
Task: {7EB2D2ED-B743-4C6D-885C-EBABABE0D09D} - System32\Tasks\Driver Booster SkipUAC (Salih) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-05-09] (IObit)
Task: {9AB09729-BB71-4050-ABD5-BDB79C781F74} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-10] (Google Inc.)
Task: {B1C40FB3-9F51-4C50-BE9B-88F9D39ACCC7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {B87CD9ED-4588-49A3-B1C8-988E80AE464B} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-03-07] (IObit)
Task: {EF6B9F1A-3A26-4E61-BA6A-B8DBEEA3AA61} - \Driver Booster Update No Task File <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-10 17:29 - 2013-08-20 10:57 - 00045504 _____ () C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng
2013-01-18 12:06 - 2013-01-18 12:06 - 00208880 _____ () C:\Program Files (x86)\Kabel Deutschland\daas2.dll
2013-12-10 17:36 - 2013-12-10 17:36 - 00030888 _____ () C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2013-12-10 17:29 - 2013-12-12 18:47 - 00212008 _____ () C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Spam Control\fsas.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\chrome_elf.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\libglesv2.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\libegl.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\pdf.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll
2014-05-17 16:16 - 2014-05-08 01:29 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amigabit Powerbooster Tray => "C:\Program Files (x86)\Amigabit Powerbooster\PowerboosterTray.exe" -startup
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: F-Secure Hoster (44553) => "C:\Program Files (x86)\Kabel Deutschland\fshoster32.exe" -app -hosterid:1
MSCONFIG\startupreg: F-Secure Manager => "C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Common\FSM32.EXE" /splash
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
MSCONFIG\startupreg: SearchSettings => "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
MSCONFIG\startupreg: Slick Savings => "C:\Users\Salih\AppData\Roaming\Slick Savings\CouponsHelper.exe"

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/24/2014 07:39:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (05/24/2014 07:39:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 45%
Total physical RAM: 4093.98 MB
Available physical RAM: 2220.52 MB
Total Pagefile: 8186.15 MB
Available Pagefile: 6030.59 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:223.12 GB) (Free:140.96 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: AAF07BE7)
Partition 1: (Active) - (Size=10 GB) - (Type=27)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---

So Jetzt aber sorry hab übersprungen schritt 4

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-05-2014 1
Ran by Salih (administrator) on SALIH-PC on 24-05-2014 19:44:55
Running from C:\Users\Salih\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\fshoster32.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\CCF_Reputation\fsorsp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(F-Secure Corporation) C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Common\FSHDLL64.EXE
(Dell) C:\Users\Salih\AppData\Local\Apps\2.0\C1ZA9A2E.ZXZ\ADHCWG0B.M2N\dell..tion_0f612f649c4a10af_0005.0007_59de4fd2458fcaec\DellSystemDetect.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\Run: [Personal ID] => C:\coolspot AG\Personal ID\pid.exe [1132984 2014-05-17] (coolspot AG, Düsseldorf)
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\Run: [DellSystemDetect] => C:\Users\Salih\AppData\Local\Apps\2.0\C1ZA9A2E.ZXZ\ADHCWG0B.M2N\dell..tion_0f612f649c4a10af_0005.0007_59de4fd2458fcaec\DellSystemDetect.exe [254976 2014-05-22] (Dell)
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\MountPoints2: {110d7a04-61ea-11e3-868b-806e6f6e6963} - D:\CD_Start.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=402027&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE4E9D08EB6F5CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - {B3EF0B22-C356-4898-925A-886F5ACF06DA} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\Users\Salih\AppData\Roaming\Mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Users\Salih\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)

Chrome: 
=======
CHR HomePage: hxxp://de.search.yahoo.com/?type=402027&fr=spigot-yhp-ch
CHR Extension: (Google Docs) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-10]
CHR Extension: (Google Drive) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-10]
CHR Extension: (YouTube) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-10]
CHR Extension: (Google-Suche) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-10]
CHR Extension: (Securita Scout) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfkilfadjoneaheacgmkahfgcjchkpad [2014-05-03]
CHR Extension: (Google Wallet) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-10]
CHR Extension: (Google Mail) - C:\Users\Salih\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-10]

==================== Services (Whitelisted) =================

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-05-01] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-05-01] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-05-01] (BlueStack Systems, Inc.)
R2 fshoster; C:\Program Files (x86)\Kabel Deutschland\fshoster32.exe [188400 2013-01-18] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Common\FSMA32.EXE [207808 2013-08-20] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\Kabel Deutschland\apps\CCF_Reputation\fsorsp.exe [60352 2013-12-10] (F-Secure Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-05-01] (BlueStack Systems)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [203304 2014-04-24] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\HIPS\drivers\fshs.sys [69928 2014-05-21] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-12-10] ()
R0 fsbts; C:\Windows\SysWOW64\Drivers\fsbts.sys [41024 2013-12-10] ()
R3 fsni; C:\Program Files (x86)\Kabel Deutschland\apps\CCF_Scanning\fsni64.sys [80832 2013-04-25] (F-Secure Corporation)
R1 fsvista; C:\Program Files (x86)\Kabel Deutschland\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-08-20] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-24 19:44 - 2014-05-24 19:44 - 00000000 ____D () C:\Users\Salih\Downloads\FRST-OlderVersion
2014-05-24 19:10 - 2014-05-24 19:10 - 00000625 _____ () C:\Users\Salih\Desktop\JRT.txt
2014-05-24 19:02 - 2014-05-24 19:02 - 01016261 _____ (Thisisu) C:\Users\Salih\Downloads\JRT.exe
2014-05-24 19:02 - 2014-05-24 19:02 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 18:26 - 2014-05-24 18:26 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-24 18:26 - 2014-05-24 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-24 18:26 - 2014-05-24 18:26 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-24 18:26 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-24 18:26 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-24 18:25 - 2014-05-24 18:25 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Salih\Downloads\mbam-setup-2.0.2.1012.exe
2014-05-24 18:12 - 2014-05-24 18:15 - 00000000 ____D () C:\AdwCleaner
2014-05-24 18:11 - 2014-05-24 18:11 - 01326389 _____ () C:\Users\Salih\Downloads\adwcleaner_3.210.exe
2014-05-24 18:07 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-23 23:40 - 2014-05-23 23:40 - 00094215 _____ () C:\Users\Salih\Desktop\FRST.txt
2014-05-23 23:39 - 2014-05-23 23:39 - 00025536 _____ () C:\Users\Salih\Desktop\Addition.txt
2014-05-23 23:03 - 2014-05-23 23:03 - 00025536 _____ () C:\Users\Salih\Downloads\Addition.txt
2014-05-23 23:02 - 2014-05-24 19:45 - 00009545 _____ () C:\Users\Salih\Downloads\FRST.txt
2014-05-23 23:02 - 2014-05-24 19:44 - 00000000 ____D () C:\FRST
2014-05-23 23:01 - 2014-05-24 19:44 - 02066432 _____ (Farbar) C:\Users\Salih\Downloads\FRST64.exe
2014-05-23 21:58 - 2014-05-24 18:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-23 21:58 - 2014-05-24 18:26 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-23 21:57 - 2014-05-24 18:32 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-23 21:57 - 2014-05-23 22:45 - 00000000 ____D () C:\Users\Salih\Desktop\mbar
2014-05-23 21:56 - 2014-05-23 21:57 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Salih\Downloads\mbar-1.07.0.1009.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 28685824 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 24107520 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 08866928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-05-23 21:37 - 2014-05-23 21:37 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-05-23 21:37 - 2014-05-23 21:37 - 00848896 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00806912 _____ (AMD) C:\Windows\system32\coinst_14.100.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00723841 _____ () C:\Windows\system32\atiicdxx.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 00580816 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-05-23 21:37 - 2014-05-23 21:37 - 00580816 _____ () C:\Windows\system32\atiapfxx.blb
2014-05-23 21:37 - 2014-05-23 21:37 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 00275124 _____ () C:\Windows\system32\ativvaxy_vi.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00274656 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 00273712 _____ () C:\Windows\system32\ativvaxy_vi_nd.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00234804 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00233008 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00138832 _____ () C:\Windows\system32\samu_krnl_isv_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00138832 _____ () C:\Windows\system32\samu_krnl_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00134192 _____ () C:\Windows\system32\ativce03.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00127872 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00117560 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00095744 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00082128 _____ () C:\Windows\system32\ativce02.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00042544 _____ () C:\Windows\system32\kapp_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00035408 _____ () C:\Windows\system32\kapp_si.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-05-23 21:36 - 2014-05-23 21:36 - 00110080 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2014-05-23 21:36 - 2014-05-23 21:36 - 00094720 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2014-05-22 13:47 - 2014-05-22 13:47 - 00374463 _____ () C:\Users\Salih\Downloads\DELL_U2410_MONITOR_A00_00_DRVR_XVHXT.exe
2014-05-22 13:47 - 2014-05-22 13:47 - 00000000 ____D () C:\Dell
2014-05-22 13:40 - 2014-05-22 13:40 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\PCDr
2014-05-22 13:39 - 2014-05-22 13:39 - 00417872 _____ () C:\Users\Salih\Downloads\DellSystemDetect.exe
2014-05-22 13:39 - 2014-05-22 13:39 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2014-05-22 13:24 - 2014-05-22 13:24 - 00643147 _____ () C:\Users\Salih\Downloads\setup_ir12.exe
2014-05-22 13:24 - 2014-05-22 13:24 - 00001100 _____ () C:\Users\Salih\Desktop\Zero Assumption Digital Image Recovery.lnk
2014-05-22 13:24 - 2014-05-22 13:24 - 00001100 _____ () C:\Users\Gast\Desktop\Zero Assumption Digital Image Recovery.lnk
2014-05-22 13:24 - 2014-05-22 13:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zero Assumption Digital Image Recovery
2014-05-22 13:24 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files (x86)\Zero Assumption Digital Image Recovery
2014-05-21 22:14 - 2014-05-21 22:31 - 00000000 ____D () C:\Users\Salih\Documents\FIFA World
2014-05-21 16:37 - 2014-05-21 16:37 - 00001192 _____ () C:\Users\Public\Desktop\EA Sports FIFA World.lnk
2014-05-21 16:37 - 2014-05-21 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Sports FIFA World
2014-05-21 16:35 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-05-21 16:35 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-05-21 16:34 - 2014-05-21 16:35 - 00017533 _____ () C:\Windows\DirectX.log
2014-05-21 16:26 - 2014-05-21 16:26 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-21 16:24 - 2014-05-21 22:13 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Origin
2014-05-21 16:24 - 2014-05-21 16:26 - 00000000 ____D () C:\Users\Salih\AppData\Local\Origin
2014-05-21 16:23 - 2014-05-21 22:43 - 00000000 ____D () C:\ProgramData\Origin
2014-05-21 16:23 - 2014-05-21 22:14 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-21 16:23 - 2014-05-21 16:23 - 00000986 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-21 16:23 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-21 16:23 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-21 16:22 - 2014-05-21 16:23 - 23516512 _____ (Electronic Arts, Inc.) C:\Users\Salih\Downloads\EASportsFIFAWorld.exe
2014-05-19 16:16 - 2014-05-19 16:32 - 00000000 ____D () C:\Users\Salih\AppData\Local\Microsoft Games
2014-05-19 16:16 - 2014-05-19 16:16 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-05-19 13:16 - 2014-05-19 13:17 - 00000000 ____D () C:\ProgramData\Hair Concept
2014-05-19 13:16 - 2014-05-19 13:16 - 00001042 _____ () C:\Users\Public\Desktop\Hair Concept.lnk
2014-05-19 13:16 - 2014-05-19 13:16 - 00001006 _____ () C:\Users\Public\Desktop\Hair Concept Friseur Edition.lnk
2014-05-19 13:16 - 2014-05-19 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hair Concept
2014-05-19 13:13 - 2014-05-19 13:17 - 00000000 ____D () C:\Program Files (x86)\Hair Concept
2014-05-17 16:08 - 2014-05-17 16:08 - 00000000 ____D () C:\Users\Salih\Documents\bitComposer Games
2014-05-17 16:08 - 2014-05-17 16:08 - 00000000 ____D () C:\ProgramData\Wildlife Park 3
2014-05-17 16:04 - 2014-05-17 16:04 - 00001233 _____ () C:\Users\Salih\Desktop\Starte Wildlife Park 3.lnk
2014-05-17 16:04 - 2014-05-17 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bitComposer Games
2014-05-17 15:49 - 2014-05-17 15:49 - 00000000 ____D () C:\Program Files (x86)\bitComposer Games
2014-05-17 15:45 - 2014-05-17 15:47 - 327126016 _____ (Microsoft Corporation) C:\Users\Salih\Downloads\sc_speedpack.exe
2014-05-17 15:36 - 2014-05-17 15:36 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\.minecraft
2014-05-17 15:35 - 2014-05-17 15:35 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-17 15:34 - 2014-05-17 15:34 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\ProgramData\Sun
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-17 15:33 - 2014-05-17 15:33 - 00921512 _____ (Oracle Corporation) C:\Users\Salih\Downloads\chromeinstall-7u55.exe
2014-05-17 15:31 - 2014-05-17 15:31 - 04186549 _____ (Mojang ) C:\Users\Salih\Downloads\minecraft_pcgdemo.exe
2014-05-17 15:05 - 2014-05-24 18:16 - 00002964 _____ () C:\Windows\PFRO.log
2014-05-17 12:12 - 2014-05-17 12:12 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Der Planer 4
2014-05-17 12:11 - 2014-05-17 12:11 - 00001035 _____ () C:\Users\Public\Desktop\Der Planer 4.lnk
2014-05-17 12:11 - 2014-05-17 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 4
2014-05-17 11:59 - 2014-05-17 12:11 - 00000000 ____D () C:\Program Files (x86)\Der Planer 4
2014-05-17 11:58 - 2014-02-15 19:42 - 00000426 _____ () C:\AVScanner.ini
2014-05-17 11:53 - 2014-05-17 11:53 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Personal ID
2014-05-17 11:49 - 2014-05-17 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal ID
2014-05-17 11:49 - 2014-05-17 11:49 - 00000000 ____D () C:\coolspot AG
2014-05-17 11:48 - 2014-05-17 11:48 - 00836416 _____ () C:\Users\Salih\Downloads\pidsetup.exe
2014-05-17 11:46 - 2014-05-17 11:46 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Utherverse
2014-05-16 16:52 - 2014-05-16 16:52 - 00002470 _____ () C:\Users\Salih\Desktop\Secret City.lnk
2014-05-16 16:52 - 2014-05-16 16:52 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Secret City
2014-05-16 16:51 - 2014-05-16 16:52 - 16797312 _____ () C:\Users\Salih\Downloads\VWWSetup (1).exe
2014-05-16 13:55 - 2014-05-16 13:56 - 00021544 _____ () C:\Windows\iis7.log
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\inetpub
2014-05-16 13:48 - 2014-05-16 13:49 - 04523576 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Salih\Downloads\GhostReconPhantoms_Setup(EU) (1).exe
2014-05-16 13:46 - 2014-05-16 13:46 - 04523576 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Salih\Downloads\GhostReconPhantoms_Setup(EU).exe
2014-05-16 13:19 - 2014-05-16 13:19 - 00001917 _____ () C:\Users\Public\Desktop\Play Online at ubi.com!.lnk
2014-05-16 13:19 - 2014-05-16 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ubi.com
2014-05-16 13:19 - 2001-04-12 18:00 - 00182272 _____ () C:\Windows\patchw32.dll
2014-05-16 13:18 - 2014-05-16 13:18 - 00000000 ____D () C:\Program Files (x86)\ubi.com
2014-05-15 14:19 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 14:19 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 14:19 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 14:19 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 14:19 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 14:19 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 13:38 - 2014-05-15 13:38 - 00001814 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-05-15 13:38 - 2014-05-15 13:38 - 00001786 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-05-15 13:37 - 2014-05-15 13:44 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-05-15 13:37 - 2014-05-15 13:37 - 00000000 ____D () C:\Users\Salih\AppData\Local\Bluestacks
2014-05-15 13:36 - 2014-05-15 13:36 - 00629584 _____ (Chip Digital GmbH) C:\Users\Salih\Downloads\BlueStacks App Player - CHIP-Downloader.exe
2014-05-15 13:30 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 13:30 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 13:30 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 13:30 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 13:29 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 13:29 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 13:29 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 13:29 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 13:29 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 13:29 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 13:29 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 13:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 13:29 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 13:29 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 13:29 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 13:29 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 13:29 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 13:29 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 13:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 13:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 13:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 13:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 13:29 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-12 18:49 - 2014-05-24 19:38 - 00007159 _____ () C:\Windows\setupact.log
2014-05-12 18:49 - 2014-05-12 18:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-10 12:13 - 2014-05-10 12:13 - 00000000 ____D () C:\Windows\pss
2014-05-10 11:36 - 2014-05-10 12:24 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-05-10 11:36 - 2014-05-10 11:36 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-10 11:36 - 2014-05-10 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-10 11:36 - 2014-05-10 11:36 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-10 11:35 - 2014-05-10 11:34 - 04745984 _____ (Piriform Ltd) C:\Users\Salih\Downloads\ccsetup413.exe
2014-05-10 11:33 - 2014-05-10 11:33 - 00686664 _____ ( ) C:\Users\Salih\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup413.exe
2014-05-06 15:09 - 2014-05-06 15:09 - 00041472 _____ () C:\Users\Salih\Downloads\launcher64.dll
2014-05-06 15:09 - 2014-05-06 15:09 - 00021712 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2014-05-06 15:08 - 2014-05-06 15:08 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Salih\Downloads\biosagentplus_796.exe
2014-05-06 15:02 - 2014-05-06 15:02 - 00001982 _____ () C:\Users\Salih\Desktop\Driver Cleaner Pro.lnk
2014-05-06 15:02 - 2014-05-06 15:02 - 00001982 _____ () C:\Users\Gast\Desktop\Driver Cleaner Pro.lnk
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\Program Files (x86)\Driver Cleaner Pro
2014-05-06 15:01 - 2014-05-06 15:01 - 02817354 _____ () C:\Users\Salih\Downloads\DCProSetup_15.zip
2014-05-06 14:57 - 2014-05-06 14:57 - 10314904 _____ (FinalWire Ltd. ) C:\Users\Salih\Downloads\everest_19088.exe
2014-05-06 14:57 - 2014-05-06 14:57 - 00001241 _____ () C:\Users\Salih\Desktop\EVEREST Ultimate Edition.lnk
2014-05-06 14:57 - 2014-05-06 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
2014-05-06 14:57 - 2014-05-06 14:57 - 00000000 ____D () C:\Program Files (x86)\Lavalys
2014-05-06 02:05 - 2014-05-06 02:05 - 16797312 _____ () C:\Users\Salih\Downloads\VWWSetup.exe
2014-05-06 02:05 - 2014-05-06 02:05 - 00000000 ____D () C:\Program Files (x86)\Utherverse Digital Inc
2014-05-06 02:05 - 2014-05-06 02:05 - 00000000 ____D () C:\Program Files (x86)\SecretCity 3DChat
2014-05-06 01:43 - 2014-05-06 01:43 - 00000000 ____D () C:\Program Files\AMD
2014-05-06 01:42 - 2014-05-06 01:42 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.251.dll
2014-05-06 01:42 - 2014-05-06 01:42 - 00047887 _____ () C:\Windows\atiogl.xml
2014-05-06 00:29 - 2014-05-06 00:29 - 01643096 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Salih\Downloads\GPU-Z.0.7.8.exe
2014-05-06 00:19 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\ATI
2014-05-06 00:19 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Salih\AppData\Local\ATI
2014-05-06 00:16 - 2014-05-06 00:16 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-05-06 00:14 - 2014-05-06 14:40 - 00000000 ____D () C:\ProgramData\AMD
2014-05-06 00:14 - 2014-05-06 00:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-05-06 00:12 - 2014-05-06 00:12 - 00000000 ____D () C:\Program Files\ATI
2014-05-05 23:39 - 2014-05-10 11:58 - 00000000 ___DC () C:\Users\Salih\AppData\Local\MigWiz
2014-05-05 23:02 - 2014-05-10 12:24 - 00003034 _____ () C:\Windows\System32\Tasks\{6FD8087B-3B56-43AA-B292-281027ADADBE}
2014-05-05 22:56 - 2014-05-05 22:56 - 00000000 ____D () C:\AMD
2014-05-05 22:35 - 2014-05-05 22:35 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-03 15:42 - 2014-05-03 15:45 - 228978112 _____ (NVIDIA Corporation) C:\Users\Salih\Downloads\307.83-desktop-win7-winvista-64bit-international-whql.exe
2014-05-03 15:34 - 2014-05-03 15:34 - 00000000 ____D () C:\Crash
2014-05-03 14:03 - 2014-05-03 14:03 - 00000000 ____D () C:\Users\Salih\AppData\Local\SCE
2014-05-03 14:02 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-05-03 14:02 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-05-03 14:02 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-05-03 14:02 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-05-03 14:02 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-05-03 14:02 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-05-03 14:02 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-05-03 14:02 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-05-03 14:02 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-05-03 14:02 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-05-03 14:02 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-05-03 14:02 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-05-03 14:02 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-05-03 14:02 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-05-03 14:02 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-05-03 14:02 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-05-03 14:02 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-05-03 14:02 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-05-03 14:02 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-05-03 14:02 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-05-03 14:02 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-05-03 14:02 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-05-03 14:02 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-05-03 14:02 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-05-03 14:02 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-05-03 14:02 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-05-03 14:02 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-05-03 14:02 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-05-03 14:02 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-05-03 14:02 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-05-03 14:02 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-05-03 14:02 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-05-03 14:02 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-05-03 14:02 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-05-03 14:02 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-05-03 14:02 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-05-03 14:02 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-05-03 14:02 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-05-03 14:02 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-05-03 14:02 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-05-03 14:02 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-05-03 14:02 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-05-03 14:02 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-05-03 14:02 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-05-03 14:02 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-05-03 14:02 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-05-03 14:02 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-05-03 14:02 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-05-03 14:02 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-05-03 14:02 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-05-03 14:02 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-05-03 14:02 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-05-03 14:02 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-05-03 14:02 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-05-03 14:02 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-05-03 14:02 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-05-03 14:02 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-05-03 14:02 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-05-03 14:02 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-05-03 14:02 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-05-03 14:01 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-05-03 14:01 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-05-03 14:01 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-05-03 14:01 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-05-03 14:01 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-05-03 14:01 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-05-03 14:01 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-05-03 14:01 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-05-03 14:01 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-05-03 14:01 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-05-03 14:01 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-05-03 14:01 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-05-03 14:01 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-05-03 14:01 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-05-03 14:01 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-05-03 14:01 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-05-03 14:01 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-05-03 14:01 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-05-03 14:01 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-05-03 14:01 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-05-03 14:01 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-05-03 14:01 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-05-03 14:01 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-05-03 14:01 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-05-03 14:01 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-05-03 14:01 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-05-03 14:01 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-05-03 14:01 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-05-03 14:01 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-05-03 14:01 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-05-03 14:01 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-05-03 14:01 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-05-03 14:01 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-05-03 14:01 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-05-03 14:01 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-05-03 14:01 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-05-03 14:01 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-05-03 14:01 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-05-03 14:01 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-05-03 14:01 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-05-03 14:01 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-05-03 14:01 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-05-03 14:01 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-05-03 14:01 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-05-03 14:01 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-05-03 14:01 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-05-03 14:01 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-05-03 14:01 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-05-03 14:01 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-05-03 14:01 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-05-03 14:01 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-05-03 14:01 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-05-03 14:00 - 2014-05-16 16:52 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-05-03 13:59 - 2014-05-16 16:52 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-05-03 13:59 - 2014-05-03 13:59 - 23968184 _____ () C:\Users\Salih\Downloads\PS2_PSG_setup.exe
2014-05-03 13:59 - 2014-05-03 13:59 - 00002519 _____ () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2 PSG.lnk
2014-05-03 13:59 - 2014-05-03 13:59 - 00002489 _____ () C:\Users\Salih\Desktop\PlanetSide 2 PSG.lnk
2014-05-03 13:59 - 2014-05-03 13:59 - 00000000 ____D () C:\Users\Public\Sony Online Entertainment
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\ChromeExtensions
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\AppData\Local\Tempc2dfb07db597e7f0d6fe11c1d39151a1
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\AppData\Local\Temp1329c86db49aa64ba44c7ad1de2bf329
2014-05-03 13:27 - 2014-05-03 13:27 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Security System 2
2014-05-03 13:26 - 2014-05-03 13:26 - 01062288 _____ () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall (1).exe
2014-05-03 13:25 - 2014-05-03 13:25 - 01062288 _____ () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall.exe
2014-05-03 12:52 - 2014-05-03 12:52 - 00000000 ____D () C:\Users\Public\Documents\sun
2014-05-03 12:50 - 2014-05-03 12:51 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-05-03 12:50 - 2014-05-03 12:50 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.0.lnk
2014-05-03 12:44 - 2014-05-03 12:44 - 00000000 ____D () C:\Users\Salih\Desktop\OpenOffice 4.1.0 (de) Installation Files
2014-05-03 12:43 - 2014-05-03 12:44 - 164962843 _____ () C:\Users\Salih\Downloads\Apache_OpenOffice_4.1.0_Win_x86_install_de.exe
2014-05-03 12:37 - 2014-05-03 12:37 - 00000000 __SHD () C:\Users\Salih\AppData\Local\EmieUserList
2014-05-03 12:37 - 2014-05-03 12:37 - 00000000 __SHD () C:\Users\Salih\AppData\Local\EmieSiteList
2014-04-30 01:35 - 2014-05-16 12:35 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-25 13:50 - 2014-05-23 21:39 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896}
2014-04-24 14:44 - 2014-04-24 14:44 - 00001998 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\ProgramData\Visan
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations

==================== One Month Modified Files and Folders =======

2014-05-24 19:45 - 2014-05-23 23:02 - 00009545 _____ () C:\Users\Salih\Downloads\FRST.txt
2014-05-24 19:44 - 2014-05-24 19:44 - 00000000 ____D () C:\Users\Salih\Downloads\FRST-OlderVersion
2014-05-24 19:44 - 2014-05-23 23:02 - 00000000 ____D () C:\FRST
2014-05-24 19:44 - 2014-05-23 23:01 - 02066432 _____ (Farbar) C:\Users\Salih\Downloads\FRST64.exe
2014-05-24 19:41 - 2013-12-11 00:29 - 01201760 _____ () C:\Windows\WindowsUpdate.log
2014-05-24 19:38 - 2014-05-12 18:49 - 00007159 _____ () C:\Windows\setupact.log
2014-05-24 19:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-24 19:10 - 2014-05-24 19:10 - 00000625 _____ () C:\Users\Salih\Desktop\JRT.txt
2014-05-24 19:02 - 2014-05-24 19:02 - 01016261 _____ (Thisisu) C:\Users\Salih\Downloads\JRT.exe
2014-05-24 19:02 - 2014-05-24 19:02 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 18:58 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-24 18:58 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-24 18:57 - 2014-05-23 21:58 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 18:32 - 2014-05-23 21:57 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-24 18:26 - 2014-05-24 18:26 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-24 18:26 - 2014-05-24 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-24 18:26 - 2014-05-24 18:26 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-24 18:26 - 2014-05-23 21:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 18:25 - 2014-05-24 18:25 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Salih\Downloads\mbam-setup-2.0.2.1012.exe
2014-05-24 18:16 - 2014-05-17 15:05 - 00002964 _____ () C:\Windows\PFRO.log
2014-05-24 18:15 - 2014-05-24 18:12 - 00000000 ____D () C:\AdwCleaner
2014-05-24 18:11 - 2014-05-24 18:11 - 01326389 _____ () C:\Users\Salih\Downloads\adwcleaner_3.210.exe
2014-05-23 23:49 - 2013-12-10 18:09 - 00000000 ____D () C:\Users\Salih\AppData\Local\Deployment
2014-05-23 23:40 - 2014-05-23 23:40 - 00094215 _____ () C:\Users\Salih\Desktop\FRST.txt
2014-05-23 23:39 - 2014-05-23 23:39 - 00025536 _____ () C:\Users\Salih\Desktop\Addition.txt
2014-05-23 23:03 - 2014-05-23 23:03 - 00025536 _____ () C:\Users\Salih\Downloads\Addition.txt
2014-05-23 22:45 - 2014-05-23 21:57 - 00000000 ____D () C:\Users\Salih\Desktop\mbar
2014-05-23 22:22 - 2009-07-14 06:45 - 00000000 ____D () C:\Windows\Setup
2014-05-23 21:57 - 2014-05-23 21:56 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Salih\Downloads\mbar-1.07.0.1009.exe
2014-05-23 21:39 - 2014-04-25 13:50 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896}
2014-05-23 21:37 - 2014-05-23 21:37 - 28685824 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 27907584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 24107520 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 23409152 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 15376384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 08866928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 08010968 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 07520200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 05442048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 04358656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-05-23 21:37 - 2014-05-23 21:37 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-05-23 21:37 - 2014-05-23 21:37 - 00848896 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00806912 _____ (AMD) C:\Windows\system32\coinst_14.100.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00723841 _____ () C:\Windows\system32\atiicdxx.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00638976 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 00580816 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-05-23 21:37 - 2014-05-23 21:37 - 00580816 _____ () C:\Windows\system32\atiapfxx.blb
2014-05-23 21:37 - 2014-05-23 21:37 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00368128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 00275124 _____ () C:\Windows\system32\ativvaxy_vi.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00274656 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-05-23 21:37 - 2014-05-23 21:37 - 00273712 _____ () C:\Windows\system32\ativvaxy_vi_nd.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00234804 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00233008 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-05-23 21:37 - 2014-05-23 21:37 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00138832 _____ () C:\Windows\system32\samu_krnl_isv_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00138832 _____ () C:\Windows\system32\samu_krnl_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00134192 _____ () C:\Windows\system32\ativce03.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00127872 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00117560 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00095744 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00091136 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00082128 _____ () C:\Windows\system32\ativce02.dat
2014-05-23 21:37 - 2014-05-23 21:37 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00042544 _____ () C:\Windows\system32\kapp_ci.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-05-23 21:37 - 2014-05-23 21:37 - 00035408 _____ () C:\Windows\system32\kapp_si.sbin
2014-05-23 21:37 - 2014-05-23 21:37 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-05-23 21:37 - 2013-03-29 04:37 - 01343272 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2014-05-23 21:37 - 2013-03-29 04:37 - 01117184 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2014-05-23 21:37 - 2013-03-29 04:37 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2014-05-23 21:37 - 2013-03-29 04:37 - 00099520 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2014-05-23 21:37 - 2013-03-29 04:36 - 10335208 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2014-05-23 21:37 - 2013-03-29 04:36 - 06799688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2014-05-23 21:37 - 2013-03-29 04:36 - 06796592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2014-05-23 21:37 - 2013-03-29 03:35 - 00586240 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-05-23 21:37 - 2013-03-29 03:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-05-23 21:37 - 2013-03-29 03:10 - 01177600 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-05-23 21:36 - 2014-05-23 21:36 - 00110080 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2014-05-23 21:36 - 2014-05-23 21:36 - 00094720 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2014-05-23 21:33 - 2014-03-30 13:22 - 00002854 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Salih)
2014-05-23 21:33 - 2014-03-10 17:41 - 00003214 _____ () C:\Windows\System32\Tasks\Driver Booster Scan
2014-05-23 21:33 - 2014-03-10 17:41 - 00001177 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-05-23 21:33 - 2014-03-10 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-05-22 13:47 - 2014-05-22 13:47 - 00374463 _____ () C:\Users\Salih\Downloads\DELL_U2410_MONITOR_A00_00_DRVR_XVHXT.exe
2014-05-22 13:47 - 2014-05-22 13:47 - 00000000 ____D () C:\Dell
2014-05-22 13:40 - 2014-05-22 13:40 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\PCDr
2014-05-22 13:39 - 2014-05-22 13:39 - 00417872 _____ () C:\Users\Salih\Downloads\DellSystemDetect.exe
2014-05-22 13:39 - 2014-05-22 13:39 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2014-05-22 13:24 - 2014-05-22 13:24 - 00643147 _____ () C:\Users\Salih\Downloads\setup_ir12.exe
2014-05-22 13:24 - 2014-05-22 13:24 - 00001100 _____ () C:\Users\Salih\Desktop\Zero Assumption Digital Image Recovery.lnk
2014-05-22 13:24 - 2014-05-22 13:24 - 00001100 _____ () C:\Users\Gast\Desktop\Zero Assumption Digital Image Recovery.lnk
2014-05-22 13:24 - 2014-05-22 13:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zero Assumption Digital Image Recovery
2014-05-22 13:24 - 2014-05-22 13:24 - 00000000 ____D () C:\Program Files (x86)\Zero Assumption Digital Image Recovery
2014-05-22 12:35 - 2012-10-01 08:29 - 00787908 _____ () C:\Windows\system32\perfh007.dat
2014-05-22 12:35 - 2012-10-01 08:29 - 00182010 _____ () C:\Windows\system32\perfc007.dat
2014-05-22 12:35 - 2009-07-14 07:13 - 01845296 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-21 22:43 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Origin
2014-05-21 22:31 - 2014-05-21 22:14 - 00000000 ____D () C:\Users\Salih\Documents\FIFA World
2014-05-21 22:14 - 2014-05-21 16:23 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-21 22:13 - 2014-05-21 16:24 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Origin
2014-05-21 16:37 - 2014-05-21 16:37 - 00001192 _____ () C:\Users\Public\Desktop\EA Sports FIFA World.lnk
2014-05-21 16:37 - 2014-05-21 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Sports FIFA World
2014-05-21 16:37 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-21 16:35 - 2014-05-21 16:34 - 00017533 _____ () C:\Windows\DirectX.log
2014-05-21 16:26 - 2014-05-21 16:26 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-21 16:26 - 2014-05-21 16:24 - 00000000 ____D () C:\Users\Salih\AppData\Local\Origin
2014-05-21 16:23 - 2014-05-21 16:23 - 00000986 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-21 16:23 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-05-21 16:23 - 2014-05-21 16:23 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-21 16:23 - 2014-05-21 16:22 - 23516512 _____ (Electronic Arts, Inc.) C:\Users\Salih\Downloads\EASportsFIFAWorld.exe
2014-05-19 16:32 - 2014-05-19 16:16 - 00000000 ____D () C:\Users\Salih\AppData\Local\Microsoft Games
2014-05-19 16:16 - 2014-05-19 16:16 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-05-19 13:36 - 2013-12-21 15:42 - 00000000 ____D () C:\Users\Salih\Desktop\Neuer Ordner
2014-05-19 13:17 - 2014-05-19 13:16 - 00000000 ____D () C:\ProgramData\Hair Concept
2014-05-19 13:17 - 2014-05-19 13:13 - 00000000 ____D () C:\Program Files (x86)\Hair Concept
2014-05-19 13:16 - 2014-05-19 13:16 - 00001042 _____ () C:\Users\Public\Desktop\Hair Concept.lnk
2014-05-19 13:16 - 2014-05-19 13:16 - 00001006 _____ () C:\Users\Public\Desktop\Hair Concept Friseur Edition.lnk
2014-05-19 13:16 - 2014-05-19 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hair Concept
2014-05-18 13:13 - 2013-12-10 23:10 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-18 13:13 - 2013-12-10 23:10 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 16:16 - 2013-12-10 18:10 - 00002182 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-17 16:08 - 2014-05-17 16:08 - 00000000 ____D () C:\Users\Salih\Documents\bitComposer Games
2014-05-17 16:08 - 2014-05-17 16:08 - 00000000 ____D () C:\ProgramData\Wildlife Park 3
2014-05-17 16:04 - 2014-05-17 16:04 - 00001233 _____ () C:\Users\Salih\Desktop\Starte Wildlife Park 3.lnk
2014-05-17 16:04 - 2014-05-17 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bitComposer Games
2014-05-17 15:49 - 2014-05-17 15:49 - 00000000 ____D () C:\Program Files (x86)\bitComposer Games
2014-05-17 15:47 - 2014-05-17 15:45 - 327126016 _____ (Microsoft Corporation) C:\Users\Salih\Downloads\sc_speedpack.exe
2014-05-17 15:36 - 2014-05-17 15:36 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\.minecraft
2014-05-17 15:35 - 2014-05-17 15:35 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-17 15:34 - 2014-05-17 15:34 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-17 15:34 - 2014-05-17 15:34 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\ProgramData\Sun
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-17 15:34 - 2014-05-17 15:34 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-17 15:33 - 2014-05-17 15:33 - 00921512 _____ (Oracle Corporation) C:\Users\Salih\Downloads\chromeinstall-7u55.exe
2014-05-17 15:31 - 2014-05-17 15:31 - 04186549 _____ (Mojang ) C:\Users\Salih\Downloads\minecraft_pcgdemo.exe
2014-05-17 12:12 - 2014-05-17 12:12 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Der Planer 4
2014-05-17 12:11 - 2014-05-17 12:11 - 00001035 _____ () C:\Users\Public\Desktop\Der Planer 4.lnk
2014-05-17 12:11 - 2014-05-17 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 4
2014-05-17 12:11 - 2014-05-17 11:59 - 00000000 ____D () C:\Program Files (x86)\Der Planer 4
2014-05-17 11:53 - 2014-05-17 11:53 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Personal ID
2014-05-17 11:49 - 2014-05-17 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal ID
2014-05-17 11:49 - 2014-05-17 11:49 - 00000000 ____D () C:\coolspot AG
2014-05-17 11:48 - 2014-05-17 11:48 - 00836416 _____ () C:\Users\Salih\Downloads\pidsetup.exe
2014-05-17 11:46 - 2014-05-17 11:46 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Utherverse
2014-05-17 11:33 - 2014-04-22 14:57 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-05-17 11:33 - 2014-02-10 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tractor Racer 2
2014-05-16 16:52 - 2014-05-16 16:52 - 00002470 _____ () C:\Users\Salih\Desktop\Secret City.lnk
2014-05-16 16:52 - 2014-05-16 16:52 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Secret City
2014-05-16 16:52 - 2014-05-16 16:51 - 16797312 _____ () C:\Users\Salih\Downloads\VWWSetup (1).exe
2014-05-16 16:52 - 2014-05-03 14:00 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-05-16 16:52 - 2014-05-03 13:59 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-05-16 13:56 - 2014-05-16 13:55 - 00021544 _____ () C:\Windows\iis7.log
2014-05-16 13:56 - 2013-04-16 02:03 - 01730080 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-16 13:55 - 2014-05-16 13:55 - 00000000 ____D () C:\inetpub
2014-05-16 13:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2014-05-16 13:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-16 13:49 - 2014-05-16 13:48 - 04523576 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Salih\Downloads\GhostReconPhantoms_Setup(EU) (1).exe
2014-05-16 13:46 - 2014-05-16 13:46 - 04523576 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Salih\Downloads\GhostReconPhantoms_Setup(EU).exe
2014-05-16 13:19 - 2014-05-16 13:19 - 00001917 _____ () C:\Users\Public\Desktop\Play Online at ubi.com!.lnk
2014-05-16 13:19 - 2014-05-16 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ubi.com
2014-05-16 13:18 - 2014-05-16 13:18 - 00000000 ____D () C:\Program Files (x86)\ubi.com
2014-05-16 13:18 - 2013-12-12 18:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-16 12:52 - 2013-12-10 15:39 - 00000000 ___RD () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-16 12:52 - 2013-12-10 15:39 - 00000000 ___RD () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 12:35 - 2014-04-30 01:35 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 14:18 - 2013-12-18 18:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 14:16 - 2013-12-18 18:38 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 13:44 - 2014-05-15 13:37 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-05-15 13:38 - 2014-05-15 13:38 - 00001814 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-05-15 13:38 - 2014-05-15 13:38 - 00001786 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-05-15 13:38 - 2014-05-15 13:38 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-05-15 13:38 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-15 13:37 - 2014-05-15 13:37 - 00000000 ____D () C:\Users\Salih\AppData\Local\Bluestacks
2014-05-15 13:36 - 2014-05-15 13:36 - 00629584 _____ (Chip Digital GmbH) C:\Users\Salih\Downloads\BlueStacks App Player - CHIP-Downloader.exe
2014-05-12 18:49 - 2014-05-12 18:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-12 18:49 - 2013-12-10 18:10 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-12 18:49 - 2013-12-10 18:10 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-12 07:26 - 2014-05-24 18:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-05-24 18:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-10 12:24 - 2014-05-10 11:36 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-05-10 12:24 - 2014-05-05 23:02 - 00003034 _____ () C:\Windows\System32\Tasks\{6FD8087B-3B56-43AA-B292-281027ADADBE}
2014-05-10 12:24 - 2013-12-13 19:18 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2014-05-10 12:24 - 2013-12-12 18:51 - 00003086 _____ () C:\Windows\System32\Tasks\{C8B849E0-0022-47D4-932C-5728C6C3CE87}
2014-05-10 12:24 - 2013-12-10 18:10 - 00004116 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 12:24 - 2013-12-10 18:10 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-10 12:13 - 2014-05-10 12:13 - 00000000 ____D () C:\Windows\pss
2014-05-10 12:13 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-10 12:12 - 2013-04-16 02:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-05-10 11:58 - 2014-05-05 23:39 - 00000000 ___DC () C:\Users\Salih\AppData\Local\MigWiz
2014-05-10 11:58 - 2013-04-16 02:54 - 00000000 ____D () C:\Windows\Panther
2014-05-10 11:36 - 2014-05-10 11:36 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-10 11:36 - 2014-05-10 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-10 11:36 - 2014-05-10 11:36 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-10 11:34 - 2014-05-10 11:35 - 04745984 _____ (Piriform Ltd) C:\Users\Salih\Downloads\ccsetup413.exe
2014-05-10 11:33 - 2014-05-10 11:33 - 00686664 _____ ( ) C:\Users\Salih\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup413.exe
2014-05-09 08:14 - 2014-05-15 13:30 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 13:30 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 15:09 - 2014-05-06 15:09 - 00041472 _____ () C:\Users\Salih\Downloads\launcher64.dll
2014-05-06 15:09 - 2014-05-06 15:09 - 00021712 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2014-05-06 15:08 - 2014-05-06 15:08 - 00633360 _____ (Copyright © 2010 eSupport.com. All Rights Reserved.) C:\Users\Salih\Downloads\biosagentplus_796.exe
2014-05-06 15:02 - 2014-05-06 15:02 - 00001982 _____ () C:\Users\Salih\Desktop\Driver Cleaner Pro.lnk
2014-05-06 15:02 - 2014-05-06 15:02 - 00001982 _____ () C:\Users\Gast\Desktop\Driver Cleaner Pro.lnk
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Cleaner Pro
2014-05-06 15:02 - 2014-05-06 15:02 - 00000000 ____D () C:\Program Files (x86)\Driver Cleaner Pro
2014-05-06 15:01 - 2014-05-06 15:01 - 02817354 _____ () C:\Users\Salih\Downloads\DCProSetup_15.zip
2014-05-06 14:57 - 2014-05-06 14:57 - 10314904 _____ (FinalWire Ltd. ) C:\Users\Salih\Downloads\everest_19088.exe
2014-05-06 14:57 - 2014-05-06 14:57 - 00001241 _____ () C:\Users\Salih\Desktop\EVEREST Ultimate Edition.lnk
2014-05-06 14:57 - 2014-05-06 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
2014-05-06 14:57 - 2014-05-06 14:57 - 00000000 ____D () C:\Program Files (x86)\Lavalys
2014-05-06 14:54 - 2014-01-11 13:24 - 00000000 ____D () C:\Program Files (x86)\Amigabit Powerbooster
2014-05-06 14:40 - 2014-05-06 00:14 - 00000000 ____D () C:\ProgramData\AMD
2014-05-06 06:40 - 2014-05-15 14:19 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 14:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 14:19 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 14:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 14:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 14:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-06 02:05 - 2014-05-06 02:05 - 16797312 _____ () C:\Users\Salih\Downloads\VWWSetup.exe
2014-05-06 02:05 - 2014-05-06 02:05 - 00000000 ____D () C:\Program Files (x86)\Utherverse Digital Inc
2014-05-06 02:05 - 2014-05-06 02:05 - 00000000 ____D () C:\Program Files (x86)\SecretCity 3DChat
2014-05-06 01:43 - 2014-05-06 01:43 - 00000000 ____D () C:\Program Files\AMD
2014-05-06 01:42 - 2014-05-06 01:42 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.251.dll
2014-05-06 01:42 - 2014-05-06 01:42 - 00047887 _____ () C:\Windows\atiogl.xml
2014-05-06 00:29 - 2014-05-06 00:29 - 01643096 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Salih\Downloads\GPU-Z.0.7.8.exe
2014-05-06 00:19 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\ATI
2014-05-06 00:19 - 2014-05-06 00:19 - 00000000 ____D () C:\Users\Salih\AppData\Local\ATI
2014-05-06 00:16 - 2014-05-06 00:16 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-05-06 00:14 - 2014-05-06 00:14 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-05-06 00:12 - 2014-05-06 00:12 - 00000000 ____D () C:\Program Files\ATI
2014-05-05 22:56 - 2014-05-05 22:56 - 00000000 ____D () C:\AMD
2014-05-05 22:36 - 2013-12-10 16:47 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-05 22:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-05-05 22:35 - 2014-05-05 22:35 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-03 15:59 - 2013-12-10 17:08 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-03 15:59 - 2013-12-10 17:08 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-03 15:56 - 2009-07-14 06:45 - 00314152 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-03 15:45 - 2014-05-03 15:42 - 228978112 _____ (NVIDIA Corporation) C:\Users\Salih\Downloads\307.83-desktop-win7-winvista-64bit-international-whql.exe
2014-05-03 15:34 - 2014-05-03 15:34 - 00000000 ____D () C:\Crash
2014-05-03 14:03 - 2014-05-03 14:03 - 00000000 ____D () C:\Users\Salih\AppData\Local\SCE
2014-05-03 13:59 - 2014-05-03 13:59 - 23968184 _____ () C:\Users\Salih\Downloads\PS2_PSG_setup.exe
2014-05-03 13:59 - 2014-05-03 13:59 - 00002519 _____ () C:\Users\Salih\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2 PSG.lnk
2014-05-03 13:59 - 2014-05-03 13:59 - 00002489 _____ () C:\Users\Salih\Desktop\PlanetSide 2 PSG.lnk
2014-05-03 13:59 - 2014-05-03 13:59 - 00000000 ____D () C:\Users\Public\Sony Online Entertainment
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\ChromeExtensions
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\AppData\Local\Tempc2dfb07db597e7f0d6fe11c1d39151a1
2014-05-03 13:28 - 2014-05-03 13:28 - 00000000 ____D () C:\Users\Salih\AppData\Local\Temp1329c86db49aa64ba44c7ad1de2bf329
2014-05-03 13:28 - 2013-12-10 15:39 - 00000000 ____D () C:\Users\Salih
2014-05-03 13:27 - 2014-05-03 13:27 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\Security System 2
2014-05-03 13:26 - 2014-05-03 13:26 - 01062288 _____ () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall (1).exe
2014-05-03 13:25 - 2014-05-03 13:25 - 01062288 _____ () C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall.exe
2014-05-03 12:53 - 2013-12-10 15:39 - 00068056 _____ () C:\Users\Salih\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-03 12:52 - 2014-05-03 12:52 - 00000000 ____D () C:\Users\Public\Documents\sun
2014-05-03 12:51 - 2014-05-03 12:50 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-05-03 12:51 - 2013-12-10 18:29 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-05-03 12:50 - 2014-05-03 12:50 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.0.lnk
2014-05-03 12:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-03 12:44 - 2014-05-03 12:44 - 00000000 ____D () C:\Users\Salih\Desktop\OpenOffice 4.1.0 (de) Installation Files
2014-05-03 12:44 - 2014-05-03 12:43 - 164962843 _____ () C:\Users\Salih\Downloads\Apache_OpenOffice_4.1.0_Win_x86_install_de.exe
2014-05-03 12:37 - 2014-05-03 12:37 - 00000000 __SHD () C:\Users\Salih\AppData\Local\EmieUserList
2014-05-03 12:37 - 2014-05-03 12:37 - 00000000 __SHD () C:\Users\Salih\AppData\Local\EmieSiteList
2014-05-01 14:45 - 2014-03-11 13:22 - 00000000 ____D () C:\Users\Salih\AppData\Roaming\HpUpdate
2014-04-24 14:44 - 2014-04-24 14:44 - 00001998 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\ProgramData\Visan
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-04-24 14:44 - 2014-04-24 14:44 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-04-24 14:44 - 2014-03-11 13:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-04-24 13:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

Some content of TEMP:
====================
C:\Users\Salih\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-21 23:02

==================== End Of Log ============================
--- --- ---

--- --- ---

Alt 24.05.2014, 18:56   #10
Machiavelli
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Schritt 1: FRST Fix

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\MountPoints2: {110d7a04-61ea-11e3-868b-806e6f6e6963} - D:\CD_Start.exe
2014-05-10 12:24 - 2013-12-12 18:51 - 00003086 _____ () C:\Windows\System32\Tasks\{C8B849E0-0022-47D4-932C-5728C6C3CE87}
2014-05-10 12:24 - 2014-05-05 23:02 - 00003034 _____ () C:\Windows\System32\Tasks\{6FD8087B-3B56-43AA-B292-281027ADADBE}
C:\Users\Salih\AppData\Local\Temp\Quarantine.exe
Task: {EF6B9F1A-3A26-4E61-BA6A-B8DBEEA3AA61} - \Driver Booster Update No Task File <==== ATTENTION
MSCONFIG\startupreg: SearchSettings => "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
MSCONFIG\startupreg: Slick Savings => "C:\Users\Salih\AppData\Roaming\Slick Savings\CouponsHelper.exe"

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Schritt 2: FRST Scan



Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Schritt 3: TFC

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.



Schritt 4: ESET


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt 5: Frage

Wie läuft Dein PC?

Alt 24.05.2014, 19:04   #11
Nightzone
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


No fixlist.txt found
The fixlist.txt should be in the same folder/directory the tool is located.

Diese Meldung kommt obwohl ich auf dem Desktop gespeichert habe.

Alt 24.05.2014, 19:08   #12
Machiavelli
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


In Deinem Fall befindet sich FRST.exe in diesem Ordner: Running from C:\Users\Salih\Downloads, daher muss die Fixlist sich auch in diesem Ordner befinden.

Alt 24.05.2014, 21:00   #13
Nightzone
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-05-2014 1
Ran by Salih at 2014-05-24 20:15:17 Run:1
Running from C:\Users\Salih\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\MountPoints2: {110d7a04-61ea-11e3-868b-806e6f6e6963} - D:\CD_Start.exe 2014-05-10 12:24 - 2013-12-12 18:51 - 00003086 _____ () C:\Windows\System32\Tasks\{C8B849E0-0022-47D4-932C-5728C6C3CE87} 2014-05-10 12:24 - 2014-05-05 23:02 - 00003034 _____ () C:\Windows\System32\Tasks\{6FD8087B-3B56-43AA-B292-281027ADADBE} C:\Users\Salih\AppData\Local\Temp\Quarantine.exe Task: {EF6B9F1A-3A26-4E61-BA6A-B8DBEEA3AA61} - \Driver Booster Update No Task File <==== ATTENTION MSCONFIG\startupreg: SearchSettings => "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" MSCONFIG\startupreg: Slick Savings => "C:\Users\Salih\AppData\Roaming\Slick Savings\CouponsHelper.exe"
*****************

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\MountPoints2: {110d7a04-61ea-11e3-868b-806e6f6e6963} - D:\CD_Start.exe 2014-05-10 12:24 - 2013-12-12 18:51 - 00003086 _____ () C:\Windows\System32\Tasks\{C8B849E0-0022-47D4-932C-5728C6C3CE87} 2014-05-10 12:24 - 2014-05-05 23:02 - 00003034 _____ () C:\Windows\System32\Tasks\{6FD8087B-3B56-43AA-B292-281027ADADBE} C:\Users\Salih\AppData\Local\Temp\Quarantine.exe {EF6B9F1A-3A26-4E61-BA6A-B8DBEEA3AA61} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\TreeHKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-1497994543-823861307-399158431-1000\...\MountPoints2: {110d7a04-61ea-11e3-868b-806e6f6e6963} - D:\CD_Start.exe 2014-05-10 12:24 - 2013-12-12 18:51 - 00003086 _____ () C:\Windows\System32\Tasks\{C8B849E0-0022-47D4-932C-5728C6C3CE87} 2014-05-10 12:24 - 2014-05-05 23:02 - 00003034 _____ () C:\Windows\System32\Tasks\{6FD8087B-3B56-43AA-B292-281027ADADBE} C:\Users\Salih\AppData\Local\Temp\Quarantine.exe \Driver Booster Update => Key not found.

==== End of Fixlog ====

So jetzt erst fertig mit scannen mit ESET.

# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=ee37dc2c1477404eaeb50699d7050829
# engine=18399
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-24 07:50:02
# local_time=2014-05-24 09:50:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=2559 16777215 0 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 9986 152590852 0 0
# scanned=211101
# found=15
# cleaned=0
# scan_time=4535
sh=8B1B26A3AC6481F55CDE95B008296D9374258426 ft=1 fh=b03f54bd321b7bee vn="Variante von Win64/Toolbar.Widgi.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe.vir"
sh=BD3566A4EB3D64936EA7F15EF6679BB6D587A2AC ft=1 fh=9c23c83f3ac2e489 vn="Variante von Win32/Toolbar.Widgi.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\wth182.dll.vir"
sh=1EF51F94D1463257FAB867F833F9627B1F2179E9 ft=1 fh=312febd221f04416 vn="Variante von Win64/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\wthx182.dll.vir"
sh=7AFD70B805F472B442C109791F51FF65E6C883F8 ft=1 fh=2b635b2e5b118e14 vn="Win32/Toolbar.Widgi.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\SlickSavings\SlickSavingsSetup.exe.vir"
sh=86768E20BA6C2F6F741DD80FED67F90E4B43B01F ft=1 fh=e13ab89321c50f16 vn="Variante von Win64/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\IObit Apps Toolbar\IE\9.2\iobitappsToolbarIE64.dll.vir"
sh=DAE3B80A567AA739FA54D4C896A2CFE0F9718180 ft=1 fh=09c2f22f47670a60 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Salih\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"
sh=6F57F940433F5301185CD5655EB440101465020F ft=1 fh=244eb31b41fca29b vn="Win32/Toolbar.Widgi.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Salih\AppData\Roaming\Slick Savings\Coupons.dll.vir"
sh=C9946D3535781EC9189885374E4A18CCAC22C08C ft=1 fh=1d80a455cd5f2f75 vn="Win64/Toolbar.Widgi.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Salih\AppData\Roaming\Slick Savings\Coupons64.dll.vir"
sh=05E6E9A9840645E0FA788718EBC6C20CCC84FAF0 ft=1 fh=3f7669b28f528729 vn="Variante von Win32/Toolbar.Widgi.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Salih\AppData\Roaming\Slick Savings\CouponsHelper.exe.vir"
sh=9366878083C915082FD52E60602F492B61DDF328 ft=1 fh=554f8fb76016b264 vn="Win32/Toolbar.Widgi.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Salih\AppData\Roaming\Slick Savings\Uninstall.exe.vir"
sh=F566ABD72E8C7DF5E064952E5E40D0EE3B957558 ft=1 fh=1bef3a76b7d1aa8f vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Salih\Downloads\BlueStacks App Player - CHIP-Downloader.exe"
sh=9F4E163CAD343AAF5BCE7214CF849CC3B1AE1CBD ft=1 fh=c71c0011a7df4c29 vn="Variante von Win32/InstallCore.OO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Salih\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup413.exe"
sh=20EABA3769270946B70A036C7EFE6618F7BFF045 ft=1 fh=a3a11107fa885ec8 vn="Variante von Win32/WinloadSDA.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall (1).exe"
sh=AC5F74CA66AB1D0DBF75D799DCD2FC488B99DD77 ft=1 fh=a95825f6fa885ec8 vn="Variante von Win32/WinloadSDA.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall.exe"
sh=E7AF7E55F724287A1A71EE891DCC3396A95C1D71 ft=0 fh=0000000000000000 vn="Variante von Win64/Toolbar.Widgi.A evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\eec5c.msi"

PC läuft eigentlich gut im Moment und diese Meldung kommt auch nicht mehr bis jetzt.
Danke dir für dein zeit und Geduld super ihr seid echt behilflich, kann man euch etwas unterstützen mit einem kleinen spende wenn ja wie ?

Alt 25.05.2014, 16:14   #14
Machiavelli
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Hey,
Zitat:
Danke dir für dein zeit und Geduld super ihr seid echt behilflich, kann man euch etwas unterstützen mit einem kleinen spende wenn ja wie ?
Gern geschehen. Für die Website: http://www.trojaner-board.de/payments.php
Mir reicht es, wenn Du mir in diesem Subforum Lob, Kritik und Wünsche - Trojaner-Board Feedback gibst.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
C:\Users\Salih\Downloads\BlueStacks App Player - CHIP-Downloader.exe
C:\Users\Salih\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup413.exe
C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall (1).exe
C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall.exe
C:\Windows\Installer\eec5c.msi

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Alt 25.05.2014, 16:24   #15
Nightzone
 
BupSystem Trojaner gefangen - Standard

BupSystem Trojaner gefangen


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-05-2014 01
Ran by Salih at 2014-05-25 17:23:41 Run:2
Running from C:\Users\Salih\Downloads\FRST-OlderVersion
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Salih\Downloads\BlueStacks App Player - CHIP-Downloader.exe
C:\Users\Salih\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup413.exe
C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall (1).exe
C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall.exe
C:\Windows\Installer\eec5c.msi
*****************

C:\Users\Salih\Downloads\BlueStacks App Player - CHIP-Downloader.exe => Moved successfully.
C:\Users\Salih\Downloads\COMPUTER_BILD-Download-Manager_fuer_ccsetup413.exe => Moved successfully.
C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall (1).exe => Moved successfully.
C:\Users\Salih\Downloads\Die-Sims-2-Super-Deluxe-lnstall.exe => Moved successfully.
C:\Windows\Installer\eec5c.msi => Moved successfully.

==== End of Fixlog ====

Antwort
Seite 1 von 2 1 2

Themen zu BupSystem Trojaner gefangen
gefangen, gen, leute, pup.optional.slicksavings.a, pup.optional.spigot, pup.optional.spigot.a, troja, trojaner, win32/downloadsponsor.a, win32/installcore.oo, win32/toolbar.widgi.a, win32/toolbar.widgi.f, win32/winloadsda.d, win64/toolbar.widgi.a, win64/toolbar.widgi.b, win64/toolbar.widgi.c


« Trojaner BHODfltTab.a | Internet seit ein paar Wochen Langsam »


Ähnliche Themen: BupSystem Trojaner gefangen


  1. windows 7: Trojaner TR/Crypt.XPACK.gen7 gefangen
    Log-Analyse und Auswertung - 01.02.2015 (16)
  2. Qvo6: Ich hab mir wohl einen Trojaner gefangen
    Plagegeister aller Art und deren Bekämpfung - 21.07.2013 (11)
  3. GVU-Trojaner gefangen
    Log-Analyse und Auswertung - 09.09.2012 (12)
  4. GVU Trojaner mit Webcam gefangen. Help!
    Plagegeister aller Art und deren Bekämpfung - 08.08.2012 (26)
  5. BKA Trojaner gefangen
    Log-Analyse und Auswertung - 08.08.2012 (15)
  6. GEMA-TROJANER gefangen
    Log-Analyse und Auswertung - 18.03.2012 (12)
  7. BKA Trojaner gefangen am 1.12
    Plagegeister aller Art und deren Bekämpfung - 04.12.2011 (1)
  8. Trojaner bei ICQ gefangen :( finde die datei nicht
    Plagegeister aller Art und deren Bekämpfung - 27.05.2010 (1)
  9. trojaner gefangen :(
    Log-Analyse und Auswertung - 02.05.2010 (1)
  10. Trojaner gefangen
    Plagegeister aller Art und deren Bekämpfung - 28.07.2009 (1)
  11. trojaner gefangen????????
    Log-Analyse und Auswertung - 17.06.2009 (0)
  12. Ich glaub, ich hab mir was gefangen - Viren oder Trojaner?!
    Plagegeister aller Art und deren Bekämpfung - 19.05.2006 (5)
  13. Trojaner gefangen?? unerwünschte Pop-Ups
    Plagegeister aller Art und deren Bekämpfung - 09.02.2006 (2)
  14. trojaner gefangen?
    Log-Analyse und Auswertung - 09.10.2005 (2)
  15. Trojaner gefangen: Bitte um Hilfe
    Plagegeister aller Art und deren Bekämpfung - 13.09.2005 (5)
  16. Hi Leute! Ich glaube ich habe mir einen Trojaner gefangen
    Plagegeister aller Art und deren Bekämpfung - 25.11.2004 (6)
  17. Ich glaube ich hab e mir einen Trojaner gefangen
    Plagegeister aller Art und deren Bekämpfung - 07.11.2004 (11)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema BupSystem Trojaner gefangen - Hi Leute kann mir bitte jemand behilflich sein wie ich dieses Trojaner los werde Danke im voraus. - BupSystem Trojaner gefangen...
Archiv
Du betrachtest: BupSystem Trojaner gefangen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130