| |
| |||||||
Log-Analyse und Auswertung: Sicheres Löschen von "PSHD-9.9"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
10.06.2014, 20:22
| #31 |
 |  Sicheres Löschen von "PSHD-9.9" puuh. das hat gedauert. Hier das Ergebniss: Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=d65e174207ca9a4e94d1c9514011f35b
# engine=18648
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-10 05:45:13
# local_time=2014-06-10 07:45:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=782 16777213 100 95 480293 480758 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 26126 154052163 0 0
# scanned=1073483
# found=44
# cleaned=0
# scan_time=21829
sh=34622C0C9B0F72AB2F67AE3BD7CF94EF76B2B54D ft=1 fh=422f90d5b5335443 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.24.6\deltaApp.dll.vir"
sh=80C8F13A1918FAEEAB9673C1CCF96E52325EE695 ft=1 fh=0aefb751d92be997 vn="möglicherweise Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.24.6\deltaEng.dll.vir"
sh=4400797578E17E511E6164469770A80E828DDA3A ft=1 fh=56dbbea16253a143 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.24.6\deltasrv.exe.vir"
sh=610CDC3A03DA21A83EB90193BACF1347AAA39A0F ft=1 fh=6544723ffe1f3f66 vn="Variante von Win32/Toolbar.Montiera.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll.vir"
sh=AFD5B25F86CFD3045CCFF940A249A1DA89DEDE5D ft=1 fh=c55a3c08e5709f9a vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.24.6\uninstall.exe.vir"
sh=66AE7973E507FF0471DECFFF3BF7FFD40EA4D00D ft=1 fh=1b697967a44eb4e0 vn="Variante von Win32/Toolbar.Escort.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll.vir"
sh=2900BFFDB9BA25B5F8B0C5DB9B3FBF2584630BD8 ft=1 fh=13f46184ac52d101 vn="Variante von Win32/BrowseFox.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\raving reyven\ravingreyvenBHO.dll.vir"
sh=BC7F5A4FDB3AABC310EE7335EBDCF93718D7892D ft=1 fh=dd8bcf7fac821ec8 vn="Win32/BrowseFox.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\raving reyven\ravingreyvenUninstall.exe.vir"
sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\DSearchLink\DSearchLink.exe.vir"
sh=410A648EB8392D7407D264CF6C1090D044D044D6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.52_0\extensionData\plugins\266.js.vir"
sh=B563BEC7EC0608AB8EBC51C5E228C9270DAC0A09 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.52_0\extensionData\plugins\91.js.vir"
sh=1549CF4F9282F1B42A58B5E050E12EF0AD669798 ft=1 fh=ffe6693d8bc7d6c5 vn="Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir"
sh=410A648EB8392D7407D264CF6C1090D044D044D6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\p4ytj1qg.default\Extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com\extensionData\plugins\266.js.vir"
sh=B563BEC7EC0608AB8EBC51C5E228C9270DAC0A09 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\p4ytj1qg.default\Extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com\extensionData\plugins\91.js.vir"
sh=C6856C32ECEF81A37AFEE5929F0AF5CBB7F4029C ft=1 fh=1edb99ab84c070e7 vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\OpenCandy\047B6AD5218541D8887FB63F787F45A7\Installer.exe.vir"
sh=C4420C6E94B8CAACCB3811384280D8A93CB0A37D ft=1 fh=25f111c507a31a21 vn="Win32/Toolbar.Conduit.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\OpenCandy\9704D4A78C99416F8C1A80799D37D167\sp-downloader.exe.vir"
sh=829D808C091045F45C513A6E4AB17055A52A9320 ft=1 fh=282fb76e1825b814 vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\OpenCandy\CF0345E8436546F3A1A4EF36E3BD3BD5\DeltaTB.exe.vir"
sh=829D808C091045F45C513A6E4AB17055A52A9320 ft=1 fh=282fb76e1825b814 vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\OpenCandy\D07680A3D8C647DB910A520A76BF62FE\DeltaTB.exe.vir"
sh=DE1BAF2B3031DDBD4A49E25A98146255826050DD ft=1 fh=757c80b16141ae2a vn="Variante von Win64/Agent.BR Trojaner" ac=I fn="C:\FRST\Quarantine\C\Windows\System32\DlProtectSvc.exe.xBAD"
sh=21C23C470BDABB763D2FC372D86E9D3FB9F923AE ft=1 fh=1a43b0206fc57ad6 vn="Variante von Win32/Packed.VMProtect.AAA Trojaner" ac=I fn="C:\Program Files (x86)\Codemasters\DiRT 3\paul.dll"
sh=5B31FB5741304E8486ACFD81E30B314B87A28E9F ft=1 fh=b4b60b69ec22cbd1 vn="Variante von Win32/Packed.VMProtect.AAA Trojaner" ac=I fn="C:\Program Files (x86)\Codemasters\DiRT 3\SKIDROW.dll"
sh=21C23C470BDABB763D2FC372D86E9D3FB9F923AE ft=1 fh=1a43b0206fc57ad6 vn="Variante von Win32/Packed.VMProtect.AAA Trojaner" ac=I fn="C:\Program Files (x86)\Codemasters\DiRT 3\SKIDROW\paul.dll"
sh=5B31FB5741304E8486ACFD81E30B314B87A28E9F ft=1 fh=b4b60b69ec22cbd1 vn="Variante von Win32/Packed.VMProtect.AAA Trojaner" ac=I fn="C:\Program Files (x86)\Codemasters\DiRT 3\SKIDROW\SKIDROW.dll"
sh=125B9DE3FAAD6CF9EE69248A68BA8985F4FFF7A3 ft=1 fh=ed34fb4d2d3beb95 vn="Variante von Win32/Packed.VMProtect.AAD Trojaner" ac=I fn="C:\Program Files (x86)\EA\Bulletstorm\Binaries\Win32\xlive.dll"
sh=6009080E755AC30EB0ADFEBB4D333D531A6E64AE ft=1 fh=5cf9708d1424091a vn="Variante von Win32/Packed.VMProtect.AAH Trojaner" ac=I fn="C:\Program Files (x86)\FIFA 13\FIFA.13.Update.v1.7.MULTI5.exe"
sh=A32AA942597786B380ABDA361918B5E6BF4F26D1 ft=1 fh=e10233d53431d7f2 vn="Variante von Win32/Packed.VMProtect.AAH Trojaner" ac=I fn="C:\Program Files (x86)\FIFA 13\Game\rld.dll"
sh=38E88012B276963FABD68B69A9FDBAE98EF98B0B ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.VMProtect.AAH Trojaner" ac=I fn="C:\Program Files (x86)\KONAMI\Pro Evolution Soccer 2014\Pro.Evolution.Soccer.2014.Update.v1.01-RELOADED (1).rar"
sh=26A4D8D46950F6A36CE4C678DC1BA36F63980EAB ft=1 fh=5b1a47320b91d0bf vn="Variante von Win32/Packed.VMProtect.AAH Trojaner" ac=I fn="C:\Program Files (x86)\KONAMI\Pro Evolution Soccer 2014\rld.dll"
sh=26A4D8D46950F6A36CE4C678DC1BA36F63980EAB ft=1 fh=5b1a47320b91d0bf vn="Variante von Win32/Packed.VMProtect.AAH Trojaner" ac=I fn="C:\Program Files (x86)\KONAMI\Pro Evolution Soccer 2014\Crack\rld.dll"
sh=3F129A11DB1B7E30E5C5F87EBEE81DB9BE6FE1E1 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.VMProtect.AAN Trojaner" ac=I fn="C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\Fairlight.rar"
sh=38EB819B95824087D6C7B888A3EECDF91BE61BBB ft=1 fh=f998eb64c89b246b vn="Variante von Win32/Packed.VMProtect.AAN Trojaner" ac=I fn="C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\xlive.dll"
sh=3F129A11DB1B7E30E5C5F87EBEE81DB9BE6FE1E1 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.VMProtect.AAN Trojaner" ac=I fn="C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\Fairlight\Fairlight.rar"
sh=38EB819B95824087D6C7B888A3EECDF91BE61BBB ft=1 fh=f998eb64c89b246b vn="Variante von Win32/Packed.VMProtect.AAN Trojaner" ac=I fn="C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\Fairlight\xlive.dll"
sh=38EB819B95824087D6C7B888A3EECDF91BE61BBB ft=1 fh=f998eb64c89b246b vn="Variante von Win32/Packed.VMProtect.AAN Trojaner" ac=I fn="C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\Fairlight\Fairlight\xlive.dll"
sh=90E222E0B9C756F60EC259673B2D8B4A8730A548 ft=1 fh=3d9a751a37302964 vn="Win32/Adware.1ClickDownload.W Anwendung" ac=I fn="C:\Users\Gast\Downloads\spring_breakers.exe"
sh=410A648EB8392D7407D264CF6C1090D044D044D6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Sicherungsstandart\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.52_0\extensionData\plugins\266.js"
sh=B563BEC7EC0608AB8EBC51C5E228C9270DAC0A09 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Sicherungsstandart\Extensions\aaipilfmheplbcghignccoiiebekkdhe\1.26.52_0\extensionData\plugins\91.js"
sh=ADE8C9E01E2E3344E9A3CD08635B42B76A72FC27 ft=1 fh=c3985d9fc1a4e828 vn="Variante von Win32/DomaIQ.BB evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Sicherungsstandart\File System\007\t\00\00000001"
sh=C82B2281A285CCA916CEFD093BB0D656B7AA19E7 ft=0 fh=0000000000000000 vn="Win32/HackTool.Dhos.A Trojaner" ac=I fn="C:\Users\Sven\Desktop\Datein\lc next trailer\thc-ssl-dos-1.4-win-bin.zip"
sh=5B03CCE8ECEFFBD580FA27EF231F26A77B87B4C0 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.VMProtect.AAM Trojaner" ac=I fn="C:\Users\Sven\Desktop\Datein\loe\Lord_of_the_Rings_War_in_the_North_Kecks.rar"
sh=53710D0AF5A0F57FA49F7183EA0395D3AC1D4791 ft=1 fh=d5332291d75852c0 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI6E5.tmp-\Smartbar.Resources.LanguageSettings.resources.dll"
sh=A11FFA5A1D425D910E4D8170EB6FA24797931534 ft=1 fh=d53347eea837f487 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI6E5.tmp-\srbs.dll"
sh=672193D67875EDDA3C0B7D7A5E96A1730FFA718D ft=1 fh=e8f98f8756d96124 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI999F.tmp-\Smartbar.Resources.SetBrowsersSettings.dll"
sh=4FDD66ECAAFBCC53B9CEFEB9B5544F5B9106BFB8 ft=1 fh=29ea3da0b198764a vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="C:\zoek_backup\C_Users_Sven_Desktop_Datein_pkm_SoftonicDownloader_fuer_visualboyadvance.exe.vir"
Code:
ATTFilter
Results of screen317's Security Check version 0.99.83
Windows 7 Service Pack 1 x64 (UAC is disabled!)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java(TM) 6 Update 27
Java 7 Update 55
Adobe Flash Player 13.0.0.214
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox (AddOn.)
Google Chrome 35.0.1916.114
````````Process Check: objlist.exe by Laurent````````
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-06-2014 01
Ran by Sven (administrator) on SVEN-PC on 10-06-2014 21:18:33
Running from C:\Users\Sven\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Dropbox, Inc.) C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
() C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2245120 2009-07-15] (VIA)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2010-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [G Data AntiVirus Tray Application] => C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe
HKLM-x32\...\Run: [avgnt] => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3859320 2014-06-05] (AVAST Software)
HKU\S-1-5-21-1098949856-1301053314-1890294551-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528 2010-05-02] ()
HKU\S-1-5-21-1098949856-1301053314-1890294551-1001\...\Run: [NVIDIA nTune] => C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe [98304 2007-09-04] (NVIDIA)
HKU\S-1-5-21-1098949856-1301053314-1890294551-1001\...\Run: [Auto KTR] => C:\Users\Sven\Downloads\Dm.De.M.C.Co.Edit-PROP\Kaspersky Internet Security 2014 + Trial + Kaspersky World\Kaspersky_Internet_Security_Trial_Reset_2.1_by_Humschi_1857\KIS14 TrialReset.exe -silent
HKU\S-1-5-21-1098949856-1301053314-1890294551-1001\...\MountPoints2: {732ced11-838c-11df-934f-002618bca0f6} - E:\raf-skyrim.exe
HKU\S-1-5-21-1098949856-1301053314-1890294551-1001\...\MountPoints2: {c6647fc0-dbee-11e1-b1d5-806e6f6e6963} - E:\setup.exe
Startup: C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sven\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x27BB72947FE9CA01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\p4ytj1qg.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Sven\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Sven\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Sven\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPandoWebInst.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\p4ytj1qg.default\Extensions\ich@maltegoetz.de [2014-05-20]
FF Extension: Protegere - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\p4ytj1qg.default\Extensions\security@protegere.org [2014-06-05]
FF Extension: TrashMail.net - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\p4ytj1qg.default\Extensions\spam@trashmail.net.xpi [2011-10-11]
FF Extension: Fox!Box - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\p4ytj1qg.default\Extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8}.xpi [2011-04-03]
FF Extension: User Agent Switcher - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\p4ytj1qg.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi [2011-12-25]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-05]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Drive) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-05]
CHR Extension: (YouTube) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-05]
CHR Extension: (Google Search) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-05]
CHR Extension: (Google Wallet) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-05]
CHR Extension: (Gmail) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-05]
CHR HKLM-x32\...\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-06-05]
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-06-05] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-10-01] () [File not signed]
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3772784 2010-05-10] (INCA Internet Co., Ltd.) [File not signed]
R2 nTuneService; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [180224 2007-09-04] (NVIDIA) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-12] ()
S2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [97552 2012-03-22] (SANDBOXIE L.T.D)
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-08-21] (Mister Group)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [738152 2012-07-19] (Tunngle.net GmbH) [File not signed]
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-06-05] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-06-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-06-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-06-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-06-05] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-06-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-06-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-06-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-06-05] ()
R2 DRHARD64; C:\Windows\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software)
R2 DRHARD64; C:\Windows\SysWOW64\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software)
R2 DRHMSR64; C:\Windows\system32\drivers\DRHMSR64.sys [14760 2011-12-06] ()
R2 DRHMSR64; C:\Windows\SysWOW64\drivers\DRHMSR64.sys [14760 2011-12-06] ()
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [65912 2012-03-08] (G Data Software AG)
R3 KMWDFILTERV1; C:\Windows\System32\DRIVERS\RPGMOUSEV1.sys [24576 2009-06-10] (Windows (R) Codename Longhorn DDK provider)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 nocashio; C:\Windows\SysWOW64\drivers\nocashio.sys [4096 2010-08-18] () [File not signed]
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-04] (INCA Internet Co., Ltd.) [File not signed]
R3 NVR0Dev; C:\Windows\nvoclk64.sys [39968 2007-09-04] (NVidia Corp.)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [155136 2012-05-08] (SANDBOXIE L.T.D) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-10-10] (Duplex Secure Ltd.)
S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2007-10-25] () [File not signed]
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net) [File not signed]
R2 WinRing0_1_2_0; C:\Users\Sven\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries24.gadget\WinRing0x64.sys [14544 2010-05-02] (OpenLibSys.org)
R3 wod0205; C:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software)
U3 a242qqk6; C:\Windows\System32\Drivers\a242qqk6.sys [0 ] (Advanced Micro Devices)
S3 DRHARD; \??\C:\Windows\system32\DRIVERS\DRHARD.SYS [X]
S3 dump_wmimmc; \??\C:\Program Files (x86)\Gameforge4D\CABAL Online\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-10 21:01 - 2014-06-10 20:56 - 00854367 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-06-10 20:56 - 2014-06-10 20:56 - 00854367 _____ () C:\Users\Sven\Downloads\SecurityCheck.exe
2014-06-10 13:38 - 2014-06-10 13:38 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-06-10 13:27 - 2014-06-10 13:34 - 00062170 _____ () C:\Users\Sven\Desktop\SystemLook.txt
2014-06-10 13:26 - 2014-06-10 13:26 - 00165376 _____ () C:\Users\Sven\Downloads\SystemLook_x64.exe
2014-06-10 13:26 - 2014-06-10 13:26 - 00165376 _____ () C:\Users\Sven\Desktop\SystemLook_x64.exe
2014-06-10 13:06 - 2014-06-10 13:06 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-06-10 13:06 - 2014-06-10 13:06 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-06-10 13:06 - 2014-06-10 13:06 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-06-10 13:06 - 2014-06-10 13:06 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-06-10 12:55 - 2014-06-10 12:55 - 00014016 _____ () C:\Users\Sven\Desktop\MBAM 2.txt
2014-06-10 12:29 - 2014-06-10 21:19 - 00000000 ____D () C:\Users\Sven\AppData\Local\Temp
2014-06-10 12:29 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp
2014-06-10 12:29 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\Gast\AppData\Local\Temp
2014-06-10 12:29 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\Default\AppData\Local\Temp
2014-06-10 12:29 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\Default User\AppData\Local\Temp
2014-06-10 12:29 - 2014-06-10 12:00 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-10 12:23 - 2014-06-10 12:23 - 00017954 _____ () C:\Users\Sven\Desktop\MMBAM TEXT.txt
2014-06-10 12:04 - 2014-06-10 12:30 - 00032826 _____ () C:\zoek-results.log
2014-06-10 12:04 - 2014-06-10 12:04 - 00003180 _____ () C:\Windows\System32\Tasks\{7D573011-FC61-42C2-A61F-1E0B7044A895}
2014-06-10 12:03 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Sven\Downloads\zoek.scr
2014-06-10 12:03 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Sven\Downloads\zoek.com
2014-06-10 12:02 - 2014-06-10 12:02 - 04235784 _____ () C:\Users\Sven\Downloads\zoek.rar
2014-06-10 12:00 - 2014-06-10 12:22 - 00000000 ____D () C:\zoek_backup
2014-06-10 11:58 - 2014-06-10 11:58 - 00000886 _____ () C:\Users\Sven\Desktop\mbam.txt
2014-06-10 11:56 - 2014-06-10 11:56 - 00000652 _____ () C:\Users\Sven\Desktop\MAAABM.txt
2014-06-10 11:49 - 2014-06-10 11:49 - 00016076 _____ () C:\Users\Sven\Desktop\teeext.txt
2014-06-10 11:35 - 2014-06-10 11:36 - 04094386 _____ () C:\Users\Sven\Downloads\zoek.zip
2014-06-10 11:35 - 2014-06-10 11:35 - 01285120 _____ () C:\Users\Sven\Downloads\zoek.exe
2014-06-10 11:28 - 2014-06-10 12:54 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-10 11:28 - 2014-06-10 11:28 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-10 11:28 - 2014-06-10 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-06-10 11:28 - 2014-06-10 11:28 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-06-10 11:28 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-10 11:28 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-10 11:26 - 2014-06-10 11:27 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sven\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-10 11:18 - 2014-06-10 11:19 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sven\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-10 11:07 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-10 11:02 - 2014-06-10 11:11 - 00000000 ____D () C:\AdwCleaner
2014-06-10 11:01 - 2014-06-10 11:01 - 01333465 _____ () C:\Users\Sven\Downloads\adwcleaner_3.212.exe
2014-06-10 01:28 - 2014-06-10 01:28 - 00000042 _____ () C:\Users\Sven\Downloads\sl.dta
2014-06-10 01:11 - 2014-06-10 02:09 - 00000000 ____D () C:\Users\Sven\Downloads\NextChaos
2014-06-10 00:01 - 2014-06-10 01:10 - 1956407488 _____ () C:\Users\Sven\Downloads\NextChaos.zip
2014-06-09 15:56 - 2014-06-10 12:59 - 00087456 _____ () C:\Users\Sven\Downloads\Addition.txt
2014-06-09 15:04 - 2014-06-10 21:19 - 00018982 _____ () C:\Users\Sven\Downloads\FRST.txt
2014-06-09 15:04 - 2014-06-10 21:18 - 00000000 ____D () C:\FRST
2014-06-09 15:03 - 2014-06-09 15:04 - 02080768 _____ (Farbar) C:\Users\Sven\Downloads\FRST64.exe
2014-06-09 15:00 - 2014-06-09 15:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sven\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 04:51 - 2014-06-09 04:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2014-06-09 04:44 - 2014-06-09 04:44 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\MotioninJoy
2014-06-09 04:43 - 2014-06-09 04:43 - 00000883 _____ () C:\Users\Public\Desktop\DS3 Tool.lnk
2014-06-09 04:43 - 2014-06-09 04:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy
2014-06-09 04:43 - 2014-06-09 04:43 - 00000000 ____D () C:\Program Files\MotioninJoy
2014-06-09 04:43 - 2012-05-12 12:31 - 00121416 _____ (MotioninJoy) C:\Windows\system32\Drivers\MijXfilt.sys
2014-06-09 04:43 - 2011-12-07 19:42 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2014-06-09 04:43 - 2011-12-07 19:42 - 00328712 _____ (Logitech Inc.) C:\Windows\system32\MijFrc.dll
2014-06-09 04:43 - 2011-12-07 19:42 - 00074960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xusb21.sys
2014-06-09 04:39 - 2014-06-09 04:40 - 04117346 _____ () C:\Users\Sven\Downloads\MotioninJoy_071001_signed.zip
2014-06-09 04:39 - 2014-06-09 04:40 - 04117346 _____ () C:\Users\Sven\Downloads\MotioninJoy_071001_signed (1).zip
2014-06-07 05:44 - 2014-06-08 06:33 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Tropico 4
2014-06-07 05:42 - 2014-06-07 05:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tropico 4 Collectors Bundle
2014-06-07 05:38 - 2014-06-07 05:44 - 00000000 ____D () C:\Program Files (x86)\Tropico 4 Collectors Bundle
2014-06-06 01:14 - 2014-06-06 01:27 - 00000000 ____D () C:\Users\Sven\Downloads\Manuellsen-MB3 (Premium Edition)
2014-06-05 22:54 - 2014-06-10 17:22 - 00000000 ____D () C:\Users\Sven\Downloads\C&A Akup
2014-06-05 07:34 - 2014-06-05 07:34 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\dvdcss
2014-06-05 06:51 - 2014-06-05 06:51 - 00000402 _____ () C:\Users\Sven\Downloads\CD-Laufwerk - Verknüpfung.lnk
2014-06-05 06:43 - 2014-06-05 06:43 - 00000000 ____D () C:\Program Files (x86)\G DATA Software
2014-06-05 06:20 - 2014-06-05 06:20 - 01180529 _____ () C:\Windows\unins000.exe
2014-06-05 06:20 - 2014-06-05 06:20 - 00001229 _____ () C:\Windows\unins000.dat
2014-06-05 06:17 - 2014-06-05 06:17 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\AVAST Software
2014-06-05 06:16 - 2014-06-10 11:51 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-06-05 06:16 - 2014-06-05 06:16 - 00001984 _____ () C:\Users\Public\Desktop\avast! SafeZone.lnk
2014-06-05 06:16 - 2014-06-05 06:16 - 00001924 _____ () C:\Users\Public\Desktop\avast! Pro Antivirus.lnk
2014-06-05 06:16 - 2014-06-05 06:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-06-05 06:16 - 2014-06-05 06:14 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-06-05 06:16 - 2014-06-05 06:14 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-06-05 06:16 - 2014-06-05 06:14 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-06-05 06:16 - 2014-06-05 06:14 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-06-05 06:16 - 2014-06-05 06:14 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-06-05 06:16 - 2014-06-05 06:14 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-06-05 06:16 - 2014-06-05 06:14 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-06-05 06:16 - 2014-06-05 06:14 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-06-05 06:15 - 2014-06-05 06:14 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-06-05 06:15 - 2014-06-05 06:14 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-06-05 06:14 - 2014-06-05 06:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-06-05 06:13 - 2014-06-05 06:13 - 00000000 ____D () C:\Program Files\AVAST Software
2014-06-05 06:12 - 2014-06-05 06:12 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-06-05 03:22 - 2014-06-05 03:22 - 00003836 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1401931354
2014-06-05 03:22 - 2014-06-05 03:22 - 00001133 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-06-05 03:22 - 2014-06-05 03:22 - 00001133 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-06-05 03:22 - 2014-06-05 03:22 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Opera Software
2014-06-05 03:22 - 2014-06-05 03:22 - 00000000 ____D () C:\Users\Sven\AppData\Local\Opera Software
2014-06-05 03:22 - 2014-06-05 03:22 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-05 03:13 - 2014-06-05 03:13 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-05 02:05 - 2014-06-10 11:49 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\KW
2014-06-05 01:52 - 2014-06-05 02:06 - 00000021 _____ () C:\AKTR.timestamp
2014-06-05 01:46 - 2014-06-05 04:55 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-06-04 15:13 - 2014-06-06 01:23 - 00000000 ____D () C:\Users\Sven\Downloads\_n`y1B_X$-
2014-06-04 11:49 - 2014-06-10 20:02 - 00048537 _____ () C:\Windows\setupact.log
2014-06-04 11:49 - 2014-06-04 11:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-04 11:48 - 2014-06-10 13:19 - 00019796 _____ () C:\Windows\PFRO.log
2014-06-04 11:22 - 2014-06-04 11:22 - 00001021 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-04 11:22 - 2014-06-04 11:22 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\dlg
2014-06-04 11:20 - 2014-06-04 11:20 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Security System 2
2014-06-03 10:13 - 2014-06-03 10:13 - 00003092 _____ () C:\Windows\System32\Tasks\{107A92FE-4711-4473-8E02-B7C9963E7371}
2014-05-30 20:17 - 2014-05-30 20:17 - 00003112 _____ () C:\Windows\System32\Tasks\{F83E546C-96CD-4EB6-8305-C82BC2EE455A}
2014-05-30 20:13 - 2014-05-30 20:13 - 00003112 _____ () C:\Windows\System32\Tasks\{11911F7C-AFE3-47ED-9FF5-A0B6F51AB520}
2014-05-29 20:03 - 2014-05-29 20:03 - 00000000 ____D () C:\ProgramData\Orbit
2014-05-29 19:43 - 2014-05-29 19:43 - 00000000 ____D () C:\Users\Sven\Downloads\KC Rebell - Rebellution (incl. 3 Bonustracks) (DE, 2014, VOiCE)
2014-05-29 19:24 - 2014-05-28 23:52 - 00000000 ____D () C:\Users\Sven\Downloads\KC Rebell - Rebellution (Premium Edition)
2014-05-29 19:13 - 2014-05-29 19:13 - 00000000 ____D () C:\Program Files\Ubisoft
2014-05-29 08:38 - 2014-05-29 19:51 - 00001205 _____ () C:\Users\Sven\Desktop\Uplay.lnk
2014-05-29 08:38 - 2014-05-29 08:38 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-05-29 08:38 - 2014-05-29 08:38 - 00000000 ____D () C:\Users\Sven\AppData\Local\Ubisoft Game Launcher
2014-05-29 01:48 - 2014-06-04 22:12 - 00000000 ____D () C:\Users\Sven\Downloads\GZ-LC EP3
2014-05-24 19:23 - 2014-06-09 15:37 - 00000000 ____D () C:\Users\Sven\Downloads\Al-Gear - Wieder Mal Angeklagt (Milfhunter Edition) (2014) 1
2014-05-22 07:09 - 2014-05-22 07:10 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\MAGIX
2014-05-22 07:09 - 2014-05-22 07:09 - 00001044 _____ () C:\Users\Public\Desktop\MAGIX Video Pro X6.lnk
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Sven\Documents\MAGIX_MusicEditor
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Sven\AppData\Local\Xara
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Sven\AppData\Local\Magix
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-05-22 07:08 - 2014-05-22 07:08 - 00000000 ____D () C:\Program Files\Common Files\MAGIX Shared
2014-05-22 07:06 - 2014-05-22 07:10 - 00000000 ___RD () C:\Users\Sven\Documents\MAGIX
2014-05-22 07:06 - 2014-05-22 07:10 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-22 07:06 - 2014-05-22 07:06 - 00000000 ____D () C:\Program Files\MAGIX
2014-05-22 07:06 - 2014-05-22 07:06 - 00000000 ____D () C:\Program Files\Common Files\MAGIX Services
2014-05-22 07:06 - 2014-05-22 07:06 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-05-22 03:19 - 2014-05-22 03:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-05-22 03:11 - 2014-05-22 03:12 - 00000000 ____D () C:\Users\Sven\Documents\My CamStudio Temp Files
2014-05-22 03:10 - 2014-05-22 03:13 - 00004535 _____ () C:\Users\Sven\AppData\Roaming\CamStudio.cfg
2014-05-22 03:10 - 2014-05-22 03:13 - 00000124 _____ () C:\Users\Sven\AppData\Roaming\Camdata.ini
2014-05-22 03:09 - 2014-05-22 03:10 - 00000096 _____ () C:\Users\Sven\AppData\Roaming\version2.xml
2014-05-22 03:09 - 2014-05-22 03:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio 2.7
2014-05-22 03:09 - 2014-05-22 03:09 - 00000000 ____D () C:\Program Files\CamStudio 2.7
2014-05-22 03:02 - 2014-05-22 03:21 - 00000738 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-05-20 02:04 - 2014-05-20 02:04 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-05-20 02:04 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 02:04 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 02:04 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 02:04 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 01:47 - 2014-05-20 01:47 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\InstallShield
2014-05-20 01:33 - 2014-05-20 01:33 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\FreeHideIP
2014-05-20 01:33 - 2014-05-20 01:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Hide IP
2014-05-20 01:33 - 2014-05-20 01:33 - 00000000 ____D () C:\ProgramData\FreeHideIP
2014-05-20 01:33 - 2014-05-20 01:33 - 00000000 ____D () C:\Program Files (x86)\FreeHideIP
2014-05-17 02:34 - 2014-06-09 15:41 - 00000000 ____D () C:\Users\Sven\Downloads\GalaxyLC
2014-05-16 18:58 - 2014-05-27 03:58 - 00000000 ____D () C:\Users\Sven\Downloads\Vorms EP3(projet)
2014-05-15 12:42 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 12:42 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 12:42 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 12:42 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 12:42 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 12:42 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 21:46 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 21:45 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 21:45 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 21:45 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 21:45 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 21:45 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 21:45 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 21:45 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 21:45 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 21:45 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 21:45 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 21:45 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 21:45 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 21:45 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 21:45 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 21:45 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 21:45 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 21:45 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 21:45 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 21:45 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 21:45 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 21:45 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 21:45 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 21:45 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 21:45 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 21:45 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 21:45 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 21:45 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 21:45 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 21:45 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 21:45 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 21:45 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 21:45 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 21:45 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-13 21:12 - 2014-05-13 21:12 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-13 16:44 - 2014-05-27 02:29 - 00000000 ____D () C:\Users\Sven\Downloads\Phoenix LC EP II
2014-05-12 11:48 - 2014-05-27 02:27 - 00000000 ____D () C:\Users\Sven\Downloads\Danaria Last Chaos
==================== One Month Modified Files and Folders =======
2014-06-10 21:19 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\Sven\AppData\Local\Temp
2014-06-10 21:19 - 2014-06-09 15:04 - 00018982 _____ () C:\Users\Sven\Downloads\FRST.txt
2014-06-10 21:19 - 2010-05-02 11:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\PMB Files
2014-06-10 21:18 - 2014-06-09 15:04 - 00000000 ____D () C:\FRST
2014-06-10 21:12 - 2012-07-12 11:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-10 21:02 - 2013-04-03 00:13 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-10 20:56 - 2014-06-10 21:01 - 00854367 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-06-10 20:56 - 2014-06-10 20:56 - 00854367 _____ () C:\Users\Sven\Downloads\SecurityCheck.exe
2014-06-10 20:16 - 2012-05-30 00:00 - 01094370 _____ () C:\Windows\WindowsUpdate.log
2014-06-10 20:02 - 2014-06-04 11:49 - 00048537 _____ () C:\Windows\setupact.log
2014-06-10 19:42 - 2011-12-22 15:59 - 00001134 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1098949856-1301053314-1890294551-1001UA.job
2014-06-10 17:22 - 2014-06-05 22:54 - 00000000 ____D () C:\Users\Sven\Downloads\C&A Akup
2014-06-10 14:56 - 2010-08-25 16:11 - 08029696 ___SH () C:\Users\Sven\Desktop\Thumbs.db
2014-06-10 14:55 - 2012-08-20 16:47 - 00000000 ___RD () C:\Users\Sven\Dropbox
2014-06-10 14:55 - 2012-02-27 23:38 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Dropbox
2014-06-10 14:02 - 2013-04-03 00:13 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-10 13:38 - 2014-06-10 13:38 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-06-10 13:34 - 2014-06-10 13:27 - 00062170 _____ () C:\Users\Sven\Desktop\SystemLook.txt
2014-06-10 13:27 - 2009-07-14 06:45 - 00014608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-10 13:27 - 2009-07-14 06:45 - 00014608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-10 13:26 - 2014-06-10 13:26 - 00165376 _____ () C:\Users\Sven\Downloads\SystemLook_x64.exe
2014-06-10 13:26 - 2014-06-10 13:26 - 00165376 _____ () C:\Users\Sven\Desktop\SystemLook_x64.exe
2014-06-10 13:20 - 2014-05-07 00:52 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\DropboxMaster
2014-06-10 13:19 - 2014-06-04 11:48 - 00019796 _____ () C:\Windows\PFRO.log
2014-06-10 13:19 - 2010-05-02 00:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-10 13:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-10 13:18 - 2011-02-21 01:47 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Sun
2014-06-10 13:06 - 2014-06-10 13:06 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-06-10 13:06 - 2014-06-10 13:06 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-06-10 13:06 - 2014-06-10 13:06 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-06-10 13:06 - 2014-06-10 13:06 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-06-10 12:59 - 2014-06-09 15:56 - 00087456 _____ () C:\Users\Sven\Downloads\Addition.txt
2014-06-10 12:55 - 2014-06-10 12:55 - 00014016 _____ () C:\Users\Sven\Desktop\MBAM 2.txt
2014-06-10 12:54 - 2014-06-10 11:28 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-10 12:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Resources
2014-06-10 12:30 - 2014-06-10 12:04 - 00032826 _____ () C:\zoek-results.log
2014-06-10 12:29 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp
2014-06-10 12:29 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\Gast\AppData\Local\Temp
2014-06-10 12:29 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\Default\AppData\Local\Temp
2014-06-10 12:29 - 2014-06-10 12:29 - 00000000 ____D () C:\Users\Default User\AppData\Local\Temp
2014-06-10 12:23 - 2014-06-10 12:23 - 00017954 _____ () C:\Users\Sven\Desktop\MMBAM TEXT.txt
2014-06-10 12:22 - 2014-06-10 12:00 - 00000000 ____D () C:\zoek_backup
2014-06-10 12:04 - 2014-06-10 12:04 - 00003180 _____ () C:\Windows\System32\Tasks\{7D573011-FC61-42C2-A61F-1E0B7044A895}
2014-06-10 12:02 - 2014-06-10 12:02 - 04235784 _____ () C:\Users\Sven\Downloads\zoek.rar
2014-06-10 12:00 - 2014-06-10 12:29 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-10 11:58 - 2014-06-10 11:58 - 00000886 _____ () C:\Users\Sven\Desktop\mbam.txt
2014-06-10 11:56 - 2014-06-10 11:56 - 00000652 _____ () C:\Users\Sven\Desktop\MAAABM.txt
2014-06-10 11:51 - 2014-06-05 06:16 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-06-10 11:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PLA
2014-06-10 11:49 - 2014-06-10 11:49 - 00016076 _____ () C:\Users\Sven\Desktop\teeext.txt
2014-06-10 11:49 - 2014-06-05 02:05 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\KW
2014-06-10 11:36 - 2014-06-10 11:35 - 04094386 _____ () C:\Users\Sven\Downloads\zoek.zip
2014-06-10 11:35 - 2014-06-10 11:35 - 01285120 _____ () C:\Users\Sven\Downloads\zoek.exe
2014-06-10 11:28 - 2014-06-10 11:28 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-10 11:28 - 2014-06-10 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-06-10 11:28 - 2014-06-10 11:28 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-06-10 11:28 - 2012-03-08 00:36 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Malwarebytes
2014-06-10 11:28 - 2012-03-08 00:36 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-10 11:27 - 2014-06-10 11:26 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sven\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-06-10 11:19 - 2014-06-10 11:18 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sven\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-06-10 11:12 - 2009-07-14 06:45 - 00554864 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-10 11:11 - 2014-06-10 11:02 - 00000000 ____D () C:\AdwCleaner
2014-06-10 11:01 - 2014-06-10 11:01 - 01333465 _____ () C:\Users\Sven\Downloads\adwcleaner_3.212.exe
2014-06-10 03:38 - 2013-04-12 12:21 - 00000000 ____D () C:\Users\Sven\Downloads\01AlpaGun
2014-06-10 03:36 - 2010-05-02 01:31 - 00166832 _____ () C:\Users\Sven\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-10 03:33 - 2012-06-15 00:56 - 00211968 ___SH () C:\Users\Sven\Thumbs.db
2014-06-10 02:09 - 2014-06-10 01:11 - 00000000 ____D () C:\Users\Sven\Downloads\NextChaos
2014-06-10 01:42 - 2011-12-22 15:59 - 00001112 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1098949856-1301053314-1890294551-1001Core.job
2014-06-10 01:28 - 2014-06-10 01:28 - 00000042 _____ () C:\Users\Sven\Downloads\sl.dta
2014-06-10 01:10 - 2014-06-10 00:01 - 1956407488 _____ () C:\Users\Sven\Downloads\NextChaos.zip
2014-06-09 18:26 - 2013-04-30 15:36 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2
2014-06-09 18:22 - 2014-06-09 18:17 - 149696637 _____ () C:\Users\Sven\Downloads\uiii.rar
2014-06-09 15:54 - 2010-05-26 00:11 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-09 15:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-06-09 15:51 - 2009-07-14 20:18 - 00000000 ____D () C:\Windows\ShellNew
2014-06-09 15:51 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-06-09 15:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-06-09 15:49 - 2009-07-14 04:34 - 00000387 _____ () C:\Windows\win.ini
2014-06-09 15:41 - 2014-05-17 02:34 - 00000000 ____D () C:\Users\Sven\Downloads\GalaxyLC
2014-06-09 15:37 - 2014-05-24 19:23 - 00000000 ____D () C:\Users\Sven\Downloads\Al-Gear - Wieder Mal Angeklagt (Milfhunter Edition) (2014) 1
2014-06-09 15:04 - 2014-06-09 15:03 - 02080768 _____ (Farbar) C:\Users\Sven\Downloads\FRST64.exe
2014-06-09 15:01 - 2014-06-09 15:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Sven\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-09 04:51 - 2014-06-09 04:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2014-06-09 04:44 - 2014-06-09 04:44 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\MotioninJoy
2014-06-09 04:43 - 2014-06-09 04:43 - 00000883 _____ () C:\Users\Public\Desktop\DS3 Tool.lnk
2014-06-09 04:43 - 2014-06-09 04:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy
2014-06-09 04:43 - 2014-06-09 04:43 - 00000000 ____D () C:\Program Files\MotioninJoy
2014-06-09 04:40 - 2014-06-09 04:39 - 04117346 _____ () C:\Users\Sven\Downloads\MotioninJoy_071001_signed.zip
2014-06-09 04:40 - 2014-06-09 04:39 - 04117346 _____ () C:\Users\Sven\Downloads\MotioninJoy_071001_signed (1).zip
2014-06-09 01:35 - 2010-06-20 16:07 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype
2014-06-08 06:33 - 2014-06-07 05:44 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Tropico 4
2014-06-07 22:56 - 2010-05-02 00:42 - 00000000 ___RD () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-07 21:03 - 2010-08-01 05:36 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\vlc
2014-06-07 20:12 - 2014-06-09 18:22 - 149696502 _____ () C:\Users\Sven\Downloads\Lucy-Cat - MAGICPOINT MIT ZUNGE - geht das überhaupt 05.06.14.flv
2014-06-07 05:44 - 2014-06-07 05:38 - 00000000 ____D () C:\Program Files (x86)\Tropico 4 Collectors Bundle
2014-06-07 05:42 - 2014-06-07 05:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tropico 4 Collectors Bundle
2014-06-07 05:38 - 2010-05-23 16:08 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\DAEMON Tools Lite
2014-06-06 06:32 - 2009-07-14 19:58 - 00717506 _____ () C:\Windows\system32\perfh007.dat
2014-06-06 06:32 - 2009-07-14 19:58 - 00155122 _____ () C:\Windows\system32\perfc007.dat
2014-06-06 06:32 - 2009-07-14 07:13 - 01657416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-06 01:27 - 2014-06-06 01:14 - 00000000 ____D () C:\Users\Sven\Downloads\Manuellsen-MB3 (Premium Edition)
2014-06-06 01:23 - 2014-06-04 15:13 - 00000000 ____D () C:\Users\Sven\Downloads\_n`y1B_X$-
2014-06-05 23:01 - 2014-04-04 10:42 - 00000000 ____D () C:\Users\Sven\Downloads\Animus
2014-06-05 10:13 - 2012-03-07 22:30 - 00000000 ____D () C:\ProgramData\G DATA
2014-06-05 09:54 - 2012-08-20 23:32 - 00000000 ____D () C:\Users\Sven\Downloads\thc-ssl-dos
2014-06-05 07:34 - 2014-06-05 07:34 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\dvdcss
2014-06-05 07:00 - 2012-10-31 02:28 - 00000000 ____D () C:\Users\Sven\Downloads\GTA 4
2014-06-05 06:56 - 2013-05-09 01:56 - 00000000 ____D () C:\Users\Sven\Downloads\DVD1
2014-06-05 06:54 - 2013-10-04 00:55 - 00000000 ____D () C:\Users\Sven\Downloads\Capo - Hallo Monaco (Fan Edition)
2014-06-05 06:53 - 2012-03-04 22:38 - 00000000 ____D () C:\Users\Sven\Downloads\Bigger.Stronger.Faster.2008.German.AC3.BRRip.Xvid-HOR
2014-06-05 06:52 - 2013-04-19 14:24 - 00000000 ____D () C:\Users\Sven\Downloads\5fu54ggrt
2014-06-05 06:51 - 2014-06-05 06:51 - 00000402 _____ () C:\Users\Sven\Downloads\CD-Laufwerk - Verknüpfung.lnk
2014-06-05 06:43 - 2014-06-05 06:43 - 00000000 ____D () C:\Program Files (x86)\G DATA Software
2014-06-05 06:43 - 2010-05-02 01:01 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-05 06:20 - 2014-06-05 06:20 - 01180529 _____ () C:\Windows\unins000.exe
2014-06-05 06:20 - 2014-06-05 06:20 - 00001229 _____ () C:\Windows\unins000.dat
2014-06-05 06:17 - 2014-06-05 06:17 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\AVAST Software
2014-06-05 06:16 - 2014-06-05 06:16 - 00001984 _____ () C:\Users\Public\Desktop\avast! SafeZone.lnk
2014-06-05 06:16 - 2014-06-05 06:16 - 00001924 _____ () C:\Users\Public\Desktop\avast! Pro Antivirus.lnk
2014-06-05 06:16 - 2014-06-05 06:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-06-05 06:14 - 2014-06-05 06:16 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-06-05 06:14 - 2014-06-05 06:16 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-06-05 06:14 - 2014-06-05 06:16 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-06-05 06:14 - 2014-06-05 06:16 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-06-05 06:14 - 2014-06-05 06:16 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-06-05 06:14 - 2014-06-05 06:16 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-06-05 06:14 - 2014-06-05 06:16 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-06-05 06:14 - 2014-06-05 06:16 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-06-05 06:14 - 2014-06-05 06:15 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-06-05 06:14 - 2014-06-05 06:15 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-06-05 06:14 - 2014-06-05 06:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-06-05 06:13 - 2014-06-05 06:13 - 00000000 ____D () C:\Program Files\AVAST Software
2014-06-05 06:12 - 2014-06-05 06:12 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-06-05 04:55 - 2014-06-05 01:46 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-06-05 03:22 - 2014-06-05 03:22 - 00003836 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1401931354
2014-06-05 03:22 - 2014-06-05 03:22 - 00001133 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-06-05 03:22 - 2014-06-05 03:22 - 00001133 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-06-05 03:22 - 2014-06-05 03:22 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Opera Software
2014-06-05 03:22 - 2014-06-05 03:22 - 00000000 ____D () C:\Users\Sven\AppData\Local\Opera Software
2014-06-05 03:22 - 2014-06-05 03:22 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-05 03:13 - 2014-06-05 03:13 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-05 03:13 - 2011-04-02 01:40 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-05 03:13 - 2010-05-02 01:17 - 00000000 ____D () C:\Users\Sven\AppData\Local\Mozilla
2014-06-05 03:13 - 2010-05-02 01:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-05 03:04 - 2013-04-03 00:14 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-05 02:06 - 2014-06-05 01:52 - 00000021 _____ () C:\AKTR.timestamp
2014-06-05 01:30 - 2014-03-09 11:59 - 00000000 ____D () C:\Users\Sven\AppData\Local\JDownloader 2.0
2014-06-05 00:36 - 2012-05-25 07:38 - 00000000 ____D () C:\Users\Sven\Downloads\Celo & Abdi - Hinterhofjargon
2014-06-04 22:12 - 2014-05-29 01:48 - 00000000 ____D () C:\Users\Sven\Downloads\GZ-LC EP3
2014-06-04 11:49 - 2014-06-04 11:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-04 11:24 - 2010-05-02 11:10 - 00000000 ____D () C:\Windows\pss
2014-06-04 11:22 - 2014-06-04 11:22 - 00001021 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-04 11:22 - 2014-06-04 11:22 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\dlg
2014-06-04 11:22 - 2010-05-02 01:22 - 00000000 ____D () C:\Program Files (x86)\CCleaner
2014-06-04 11:20 - 2014-06-04 11:20 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Security System 2
2014-06-03 10:13 - 2014-06-03 10:13 - 00003092 _____ () C:\Windows\System32\Tasks\{107A92FE-4711-4473-8E02-B7C9963E7371}
2014-05-31 18:15 - 2013-08-31 20:27 - 00000000 ____D () C:\Users\UpdatusUser.Sven-PC
2014-05-31 18:15 - 2013-01-23 23:29 - 00000000 ____D () C:\Users\Gast
2014-05-31 09:42 - 2014-06-09 18:09 - 97747333 _____ () C:\Users\Sven\Downloads\Lucy-Cat - 100-SEKUNDEN-ARSCHFICKWETTE! Wieviel Stöße schaffst du 31.05.14.flv
2014-05-30 20:17 - 2014-05-30 20:17 - 00003112 _____ () C:\Windows\System32\Tasks\{F83E546C-96CD-4EB6-8305-C82BC2EE455A}
2014-05-30 20:13 - 2014-05-30 20:13 - 00003112 _____ () C:\Windows\System32\Tasks\{11911F7C-AFE3-47ED-9FF5-A0B6F51AB520}
2014-05-30 20:02 - 2010-06-20 16:07 - 00000000 ____D () C:\ProgramData\Skype
2014-05-29 20:03 - 2014-05-29 20:03 - 00000000 ____D () C:\ProgramData\Orbit
2014-05-29 20:03 - 2010-07-18 18:57 - 00000000 ____D () C:\Users\Sven\Documents\My Games
2014-05-29 19:52 - 2010-05-02 14:47 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-05-29 19:51 - 2014-05-29 08:38 - 00001205 _____ () C:\Users\Sven\Desktop\Uplay.lnk
2014-05-29 19:51 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-29 19:43 - 2014-05-29 19:43 - 00000000 ____D () C:\Users\Sven\Downloads\KC Rebell - Rebellution (incl. 3 Bonustracks) (DE, 2014, VOiCE)
2014-05-29 19:13 - 2014-05-29 19:13 - 00000000 ____D () C:\Program Files\Ubisoft
2014-05-29 08:38 - 2014-05-29 08:38 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-05-29 08:38 - 2014-05-29 08:38 - 00000000 ____D () C:\Users\Sven\AppData\Local\Ubisoft Game Launcher
2014-05-29 03:49 - 2013-05-09 06:45 - 00000000 ____D () C:\Program Files (x86)\War Thunder
2014-05-28 23:52 - 2014-05-29 19:24 - 00000000 ____D () C:\Users\Sven\Downloads\KC Rebell - Rebellution (Premium Edition)
2014-05-28 15:51 - 2012-08-20 16:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-28 00:55 - 2014-05-07 14:55 - 00000000 ____D () C:\Program Files (x86)\LCGenericName02
2014-05-28 00:28 - 2013-10-01 14:36 - 00000000 ____D () C:\Users\Sven\AppData\Local\ArmA 2 OA
2014-05-27 05:00 - 2012-08-21 07:08 - 00000000 ____D () C:\Users\Sven\AppData\Local\Trainer
2014-05-27 03:58 - 2014-05-16 18:58 - 00000000 ____D () C:\Users\Sven\Downloads\Vorms EP3(projet)
2014-05-27 02:29 - 2014-05-13 16:44 - 00000000 ____D () C:\Users\Sven\Downloads\Phoenix LC EP II
2014-05-27 02:27 - 2014-05-12 11:48 - 00000000 ____D () C:\Users\Sven\Downloads\Danaria Last Chaos
2014-05-22 18:43 - 2011-09-22 15:23 - 00000000 ____D () C:\Fraps
2014-05-22 07:10 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\MAGIX
2014-05-22 07:10 - 2014-05-22 07:06 - 00000000 ___RD () C:\Users\Sven\Documents\MAGIX
2014-05-22 07:10 - 2014-05-22 07:06 - 00000000 ____D () C:\ProgramData\MAGIX
2014-05-22 07:09 - 2014-05-22 07:09 - 00001044 _____ () C:\Users\Public\Desktop\MAGIX Video Pro X6.lnk
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Sven\Documents\MAGIX_MusicEditor
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Sven\AppData\Local\Xara
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Sven\AppData\Local\Magix
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-05-22 07:09 - 2014-05-22 07:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-05-22 07:08 - 2014-05-22 07:08 - 00000000 ____D () C:\Program Files\Common Files\MAGIX Shared
2014-05-22 07:06 - 2014-05-22 07:06 - 00000000 ____D () C:\Program Files\MAGIX
2014-05-22 07:06 - 2014-05-22 07:06 - 00000000 ____D () C:\Program Files\Common Files\MAGIX Services
2014-05-22 07:06 - 2014-05-22 07:06 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-05-22 07:05 - 2011-12-29 22:25 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-05-22 05:55 - 2013-09-05 05:41 - 00000000 ____D () C:\Users\Sven\Downloads\4ZuDer9
2014-05-22 03:21 - 2014-05-22 03:02 - 00000738 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-05-22 03:21 - 2012-05-07 06:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastChaosGER
2014-05-22 03:19 - 2014-05-22 03:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-05-22 03:13 - 2014-05-22 03:10 - 00004535 _____ () C:\Users\Sven\AppData\Roaming\CamStudio.cfg
2014-05-22 03:13 - 2014-05-22 03:10 - 00000124 _____ () C:\Users\Sven\AppData\Roaming\Camdata.ini
2014-05-22 03:12 - 2014-05-22 03:11 - 00000000 ____D () C:\Users\Sven\Documents\My CamStudio Temp Files
2014-05-22 03:10 - 2014-05-22 03:09 - 00000096 _____ () C:\Users\Sven\AppData\Roaming\version2.xml
2014-05-22 03:09 - 2014-05-22 03:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio 2.7
2014-05-22 03:09 - 2014-05-22 03:09 - 00000000 ____D () C:\Program Files\CamStudio 2.7
2014-05-21 08:31 - 2014-06-10 12:03 - 01414867 _____ () C:\Users\Sven\Downloads\zoek.scr
2014-05-21 08:31 - 2014-06-10 12:03 - 01414867 _____ () C:\Users\Sven\Downloads\zoek.com
2014-05-20 02:05 - 2014-03-09 11:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 02:04 - 2014-05-20 02:04 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-05-20 02:04 - 2010-05-02 14:59 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-20 01:49 - 2012-08-19 02:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-05-20 01:49 - 2012-08-19 02:55 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-05-20 01:47 - 2014-05-20 01:47 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\InstallShield
2014-05-20 01:47 - 2012-08-21 02:26 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Wippien
2014-05-20 01:47 - 2012-08-21 02:26 - 00000000 ____D () C:\Program Files\Wippien
2014-05-20 01:33 - 2014-05-20 01:33 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\FreeHideIP
2014-05-20 01:33 - 2014-05-20 01:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Hide IP
2014-05-20 01:33 - 2014-05-20 01:33 - 00000000 ____D () C:\ProgramData\FreeHideIP
2014-05-20 01:33 - 2014-05-20 01:33 - 00000000 ____D () C:\Program Files (x86)\FreeHideIP
2014-05-18 11:29 - 2013-06-07 06:32 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-18 11:29 - 2011-07-16 21:42 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\DVDVideoSoft
2014-05-18 11:29 - 2010-05-02 01:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-17 03:21 - 2012-07-12 11:08 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-17 03:21 - 2012-07-12 11:08 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-17 03:21 - 2011-10-10 11:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-17 03:20 - 2010-05-02 01:24 - 00000000 ____D () C:\Users\Sven\AppData\Local\Adobe
2014-05-15 14:14 - 2010-05-02 00:42 - 00000000 ___RD () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 14:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 13:31 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 12:48 - 2013-08-14 04:10 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 12:37 - 2010-05-02 11:19 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-13 21:12 - 2014-05-13 21:12 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-13 20:30 - 2014-05-08 18:29 - 00000000 ____D () C:\Users\Sven\Downloads\RapidLC
2014-05-12 20:46 - 2010-11-07 21:40 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-05-12 10:29 - 2013-09-30 15:57 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-12 10:29 - 2010-10-03 14:41 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\TS3Client
2014-05-12 10:29 - 2010-05-02 01:37 - 00000000 ____D () C:\Users\Sven\Tracing
2014-05-12 10:29 - 2010-05-02 01:34 - 00000000 ____D () C:\Windows\Panther
2014-05-12 07:26 - 2014-06-10 11:28 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-10 11:28 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2012-03-08 00:36 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
Some content of TEMP:
====================
C:\Users\Sven\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfaj_ny.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-08 00:01
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Soo.. fehlen noch irgendwelche Logs ? |
|
11.06.2014, 10:55
| #32 | |
| /// TB-Ausbilder   | Sicheres Löschen von "PSHD-9.9"Zitat:
 Reste entfernen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
C:\Users\Gast\Downloads\spring_breakers.exe
C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Sicherungsstandart\Extensions\aaipilfmheplbcghignccoiiebekkdhe
C:\Users\Sven\Desktop\Datein\lc next trailer\thc-ssl-dos-1.4-win-bin.zip
Reboot:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Schritt 1 Du verwendest veraltete Software auf deinem Rechner, was ein Sicherheitsrisiko darstellt. Daher solltest du veraltete Software deinstallieren und anschließend die aktuellste Version installieren. Folge dem Pfad Start > Systemsteuerung > Sofware / Programme deinstallieren. Deinstalliere die folgenden Programme von deinem Rechner:
Downloade und installiere dir bitte nun:Starte deinen Rechner nach der Installation neu auf. Schritt 2 Die Reihenfolge ist hier entscheidend.
Schritt 3 Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems. Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti-Viren-Programm und zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden. Mozilla Firefox
Performance
Was du vermeiden solltest:
Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
11.06.2014, 14:00
| #33 | |
| | Sicheres Löschen von "PSHD-9.9" Super, danke dir, schätze es wirklich sehr!
__________________Zitat:
Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-06-2014 01
Ran by Sven at 2014-06-11 14:56:41 Run:2
Running from C:\Users\Sven\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
start
C:\Users\Gast\Downloads\spring_breakers.exe
C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Sicherungsstandart\Extensions\aaipilfmheplbcghignccoiiebekkdhe
C:\Users\Sven\Desktop\Datein\lc next trailer\thc-ssl-dos-1.4-win-bin.zip
Reboot:
end
*****************
C:\Users\Gast\Downloads\spring_breakers.exe => Moved successfully.
C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Sicherungsstandart\Extensions\aaipilfmheplbcghignccoiiebekkdhe => Moved successfully.
C:\Users\Sven\Desktop\Datein\lc next trailer\thc-ssl-dos-1.4-win-bin.zip => Moved successfully.
The system needed a reboot.
==== End of Fixlog ====
|
|
12.06.2014, 09:06
| #34 | |
| /// TB-Ausbilder | Sicheres Löschen von "PSHD-9.9"Zitat:
 Ich bin froh, dass wir helfen konnten  In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
|
Linear-Darstellung
