|
Plagegeister aller Art und deren Bekämpfung: Kann nur noch Facebook Youtube und google öffnen :/Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
03.06.2014, 13:08 | #1 |
| Kann nur noch Facebook Youtube und google öffnen :/ Hallo Community und zwar habe ich ein Problem... Solange ich mit dem Laptop im Wlan bin kann ich alles machen spotify und jede seite wird auch geladen. Sobald ich das Wlan ausmache und den LAN stecker reinsteck zeigt er mir ne lanverbindung an. Auch das ich INternet habe. Nur is das problem das sich nur Google Facebook und Youtube öffnen lässt. Die Verbindung zu Spotify, Blizzardlauncher etc bricht ab und andere Seiten können auch nichtmehr angezeigt/geladen werden. Bitte um Hilfe. ps: Die Logs sind schon direkt mit hochgeladen als Anhang |
03.06.2014, 14:17 | #2 |
/// the machine /// TB-Ausbilder | Kann nur noch Facebook Youtube und google öffnen :/ Hi,
__________________Logs Bitte immer in codetags in das Thema posten.
__________________ |
03.06.2014, 14:38 | #3 |
| Kann nur noch Facebook Youtube und google öffnen :/Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014 Ran by Laitock at 2014-06-03 13:56:59 Running from C:\Users\Horst\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.5 - ASUS) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0030 - ASUS) avast! Internet Security (HKLM-x32\...\Avast) (Version: 9.0.2016 - Avast Software) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Optimus Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation) Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - ) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) System Requirements Lab for Intel (HKLM-x32\...\{1EBDF6D2-CEA0-484C-A23E-2DDAD7FD0DD0}) (Version: 4.5.22.0 - Husdawg, LLC) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH) VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN) Windows-Treiberpaket - ASUS (ATP) Mouse (09/17/2013 1.0.0.186) (HKLM\...\D9E691DCEE7D3B9B7C62A7F5C2EAABBB9335DC9A) (Version: 09/17/2013 1.0.0.186 - ASUS) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS) WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) Wolfenstein The New Order German Edition [Full Uncut] 1.0.0.1 (HKLM-x32\...\Wolfenstein The New Order German Edition [Full Uncut] 1.0.0.1) (Version: - ) ==================== Restore Points ========================= 16-05-2014 17:54:44 DirectX wurde installiert 26-05-2014 23:14:55 Geplanter Prüfpunkt 28-05-2014 15:02:26 DirectX wurde installiert 02-06-2014 20:53:50 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert ==================== Hosts content: ========================== 2011-10-14 16:53 - 2011-10-14 16:53 - 00000030 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 secure.tune-up.com ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3887607A-FDFA-438C-A78F-FE1B9E76DDC3} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {3E1EEE15-E018-4EB6-BCE4-6B05F83C24CF} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {5775C224-6956-45A6-BFB6-82C84BC79BBC} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-03-31] (AVAST Software) Task: {5FA6F33E-4C5D-45FC-9128-55FF15E47175} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation) Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6D1E6EC0-FB12-460A-8157-A5D7F608BB65} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-05-17] (Microsoft Corporation) Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {7414099A-B7A1-486B-BFF2-74580BFF229E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-31] (Google Inc.) Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {87D4D94E-2603-4838-9058-131169EC1052} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {905D15D2-09E7-42E6-98B9-E2FA497868A6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-31] (Google Inc.) Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {AF4BC237-DBBE-4EC5-9732-FE5F11E97935} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-09-23] (AsusTek) Task: {B221C20F-D17A-4B49-B2F6-362D0A22FF7B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {DC2CE5B8-7234-4981-92E8-60971018E92C} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-03-31 15:46 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-06-03 12:04 - 2014-06-03 12:04 - 00598072 _____ () C:\Users\Horst\AppData\Roaming\Spotify\Data\SpotifyHelper.exe 2014-05-26 00:33 - 2014-05-26 00:33 - 02255872 _____ () C:\Program Files\AVAST Software\Avast\defs\14052500\algo.dll 2014-06-02 22:32 - 2014-06-02 22:32 - 02259456 _____ () C:\Program Files\AVAST Software\Avast\defs\14060201\algo.dll 2014-06-03 12:04 - 2014-06-03 12:04 - 36966968 _____ () C:\Users\Horst\AppData\Roaming\Spotify\Data\libcef.dll 2014-03-31 13:48 - 2014-03-31 13:48 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-06-03 12:04 - 2014-06-03 12:04 - 00886840 _____ () C:\Users\Horst\AppData\Roaming\Spotify\Data\libglesv2.dll 2014-06-03 12:04 - 2014-06-03 12:04 - 00108600 _____ () C:\Users\Horst\AppData\Roaming\Spotify\Data\libegl.dll 2014-05-27 05:02 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll 2014-05-27 05:02 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll 2014-05-27 05:02 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll 2014-05-27 05:02 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll 2014-05-27 05:02 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll 2014-05-27 05:02 - 2014-05-14 01:40 - 13695816 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Horst\SkyDrive:ms-properties ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/03/2014 00:19:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac Name des fehlerhaften Moduls: MSVCR80.dll, Version: 8.0.50727.8428, Zeitstempel: 0x520b1060 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00012f4b ID des fehlerhaften Prozesses: 0x16fc Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0 Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1 Pfad des fehlerhaften Moduls: rads_user_kernel.exe2 Berichtskennung: rads_user_kernel.exe3 Vollständiger Name des fehlerhaften Pakets: rads_user_kernel.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: rads_user_kernel.exe5 Error: (06/02/2014 10:53:56 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (06/01/2014 04:06:47 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm WolfNewOrder_x64.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 35c Startzeit: 01cf7da27d8d41be Endzeit: 4294967295 Anwendungspfad: C:\Program Files (x86)\Wolfenstein The New Order\WolfNewOrder_x64.exe Berichts-ID: f2743792-e995-11e3-8263-bcee7b1f8703 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (05/28/2014 05:09:12 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm WolfNewOrder_x64.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: c54 Startzeit: 01cf7a8688404aeb Endzeit: 58 Anwendungspfad: C:\Program Files (x86)\Wolfenstein The New Order\WolfNewOrder_x64.exe Berichts-ID: 04fb2960-e67a-11e3-8263-bcee7b1f8703 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (05/28/2014 05:07:18 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm WolfNewOrder_x64.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1624 Startzeit: 01cf7a865cf8764d Endzeit: 4294967295 Anwendungspfad: C:\Program Files (x86)\Wolfenstein The New Order\WolfNewOrder_x64.exe Berichts-ID: c0ca9302-e679-11e3-8263-bcee7b1f8703 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (05/28/2014 05:02:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (05/27/2014 00:25:59 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 13.0.2020.14, Zeitstempel: 0x505999e5 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17031, Zeitstempel: 0x530895af Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000065e8e ID des fehlerhaften Prozesses: 0x794 Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0 Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1 Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2 Berichtskennung: TuneUpUtilitiesService64.exe3 Vollständiger Name des fehlerhaften Pakets: TuneUpUtilitiesService64.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: TuneUpUtilitiesService64.exe5 Error: (05/17/2014 10:54:13 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: ) Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt. Error: (04/18/2014 06:26:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (04/10/2014 07:18:34 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . System errors: ============= Error: (06/03/2014 01:56:00 PM) (Source: ipnathlp) (EventID: 30013) (User: ) Description: 169.254.53.115192.168.137.0255.255.255.0 Error: (06/03/2014 01:55:55 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (06/03/2014 01:55:38 PM) (Source: ipnathlp) (EventID: 30013) (User: ) Description: 169.254.53.115192.168.137.0255.255.255.0 Error: (06/03/2014 01:51:00 PM) (Source: DCOM) (EventID: 10010) (User: Laitock) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (06/03/2014 01:37:43 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (06/03/2014 01:37:03 PM) (Source: ipnathlp) (EventID: 30013) (User: ) Description: 169.254.53.115192.168.137.0255.255.255.0 Error: (06/03/2014 01:36:44 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (06/03/2014 01:35:52 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (06/03/2014 01:35:51 PM) (Source: ipnathlp) (EventID: 30013) (User: ) Description: 169.254.53.115192.168.137.0255.255.255.0 Error: (06/03/2014 01:34:48 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Microsoft Office Sessions: ========================= Error: (06/03/2014 00:19:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: rads_user_kernel.exe0.0.0.04e65c1acMSVCR80.dll8.0.50727.8428520b1060c000000500012f4b16fc01cf7f15425b6d83C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.8428_none_d08a11e2442dc25d\MSVCR80.dll804bad59-eb08-11e3-8263-bcee7b1f8703 Error: (06/02/2014 10:53:56 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert Error: (06/01/2014 04:06:47 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: WolfNewOrder_x64.exe1.0.0.135c01cf7da27d8d41be4294967295C:\Program Files (x86)\Wolfenstein The New Order\WolfNewOrder_x64.exef2743792-e995-11e3-8263-bcee7b1f8703 Error: (05/28/2014 05:09:12 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: WolfNewOrder_x64.exe1.0.0.1c5401cf7a8688404aeb58C:\Program Files (x86)\Wolfenstein The New Order\WolfNewOrder_x64.exe04fb2960-e67a-11e3-8263-bcee7b1f8703 Error: (05/28/2014 05:07:18 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: WolfNewOrder_x64.exe1.0.0.1162401cf7a865cf8764d4294967295C:\Program Files (x86)\Wolfenstein The New Order\WolfNewOrder_x64.exec0ca9302-e679-11e3-8263-bcee7b1f8703 Error: (05/28/2014 05:02:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert Error: (05/27/2014 00:25:59 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: TuneUpUtilitiesService64.exe13.0.2020.14505999e5ntdll.dll6.3.9600.17031530895afc00000050000000000065e8e79401cf79317770fb22C:\TuneUpPortable\App\TuneUp\TuneUpUtilitiesService64.exeC:\Windows\SYSTEM32\ntdll.dllb619af61-e524-11e3-8262-bcee7b1f8703 Error: (05/17/2014 10:54:13 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: ) Description: 0x8898008d Error: (04/18/2014 06:26:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert Error: (04/10/2014 07:18:34 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert CodeIntegrity Errors: =================================== Date: 2014-05-17 09:46:06.056 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Horst\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-05-17 09:46:05.978 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Percentage of memory in use: 42% Total physical RAM: 3972.31 MB Available physical RAM: 2272.87 MB Total Pagefile: 5880.39 MB Available Pagefile: 3808.16 MB Total Virtual: 131072 MB Available Virtual: 131071.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.25 GB) (Free:246.07 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: BC5C476C) Partition: GPT Partition Type. ==================== End Of Log ============================ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014 Ran by Laitock (administrator) on LAITOCK on 03-06-2014 13:56:10 Running from C:\Users\Horst\Downloads Platform: Windows 8.1 Pro (Update 1) (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Spotify Ltd) C:\Users\Horst\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\Horst\AppData\Roaming\Spotify\spotify.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Users\Horst\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Horst\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Horst\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Horst\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () C:\Users\Horst\AppData\Roaming\Spotify\Data\SpotifyHelper.exe (Microsoft Corporation) C:\Windows\System32\mobsync.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-03-31] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-645772730-2596928438-3798264029-1001\...\Run: [Spotify Web Helper] => C:\Users\Horst\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-03] (Spotify Ltd) HKU\S-1-5-21-645772730-2596928438-3798264029-1001\...\Run: [Spotify] => C:\Users\Horst\AppData\Roaming\Spotify\spotify.exe [6170168 2014-06-03] (Spotify Ltd) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCE02E172D64CCF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Hosts: 127.0.0.1 secure.tune-up.com Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 FireFox: ======== FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-31] CHR Extension: (Google Drive) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-31] CHR Extension: (YouTube) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-31] CHR Extension: (Google-Suche) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-31] CHR Extension: (AdBlock) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-31] CHR Extension: (avast! Online Security) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-03-31] CHR Extension: (Google Wallet) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-31] CHR Extension: (Google Mail) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-31] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-03-31] ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-31] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-03-31] (AVAST Software) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-03-31] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-03-31] (AVAST Software) R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [445304 2014-03-31] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-03-31] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-03-31] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-03-31] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-03-31] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-03-31] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-03-31] () R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-09-30] (Microsoft Corporation) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation) S3 intaud_WaveExtensible; \SystemRoot\system32\drivers\intelaud.sys [X] S3 iwdbus; \SystemRoot\System32\drivers\iwdbus.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-03 13:46 - 2014-06-03 13:47 - 00022871 _____ () C:\Users\Horst\Downloads\Addition.txt 2014-06-03 13:45 - 2014-06-03 13:56 - 00011001 _____ () C:\Users\Horst\Downloads\FRST.txt 2014-06-03 13:44 - 2014-06-03 13:56 - 00000000 ____D () C:\FRST 2014-06-03 13:43 - 2014-06-03 13:43 - 02068992 _____ (Farbar) C:\Users\Horst\Downloads\FRST64.exe 2014-06-03 13:19 - 2014-06-03 13:19 - 00000303 _____ () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heimnetzgruppe.lnk 2014-06-03 12:04 - 2014-06-03 13:46 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Spotify 2014-06-03 12:04 - 2014-06-03 13:14 - 00000000 ____D () C:\Users\Horst\AppData\Local\Spotify 2014-06-03 12:04 - 2014-06-03 12:04 - 00001813 _____ () C:\Users\Horst\Desktop\Spotify.lnk 2014-06-03 12:04 - 2014-06-03 12:04 - 00001799 _____ () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-06-03 12:03 - 2014-06-03 12:03 - 00126112 _____ (Spotify Ltd) C:\Users\Horst\Downloads\SpotifySetup.exe 2014-06-03 00:24 - 2014-06-03 00:24 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\LolClient 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Program Files\MSBuild 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-06-02 22:57 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll 2014-06-02 22:57 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-06-02 22:57 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-06-02 22:57 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll 2014-06-02 22:57 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-06-02 22:57 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-06-02 22:55 - 2014-06-02 22:55 - 00001625 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk 2014-06-02 22:55 - 2014-06-02 22:55 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-06-02 22:55 - 2014-06-02 22:55 - 00000000 ____D () C:\Riot Games 2014-06-02 22:55 - 2014-06-02 22:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2014-06-02 22:55 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-06-02 22:55 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-06-02 22:55 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-06-02 22:36 - 2014-06-02 22:36 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-06-02 22:35 - 2014-06-02 22:36 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Riot Games 2014-06-02 22:32 - 2014-06-02 22:33 - 34888568 _____ (Riot Games) C:\Users\Horst\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2014-06-02 21:34 - 2014-06-02 21:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-01 15:59 - 2014-06-03 13:56 - 00000435 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-06-01 13:00 - 2014-02-16 14:10 - 00000000 ____D () C:\Users\Horst\Downloads\Adobe.Photos.CS6.v13.0.Ex.LS4.Multi 2014-06-01 12:35 - 2014-06-01 12:35 - 00002800 _____ () C:\Users\Horst\Downloads\Adobe_Photoshop_CS6_v13.0_LS4_Extended_Multilanguage-cnhb31nf4vgh.dlc 2014-06-01 01:52 - 2014-06-01 01:53 - 00000425 _____ () C:\Users\Horst\Downloads\listen-dsl.pls 2014-05-30 17:36 - 2014-06-01 15:55 - 00000000 ____D () C:\Users\Horst\Downloads\New.Kids.Nitro.German.AC3.BDRiP.XViD-ROOR 2014-05-30 17:32 - 2014-05-30 17:33 - 103280853 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part6.rar 2014-05-30 17:29 - 2014-05-30 17:36 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part5.rar 2014-05-30 17:26 - 2014-05-30 17:32 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part4.rar 2014-05-30 17:24 - 2014-05-30 17:29 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part3.rar 2014-05-30 17:20 - 2014-06-01 15:56 - 00000000 ____D () C:\Users\Horst\Downloads\New.Kids.Turbo.German.DVDRip.XviD-DiSTRiCT 2014-05-30 17:20 - 2014-05-30 17:26 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part2.rar 2014-05-30 17:20 - 2014-05-30 17:24 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part1.rar 2014-05-30 17:18 - 2014-05-30 17:20 - 35594731 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part09.rar 2014-05-30 17:18 - 2014-05-30 17:20 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part08.rar 2014-05-30 17:16 - 2014-05-30 17:18 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part07.rar 2014-05-30 17:14 - 2014-05-30 17:16 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part06.rar 2014-05-30 17:12 - 2014-05-30 17:14 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part05.rar 2014-05-30 17:11 - 2014-05-30 17:18 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part04.rar 2014-05-30 17:10 - 2014-05-30 17:12 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part03.rar 2014-05-30 17:08 - 2014-05-30 17:11 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part02.rar 2014-05-30 17:08 - 2014-05-30 17:10 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part01.rar 2014-05-30 17:05 - 2014-05-30 17:05 - 00003864 _____ () C:\Users\Horst\Downloads\relink.us__New.Kids.Turbo.German.DVDRip.XviD-DiSTRiCT_718936ffe04c30a17ed8a1919a60a4.dlc 2014-05-30 14:24 - 2014-05-30 14:24 - 05135694 _____ () C:\Users\Horst\Downloads\QuestHelper-0.59.zip 2014-05-30 14:24 - 2014-05-30 14:24 - 00000000 ____D () C:\Users\Horst\Downloads\QuestHelper-0.59 2014-05-30 12:07 - 2014-05-30 12:07 - 00000000 ____D () C:\Users\Horst\AppData\Local\Razer_Inc 2014-05-30 12:05 - 2014-06-03 12:02 - 00000000 ____D () C:\Program Files (x86)\Razer 2014-05-30 12:05 - 2014-05-30 12:05 - 00000000 ____D () C:\ProgramData\Razer 2014-05-29 07:32 - 2014-05-29 07:32 - 00080384 _____ (Razer Inc) C:\Windows\system32\RazerCoinstaller.dll 2014-05-28 17:06 - 2014-05-28 17:06 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\NVIDIA 2014-05-28 17:06 - 2014-05-28 17:06 - 00000000 ____D () C:\ProgramData\Steam 2014-05-28 16:52 - 2014-05-28 16:52 - 00002108 _____ () C:\Users\Horst\Desktop\Wolfenstein The New Order German Edition [Full Uncut].lnk 2014-05-28 16:17 - 2014-05-28 16:52 - 00000000 ____D () C:\Program Files (x86)\Wolfenstein The New Order 2014-05-28 09:27 - 2014-05-28 16:16 - 00000000 ____D () C:\Users\Horst\Downloads\fnte.h.w.de.rm.Eiti.Fl.Ucu-x.RICK 2014-05-28 00:24 - 2014-05-28 00:24 - 00013296 _____ () C:\Users\Horst\Downloads\3f5492efea3d2d5999ddff1d87b31981.dlc 2014-05-27 19:07 - 2014-05-27 19:07 - 00000000 ____D () C:\Users\Horst\AppData\Local\Blizzard 2014-05-27 18:56 - 2014-06-01 02:52 - 00000000 ____D () C:\Program Files (x86)\Hearthstone 2014-05-27 18:56 - 2014-05-27 18:56 - 00001169 _____ () C:\Users\Public\Desktop\Hearthstone.lnk 2014-05-27 18:56 - 2014-05-27 18:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone 2014-05-27 15:14 - 2014-05-27 15:14 - 00001230 _____ () C:\Users\Horst\Downloads\Config.wtf 2014-05-27 15:14 - 2014-05-27 15:14 - 00000040 _____ () C:\Users\Horst\Downloads\realmlist.wtf 2014-05-27 15:01 - 2014-05-27 15:01 - 00000000 ____D () C:\Users\Horst\Downloads\b2b 2014-05-27 14:59 - 2014-05-27 14:59 - 00001311 _____ () C:\Users\Horst\Desktop\World of Warcraft Installer.lnk 2014-05-27 14:59 - 2014-05-27 14:59 - 00000000 ____D () C:\ProgramData\Blizzard 2014-05-27 14:58 - 2014-05-27 14:58 - 00000000 ____D () C:\Users\Public\Documents\Blizzard Entertainment 2014-05-26 23:48 - 2014-05-26 23:48 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\TuneUp Software 2014-05-26 23:30 - 2014-05-26 23:30 - 00000000 ____D () C:\Users\Horst\Downloads\config von bruder 2014-05-26 23:29 - 2014-05-26 23:29 - 00044533 _____ () C:\Users\Horst\Downloads\config von bruder.rar 2014-05-26 00:04 - 2014-05-26 00:04 - 00000000 __SHD () C:\Users\Horst\AppData\Local\EmieUserList 2014-05-26 00:04 - 2014-05-26 00:04 - 00000000 __SHD () C:\Users\Horst\AppData\Local\EmieSiteList 2014-05-18 20:27 - 2011-01-27 19:42 - 2346612071 _____ () C:\Users\Horst\Desktop\dec-unverbesserlich.720p.mkv 2014-05-17 15:00 - 2014-05-17 18:40 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\SpaceEngineers 2014-05-17 11:39 - 2014-05-17 11:46 - 00000000 ____D () C:\Users\Horst\Desktop\hdr1.extended.warnerfix.1080p-xell 2014-05-17 11:18 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\Windows\system32\mrt_map.dll 2014-05-17 11:18 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\Windows\system32\mrt100.dll 2014-05-17 11:18 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt_map.dll 2014-05-17 11:18 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt100.dll 2014-05-17 11:18 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2014-05-17 11:18 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2014-05-17 11:18 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2014-05-17 11:18 - 2014-03-13 09:42 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2014-05-17 11:18 - 2014-03-13 08:51 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe 2014-05-17 11:08 - 2014-05-01 22:30 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-17 11:08 - 2014-05-01 22:30 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-17 10:56 - 2014-05-17 10:56 - 00015910 _____ () C:\Windows\system32\results.xml 2014-05-17 10:53 - 2014-05-17 10:53 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk 2014-05-17 10:53 - 2014-05-17 10:53 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-17 10:48 - 2014-06-03 13:18 - 00000378 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job 2014-05-17 10:48 - 2014-05-17 10:48 - 00002716 _____ () C:\Windows\System32\Tasks\DriverToolkit Autorun 2014-05-17 10:42 - 2014-05-17 14:39 - 00000000 ____D () C:\Program Files (x86)\DriverToolkit 2014-05-17 10:42 - 2014-05-17 10:42 - 02395840 _____ (Megaify Software ) C:\Users\Horst\Downloads\driver_setup.exe 2014-05-17 10:42 - 2014-05-17 10:42 - 00000000 ____D () C:\Users\Horst\AppData\Local\DriverToolkit 2014-05-17 10:35 - 2014-05-17 10:36 - 00000000 ____D () C:\Users\Horst\Downloads\VGA_Pega_Intel_Win8_64_VER918103293 2014-05-17 10:35 - 2013-10-01 13:02 - 13760512 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll 2014-05-17 10:35 - 2013-10-01 13:02 - 04432896 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll 2014-05-17 10:35 - 2013-09-03 10:55 - 00452088 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2014-05-17 10:35 - 2013-09-03 10:55 - 00089600 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3293.dll 2014-05-17 10:25 - 2014-05-17 10:28 - 147055896 _____ (Intel Corporation) C:\Users\Horst\Downloads\win64_153318.exe 2014-05-17 10:24 - 2014-05-17 10:24 - 00000000 ____D () C:\Users\Horst\SystemRequirementsLab 2014-05-17 10:24 - 2014-05-17 10:24 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab 2014-05-17 10:23 - 2014-05-17 10:23 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-17 10:23 - 2014-05-17 10:23 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-17 10:23 - 2014-05-17 10:23 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-17 10:23 - 2014-05-17 10:23 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-17 10:23 - 2014-05-17 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-17 10:23 - 2014-05-17 10:23 - 00000000 ____D () C:\Program Files (x86)\Java 2014-05-17 10:19 - 2014-05-17 10:20 - 00004161 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-17 10:18 - 2014-05-17 10:18 - 00405504 _____ () C:\Users\Horst\Downloads\intel_srldetect_4.5.13.0.msi 2014-05-17 09:48 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll 2014-05-17 09:48 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-05-17 09:48 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll 2014-05-17 09:48 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-05-17 09:48 - 2014-04-11 07:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe 2014-05-17 09:48 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-05-17 09:48 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2014-05-17 09:48 - 2014-04-11 05:36 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2014-05-17 09:48 - 2014-04-11 05:24 - 13288960 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-05-17 09:48 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-05-17 09:48 - 2014-04-11 05:05 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-05-17 09:48 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-05-17 09:48 - 2014-04-11 05:02 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-05-17 09:48 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-05-17 09:48 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-05-17 09:48 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-05-17 09:48 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-05-17 09:48 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2014-05-17 09:48 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-05-17 09:48 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-05-17 09:48 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-05-17 09:48 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-05-17 09:48 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-05-17 09:48 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll 2014-05-17 09:48 - 2014-04-11 04:34 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-05-17 09:48 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll 2014-05-17 09:48 - 2014-04-11 04:25 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-05-17 09:47 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-17 09:47 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-17 09:47 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-17 09:47 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-17 09:46 - 2014-03-27 11:12 - 21225584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-17 09:46 - 2014-03-27 09:48 - 18679728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-17 09:45 - 2014-05-17 09:45 - 00001118 _____ () C:\Users\Horst\Desktop\EVEREST Home Edition.lnk 2014-05-17 09:45 - 2014-05-17 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2014-05-17 09:45 - 2014-05-17 09:45 - 00000000 ____D () C:\Program Files (x86)\Lavalys 2014-05-16 20:19 - 2014-05-16 20:22 - 00000000 ____D () C:\Users\Horst\Desktop\usb 2014-05-16 18:21 - 2014-06-03 00:47 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-05-16 18:21 - 2014-05-16 18:21 - 01141680 _____ () C:\Users\Horst\Downloads\SteamSetup.exe 2014-05-16 18:21 - 2014-05-16 18:21 - 00000975 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-05-16 18:21 - 2014-05-16 18:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-05-10 20:50 - 2014-05-09 01:31 - 1516007424 _____ () C:\Users\Horst\Downloads\Bad.Neighbours.2014.TS.LD.German.XViD-FiSTER.avi 2014-05-10 19:34 - 2014-05-10 19:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-10 19:34 - 2014-05-10 19:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-05 11:03 - 2014-05-05 11:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-05 11:03 - 2014-05-05 11:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-05 11:01 - 2014-05-05 11:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-05 11:01 - 2014-05-05 11:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-05 11:01 - 2014-05-05 11:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-05 11:00 - 2014-05-05 11:00 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-05 11:00 - 2014-05-05 11:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll ==================== One Month Modified Files and Folders ======= 2014-06-03 13:56 - 2014-06-03 13:45 - 00011001 _____ () C:\Users\Horst\Downloads\FRST.txt 2014-06-03 13:56 - 2014-06-03 13:44 - 00000000 ____D () C:\FRST 2014-06-03 13:56 - 2014-06-01 15:59 - 00000435 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-06-03 13:56 - 2014-03-31 13:33 - 00000000 ____D () C:\Users\Horst\AppData\Local\Temp 2014-06-03 13:47 - 2014-06-03 13:46 - 00022871 _____ () C:\Users\Horst\Downloads\Addition.txt 2014-06-03 13:46 - 2014-06-03 12:04 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Spotify 2014-06-03 13:43 - 2014-06-03 13:43 - 02068992 _____ (Farbar) C:\Users\Horst\Downloads\FRST64.exe 2014-06-03 13:36 - 2014-03-31 13:29 - 01838561 _____ () C:\Windows\WindowsUpdate.log 2014-06-03 13:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF 2014-06-03 13:23 - 2014-03-31 13:41 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-645772730-2596928438-3798264029-1001 2014-06-03 13:19 - 2014-06-03 13:19 - 00000303 _____ () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heimnetzgruppe.lnk 2014-06-03 13:18 - 2014-05-17 10:48 - 00000378 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job 2014-06-03 13:18 - 2014-03-31 13:44 - 00002195 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-06-03 13:18 - 2014-03-31 13:44 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-03 13:14 - 2014-06-03 12:04 - 00000000 ____D () C:\Users\Horst\AppData\Local\Spotify 2014-06-03 13:08 - 2014-03-31 15:46 - 00000000 ____D () C:\Users\Horst\AppData\Local\Battle.net 2014-06-03 13:00 - 2014-03-31 13:44 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-03 13:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru 2014-06-03 12:04 - 2014-06-03 12:04 - 00001813 _____ () C:\Users\Horst\Desktop\Spotify.lnk 2014-06-03 12:04 - 2014-06-03 12:04 - 00001799 _____ () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-06-03 12:03 - 2014-06-03 12:03 - 00126112 _____ (Spotify Ltd) C:\Users\Horst\Downloads\SpotifySetup.exe 2014-06-03 12:02 - 2014-05-30 12:05 - 00000000 ____D () C:\Program Files (x86)\Razer 2014-06-03 00:47 - 2014-05-16 18:21 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-06-03 00:24 - 2014-06-03 00:24 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\LolClient 2014-06-02 23:01 - 2013-09-30 05:58 - 00765582 _____ () C:\Windows\system32\perfh007.dat 2014-06-02 23:01 - 2013-09-30 05:58 - 00159366 _____ () C:\Windows\system32\perfc007.dat 2014-06-02 23:01 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Program Files\MSBuild 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-06-02 23:00 - 2014-06-02 23:00 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-06-02 23:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-06-02 23:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI 2014-06-02 22:55 - 2014-06-02 22:55 - 00001625 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk 2014-06-02 22:55 - 2014-06-02 22:55 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-06-02 22:55 - 2014-06-02 22:55 - 00000000 ____D () C:\Riot Games 2014-06-02 22:55 - 2014-06-02 22:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2014-06-02 22:36 - 2014-06-02 22:36 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-06-02 22:36 - 2014-06-02 22:35 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\Riot Games 2014-06-02 22:33 - 2014-06-02 22:32 - 34888568 _____ (Riot Games) C:\Users\Horst\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2014-06-02 21:34 - 2014-06-02 21:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2014-06-02 21:34 - 2013-08-22 16:46 - 00017025 _____ () C:\Windows\setupact.log 2014-06-01 16:00 - 2014-03-31 13:32 - 01686150 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-01 15:56 - 2014-05-30 17:20 - 00000000 ____D () C:\Users\Horst\Downloads\New.Kids.Turbo.German.DVDRip.XviD-DiSTRiCT 2014-06-01 15:55 - 2014-05-30 17:36 - 00000000 ____D () C:\Users\Horst\Downloads\New.Kids.Nitro.German.AC3.BDRiP.XViD-ROOR 2014-06-01 12:35 - 2014-06-01 12:35 - 00002800 _____ () C:\Users\Horst\Downloads\Adobe_Photoshop_CS6_v13.0_LS4_Extended_Multilanguage-cnhb31nf4vgh.dlc 2014-06-01 02:52 - 2014-05-27 18:56 - 00000000 ____D () C:\Program Files (x86)\Hearthstone 2014-06-01 01:53 - 2014-06-01 01:52 - 00000425 _____ () C:\Users\Horst\Downloads\listen-dsl.pls 2014-06-01 01:53 - 2014-04-01 00:19 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\vlc 2014-05-30 21:10 - 2014-03-31 15:46 - 00000000 ____D () C:\Program Files (x86)\Battle.net 2014-05-30 17:36 - 2014-05-30 17:29 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part5.rar 2014-05-30 17:33 - 2014-05-30 17:32 - 103280853 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part6.rar 2014-05-30 17:32 - 2014-05-30 17:26 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part4.rar 2014-05-30 17:29 - 2014-05-30 17:24 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part3.rar 2014-05-30 17:26 - 2014-05-30 17:20 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part2.rar 2014-05-30 17:24 - 2014-05-30 17:20 - 209715210 _____ () C:\Users\Horst\Downloads\NKNROORXVID.part1.rar 2014-05-30 17:20 - 2014-05-30 17:18 - 35594731 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part09.rar 2014-05-30 17:20 - 2014-05-30 17:18 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part08.rar 2014-05-30 17:18 - 2014-05-30 17:16 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part07.rar 2014-05-30 17:18 - 2014-05-30 17:11 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part04.rar 2014-05-30 17:16 - 2014-05-30 17:14 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part06.rar 2014-05-30 17:14 - 2014-05-30 17:12 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part05.rar 2014-05-30 17:12 - 2014-05-30 17:10 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part03.rar 2014-05-30 17:11 - 2014-05-30 17:08 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part02.rar 2014-05-30 17:10 - 2014-05-30 17:08 - 106954799 _____ () C:\Users\Horst\Downloads\New.Kids.Turbo.DiSTRiCT.part01.rar 2014-05-30 17:05 - 2014-05-30 17:05 - 00003864 _____ () C:\Users\Horst\Downloads\relink.us__New.Kids.Turbo.German.DVDRip.XviD-DiSTRiCT_718936ffe04c30a17ed8a1919a60a4.dlc 2014-05-30 16:55 - 2014-03-31 18:53 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\TS3Client 2014-05-30 14:24 - 2014-05-30 14:24 - 05135694 _____ () C:\Users\Horst\Downloads\QuestHelper-0.59.zip 2014-05-30 14:24 - 2014-05-30 14:24 - 00000000 ____D () C:\Users\Horst\Downloads\QuestHelper-0.59 2014-05-30 12:07 - 2014-05-30 12:07 - 00000000 ____D () C:\Users\Horst\AppData\Local\Razer_Inc 2014-05-30 12:05 - 2014-05-30 12:05 - 00000000 ____D () C:\ProgramData\Razer 2014-05-29 07:32 - 2014-05-29 07:32 - 00080384 _____ (Razer Inc) C:\Windows\system32\RazerCoinstaller.dll 2014-05-28 17:06 - 2014-05-28 17:06 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\NVIDIA 2014-05-28 17:06 - 2014-05-28 17:06 - 00000000 ____D () C:\ProgramData\Steam 2014-05-28 17:03 - 2014-03-31 15:23 - 00063264 _____ () C:\Windows\DirectX.log 2014-05-28 16:52 - 2014-05-28 16:52 - 00002108 _____ () C:\Users\Horst\Desktop\Wolfenstein The New Order German Edition [Full Uncut].lnk 2014-05-28 16:52 - 2014-05-28 16:17 - 00000000 ____D () C:\Program Files (x86)\Wolfenstein The New Order 2014-05-28 16:16 - 2014-05-28 09:27 - 00000000 ____D () C:\Users\Horst\Downloads\fnte.h.w.de.rm.Eiti.Fl.Ucu-x.RICK 2014-05-28 00:24 - 2014-05-28 00:24 - 00013296 _____ () C:\Users\Horst\Downloads\3f5492efea3d2d5999ddff1d87b31981.dlc 2014-05-27 19:07 - 2014-05-27 19:07 - 00000000 ____D () C:\Users\Horst\AppData\Local\Blizzard 2014-05-27 18:56 - 2014-05-27 18:56 - 00001169 _____ () C:\Users\Public\Desktop\Hearthstone.lnk 2014-05-27 18:56 - 2014-05-27 18:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone 2014-05-27 15:14 - 2014-05-27 15:14 - 00001230 _____ () C:\Users\Horst\Downloads\Config.wtf 2014-05-27 15:14 - 2014-05-27 15:14 - 00000040 _____ () C:\Users\Horst\Downloads\realmlist.wtf 2014-05-27 15:01 - 2014-05-27 15:01 - 00000000 ____D () C:\Users\Horst\Downloads\b2b 2014-05-27 14:59 - 2014-05-27 14:59 - 00001311 _____ () C:\Users\Horst\Desktop\World of Warcraft Installer.lnk 2014-05-27 14:59 - 2014-05-27 14:59 - 00000000 ____D () C:\ProgramData\Blizzard 2014-05-27 14:58 - 2014-05-27 14:58 - 00000000 ____D () C:\Users\Public\Documents\Blizzard Entertainment 2014-05-27 01:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache 2014-05-27 00:29 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-26 23:48 - 2014-05-26 23:48 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\TuneUp Software 2014-05-26 23:30 - 2014-05-26 23:30 - 00000000 ____D () C:\Users\Horst\Downloads\config von bruder 2014-05-26 23:29 - 2014-05-26 23:29 - 00044533 _____ () C:\Users\Horst\Downloads\config von bruder.rar 2014-05-26 00:04 - 2014-05-26 00:04 - 00000000 __SHD () C:\Users\Horst\AppData\Local\EmieUserList 2014-05-26 00:04 - 2014-05-26 00:04 - 00000000 __SHD () C:\Users\Horst\AppData\Local\EmieSiteList 2014-05-17 18:40 - 2014-05-17 15:00 - 00000000 ____D () C:\Users\Horst\AppData\Roaming\SpaceEngineers 2014-05-17 15:35 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-17 15:35 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-17 15:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-05-17 15:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-05-17 14:39 - 2014-05-17 10:42 - 00000000 ____D () C:\Program Files (x86)\DriverToolkit 2014-05-17 11:46 - 2014-05-17 11:39 - 00000000 ____D () C:\Users\Horst\Desktop\hdr1.extended.warnerfix.1080p-xell 2014-05-17 11:45 - 2014-04-01 18:34 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-17 11:38 - 2014-04-01 18:34 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-17 11:38 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-05-17 11:08 - 2014-03-31 13:35 - 00000000 ___RD () C:\Users\Horst\SkyDrive 2014-05-17 11:08 - 2014-03-31 13:34 - 00000000 ___RD () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-17 11:08 - 2014-03-31 13:34 - 00000000 ___RD () C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-17 11:06 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData 2014-05-17 11:06 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore 2014-05-17 11:06 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates 2014-05-17 10:56 - 2014-05-17 10:56 - 00015910 _____ () C:\Windows\system32\results.xml 2014-05-17 10:53 - 2014-05-17 10:53 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk 2014-05-17 10:53 - 2014-05-17 10:53 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-17 10:53 - 2014-03-31 13:40 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-17 10:51 - 2014-03-31 13:40 - 00000000 ____D () C:\Intel 2014-05-17 10:48 - 2014-05-17 10:48 - 00002716 _____ () C:\Windows\System32\Tasks\DriverToolkit Autorun 2014-05-17 10:48 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-05-17 10:42 - 2014-05-17 10:42 - 02395840 _____ (Megaify Software ) C:\Users\Horst\Downloads\driver_setup.exe 2014-05-17 10:42 - 2014-05-17 10:42 - 00000000 ____D () C:\Users\Horst\AppData\Local\DriverToolkit 2014-05-17 10:36 - 2014-05-17 10:35 - 00000000 ____D () C:\Users\Horst\Downloads\VGA_Pega_Intel_Win8_64_VER918103293 2014-05-17 10:28 - 2014-05-17 10:25 - 147055896 _____ (Intel Corporation) C:\Users\Horst\Downloads\win64_153318.exe 2014-05-17 10:24 - 2014-05-17 10:24 - 00000000 ____D () C:\Users\Horst\SystemRequirementsLab 2014-05-17 10:24 - 2014-05-17 10:24 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab 2014-05-17 10:24 - 2014-03-31 13:33 - 00000000 ____D () C:\Users\Horst 2014-05-17 10:23 - 2014-05-17 10:23 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-17 10:23 - 2014-05-17 10:23 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-17 10:23 - 2014-05-17 10:23 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-17 10:23 - 2014-05-17 10:23 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-17 10:23 - 2014-05-17 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-17 10:23 - 2014-05-17 10:23 - 00000000 ____D () C:\Program Files (x86)\Java 2014-05-17 10:23 - 2014-04-03 23:33 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-17 10:20 - 2014-05-17 10:19 - 00004161 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-17 10:18 - 2014-05-17 10:18 - 00405504 _____ () C:\Users\Horst\Downloads\intel_srldetect_4.5.13.0.msi 2014-05-17 09:45 - 2014-05-17 09:45 - 00001118 _____ () C:\Users\Horst\Desktop\EVEREST Home Edition.lnk 2014-05-17 09:45 - 2014-05-17 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2014-05-17 09:45 - 2014-05-17 09:45 - 00000000 ____D () C:\Program Files (x86)\Lavalys 2014-05-16 20:22 - 2014-05-16 20:19 - 00000000 ____D () C:\Users\Horst\Desktop\usb 2014-05-16 18:21 - 2014-05-16 18:21 - 01141680 _____ () C:\Users\Horst\Downloads\SteamSetup.exe 2014-05-16 18:21 - 2014-05-16 18:21 - 00000975 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-05-16 18:21 - 2014-05-16 18:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2014-05-16 18:20 - 2014-03-31 13:48 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-05-16 12:33 - 2014-03-31 15:47 - 00000000 ____D () C:\Program Files (x86)\Diablo III 2014-05-12 23:10 - 2014-05-02 12:37 - 00236605 _____ () C:\Users\Horst\Downloads\Tankbuch_Leon2014.ods 2014-05-12 23:06 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness 2014-05-10 19:55 - 2014-03-31 13:44 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-05-10 19:55 - 2014-03-31 13:44 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-05-10 19:34 - 2014-05-10 19:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-10 19:34 - 2014-05-10 19:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-09 01:31 - 2014-05-10 20:50 - 1516007424 _____ () C:\Users\Horst\Downloads\Bad.Neighbours.2014.TS.LD.German.XViD-FiSTER.avi 2014-05-06 14:31 - 2013-08-22 16:44 - 00360464 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-06 06:40 - 2014-05-17 09:47 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 05:25 - 2014-05-17 09:47 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:00 - 2014-05-17 09:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-17 09:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-05 11:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-05 11:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-05-05 11:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools 2014-05-05 11:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-05 11:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup 2014-05-05 11:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\uk-UA 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\th-TH 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sl-SI 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ro-RO 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\lv-LV 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\lt-LT 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\hr-HR 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\he-IL 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\et-EE 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\en-GB 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\bg-BG 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ar-SA 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices 2014-05-05 11:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Multimedia Platform 2014-05-05 11:28 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-05-05 11:28 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-05-05 11:28 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep 2014-05-05 11:28 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe 2014-05-05 11:28 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism 2014-05-05 11:28 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing 2014-05-05 11:03 - 2014-05-05 11:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-05 11:03 - 2014-05-05 11:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-05 11:01 - 2014-05-05 11:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-05 11:01 - 2014-05-05 11:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-05 11:01 - 2014-05-05 11:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-05 11:01 - 2014-05-05 11:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-05 11:00 - 2014-05-05 11:00 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-05 11:00 - 2014-05-05 11:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll Some content of TEMP: ==================== C:\Users\Horst\AppData\Local\Temp\swt-win32-3349.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-27 04:03 ==================== End Of Log ============================ --- --- --- |
04.06.2014, 08:34 | #4 |
/// the machine /// TB-Ausbilder | Kann nur noch Facebook Youtube und google öffnen :/ Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool Setze einen Haken bei folgenden Einträgen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Kann nur noch Facebook Youtube und google öffnen :/ |
andere, anhang, bricht, community, direkt, facebook, google, inter, interne, internet, lanverbindung, laptop, nichtmehr, seite, seiten, sobald, spotify, stecker, verbindung, wlan, youtube, öffnen |