Trojaner gefunden: Java:Jacksbot-Z [Trj]

AlGrande · 12.08.2014, 11:00

Hallo,
Mit Avast! Free Antivirus habe ich die Startzeit-Untersuchung laufen lassen.
Es hat den Virus Java:Jacksbot-Z [Trj] gefunden mit dem Namen ikc.class.
Es ist im Ordner:
C:\Users\BENUTZERNAME\AppData\Roaming\.firefox\cookies\111jshgfedcb9A76546210BAd4xw2uts.jar\ikc.class
Ich habe es in die Quarantäne verschoben.
Ist der Virus jetzt auch wirklich weg? Soll ich ihn in der Quarantäne löschen? Was richtet er an?

Warlord711 · 12.08.2014, 11:04

Fragen über Fragen ;-)

Code:

ATTFilter

A new Java backdoor trojan called Java/Jacksbot.A has been discovered that has partial multiplatform support. It is fully functional on Windows, and partially functional on OS X and Linux. This trojan is currently considered low risk as it is not known to have infected users, and it does not run without root permissions. Jacksbot has the usual backdoor functionality, including the following capabilities:

    gathering system information
    taking screenshots
    performing denial of service attacks
    deleting files
    stealing passwords (including specifically Minecraft passwords)
    visiting remote URLs, likely to perform Clickfraud

Keine Gewähr auf Korrektheit/Vollständigkeit

Wir können gern schauen ob da noch Reste sind, oder andere.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

AlGrande · 12.08.2014, 11:20

Mist ich ich sollte mein Minecraft passwort ändern... Wie kriegt man den Virus denn?
Wieso sind da porno Seiten in meiner Hosts Datei!?

Frst.txt:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Alessio (administrator) on CRYSTALSTONE on 12-08-2014 12:10:25
Running from C:\Users\Alessio\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(fabi.me) C:\Users\Alessio\Desktop\SpeedAutoClicker.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\main.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Oracle Corporation) C:\Program Files\Java\jdk1.8.0_05\jre\bin\javaw.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-04-03] (Realtek Semiconductor)
HKLM\...\Run: [CCE] => "C:\Users\Alessio\AppData\Local\Temp\Rar$EXa0.993\CCE\CCE.exe" -showlog <===== ATTENTION
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RazerGameBooster] => C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe [61152 2014-02-25] (Razer Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21442176 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHAE.EXE [283232 2014-05-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [EarthAlerts] => C:\Program Files (x86)\Earth Alerts\EarthAlerts.exe
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [Speed AutoClicker] => C:\Users\Alessio\Desktop\SpeedAutoClicker.exe [179200 2013-09-24] (fabi.me)
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Need for Speed™ Undercover Registration.lnk.disabled
ShortcutTarget: Need for Speed™ Undercover Registration.lnk.disabled -> C:\Program Files (x86)\EA Games\Need for Speed Undercover\Support\EAregister.exe (Leader Technologies)
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.disabled
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.disabled -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Pastebin Desktop.lnk.disabled
ShortcutTarget: Pastebin Desktop.lnk.disabled -> C:\Program Files (x86)\Pastebin Desktop\pastebin.exe (No File)
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar569.lnk
ShortcutTarget: Sidebar569.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar94.lnk
ShortcutTarget: Sidebar94.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://localoem.msn.com
SearchScopes: HKLM - {F228E334-350F-4596-8F9D-F9880AFF5ECF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MASBJS
SearchScopes: HKLM-x32 - {09F155E3-0B7E-40C4-9E28-A073383614C1} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MASBJS
SearchScopes: HKCU - {F228E334-350F-4596-8F9D-F9880AFF5ECF} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default
FF NewTab: file:///C:/Meine%20Webseiten/1/www.google.de/index1127.html
FF Homepage: file:///C:/Meine%20Webseiten/1/www.google.de/index1127.html
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "62.113.208.89"
FF NetworkProxy: "socks_port", 8089
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "socks_version", 4
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Alessio\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\searchplugins\beemp3.xml
FF SearchPlugin: C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\searchplugins\mp3-search.xml
FF Extension: Flash Video Downloader - YouTube Full HD Download - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\artur.dubovoy@gmail.com [2014-07-31]
FF Extension: FoxyProxy Standard - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\foxyproxy@eric.h.jung [2014-05-29]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\ich@maltegoetz.de [2014-05-10]
FF Extension: Master Password+ - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\masterpasswordtimeoutplus@vano [2014-05-15]
FF Extension: LastPass - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\support@lastpass.com [2014-05-15]
FF Extension: WOT - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-06-12]
FF Extension: DownloadHelper - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-09]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\admin@proxy-listen.de.xpi [2014-05-10]
FF Extension: Grooveshark Unlocker - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\groovesharkUnlocker@overlord1337.xpi [2014-05-10]
FF Extension: betterFox - Make your browsing experience 15% faster. - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\multirevenue@googlemail.com.xpi [2014-05-10]
FF Extension: Download Manager (S3) - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\s3download@statusbar.xpi [2014-05-10]
FF Extension: XJZ Survey Remover - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\survey-remover@gmx.com.xpi [2014-05-10]
FF Extension: All-in-One Sidebar - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{097d3191-e6fa-4728-9826-b533d755359d}.xpi [2014-05-10]
FF Extension: {228790f3-0170-435a-be1f-7511046ea7e9} - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{228790f3-0170-435a-be1f-7511046ea7e9}.xpi [2014-05-10]
FF Extension: ProxTube - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-08-01]
FF Extension: ScrapBook - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA5}.xpi [2014-05-22]
FF Extension: NoScript - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-05-10]
FF Extension: YouTube High Definition - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2014-07-10]
FF Extension: Adblock Plus - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-10]
FF Extension: DownThemAll! - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-05-10]
FF Extension: Greasemonkey - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-05-10]
FF Extension: Download Manager Tweak - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}.xpi [2014-05-10]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-19]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Nightly\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=9609A0F3C1231F1C&affID=123884&tsp=4952
CHR StartupUrls: "hxxp://www.google.de/", "hxxp://orteil.dashnet.org/cookieclicker/", "hxxp://clickingbad.nullism.com/", "hxxp://pizzaclicker.efekt.sk/", "hxxp://choppin-wood.com/", "hxxp://icecreamstand.ca/", "hxxp://candyclicker.com/", "hxxp://drmeth.com/index.php#", "hxxp://gameoftor.com/", "hxxp://www.minethings.com/", "hxxp://dhmholley.co.uk/civclicker.html", "hxxp://joezeng.github.io/goomyclicker/", "hxxp://speed-warp.net/#", "hxxp://progressquest.com/play/roster.html", "hxxp://castle.chirpingmustard.com/castle.html", "hxxp://candies.aniwey.net/index.php?pass=b9nmv", "hxxp://goldenminer.org/", "hxxp://adarkroom.doublespeakgames.com/", "hxxp://www.digitalchestnut.com/merryclickmas/", "hxxp://www.bluemaskgames.com/NBB/NanoBotBuilder.html", "https://dripstat.com/game/", "hxxp://candybox2.net/?slot=1", "hxxp://www.clickerheroes.com/", "hxxp://bary12.github.io/Computed/", "hxxp://www.gamesbutler.com/game/20892/Idle_Web_Tycoon/", "hxxp://deathraygames.com/play-online/miniLD48/"
CHR Extension: (Google Docs) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-19]
CHR Extension: (ArkhamNetwork) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojpohconccadjkbnmehmlpngiimmboo [2014-07-24]
CHR Extension: (Google Drive) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-19]
CHR Extension: (YouTube) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-19]
CHR Extension: (Google-Suche) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-19]
CHR Extension: (Tampermonkey) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-05-19]
CHR Extension: (avast! SafePrice) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-08-05]
CHR Extension: (avast! Online Security) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-19]
CHR Extension: (Secure Bookmarks) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\leocjgngiajhfiikjolfhcpiokgbinep [2014-07-29]
CHR Extension: (Google Wallet) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-19]
CHR Extension: (Simple Startup Password) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojoalkffommhmdmbohjphohoejjmgepc [2014-07-29]
CHR Extension: (Google Mail) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-19]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-19] (AVAST Software)
S2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S4 PnkBstrA; C:\Program Files (x86)\EA Games\Need for Speed Undercover\PB\PnkBstrA.exe [63040 2008-10-23] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [72992 2014-06-06] (IObit)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-05-15] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-15] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-19] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-19] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-19] (AVAST Software)
S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2014-07-19] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-19] ()
R3 athur; C:\Windows\system32\DRIVERS\athuw8x.sys [3744256 2012-11-21] (Qualcomm Atheros Communications, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-05-14] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-07-21] (LogMeIn Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-05-14] ()
S3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv.sys [49776 2014-07-25] (Visicom Media Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
S3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-05-15] (Microsoft Corporation)
S3 cpuz136; \??\C:\Program Files (x86)\CPUID\PC Wizard 2013\pcwiz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-12 12:10 - 2014-08-12 12:10 - 00024161 _____ () C:\Users\Alessio\Desktop\FRST.txt
2014-08-12 12:10 - 2014-08-12 12:10 - 00000000 ____D () C:\FRST
2014-08-12 12:07 - 2014-08-12 12:08 - 02099712 _____ (Farbar) C:\Users\Alessio\Desktop\FRST64.exe
2014-08-12 10:54 - 2014-08-12 10:54 - 00000000 ____D () C:\ProgramData\EmailNotifier
2014-08-11 13:35 - 2014-08-12 12:08 - 00000000 ____D () C:\Users\Alessio\Desktop\map
2014-08-11 11:17 - 2014-08-11 11:17 - 00000000 ____D () C:\Program Files (x86)\Nightly
2014-08-10 14:31 - 2014-08-10 14:31 - 00000000 ____D () C:\ProgramData\ATI
2014-08-10 11:27 - 2014-08-10 11:27 - 00060817 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201408101127053511.log
2014-08-10 11:27 - 2014-08-10 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-08-10 11:26 - 2014-08-10 11:26 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-08-10 11:25 - 2014-08-10 11:25 - 00048824 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201408101125434144.log
2014-08-10 11:23 - 2014-08-10 11:24 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp
2014-08-09 15:19 - 2014-08-09 15:19 - 00000000 ____D () C:\Program Files (x86)\Valve
2014-08-08 13:11 - 2014-08-08 13:11 - 00450709 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140808-131141.backup
2014-08-08 13:11 - 2014-07-03 17:46 - 00450709 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140808-131125.backup
2014-08-07 14:45 - 2014-08-07 18:29 - 00000177 _____ () C:\Users\Alessio\Desktop\tf2.url
2014-08-06 18:02 - 2014-08-07 18:32 - 00000180 _____ () C:\Users\Alessio\Desktop\spiel.url
2014-08-05 16:06 - 2014-08-05 16:08 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Temporary Projects
2014-08-05 15:57 - 2014-08-05 15:57 - 00141143 _____ () C:\Users\Alessio\Downloads\Bukkit Plugin Creator.zip
2014-08-05 15:51 - 2014-08-05 15:51 - 00001299 _____ () C:\Users\Alessio\Downloads\plugin-test-1.0.zip
2014-08-03 18:07 - 2014-08-03 18:07 - 00000566 _____ () C:\Users\Alessio\Downloads\chat_id-1146960.txt
2014-08-01 13:10 - 2014-08-01 13:10 - 00009245 _____ () C:\Users\Alessio\Downloads\[1.6.4][c][forge]LumberJack.zip
2014-08-01 12:37 - 2014-08-01 12:37 - 00307390 _____ () C:\Users\Alessio\Downloads\Damage-Indicators-Mod-1.6.4.zip
2014-08-01 12:35 - 2014-08-01 12:35 - 00436148 _____ () C:\Users\Alessio\Downloads\Not-Enough-Items-1.6.4(1).jar
2014-08-01 12:34 - 2014-08-01 12:34 - 00427800 _____ () C:\Users\Alessio\Downloads\Not-Enough-Items-1.6.4.jar
2014-08-01 12:32 - 2014-08-01 12:32 - 00449021 _____ () C:\Users\Alessio\Downloads\NotEnoughItems-1.7.10-1.0.2.15-universal.jar
2014-07-31 17:57 - 2014-08-01 17:26 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\XBMC
2014-07-31 17:55 - 2014-07-31 17:55 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC
2014-07-31 17:54 - 2014-07-31 17:55 - 00000000 ____D () C:\Program Files (x86)\XBMC
2014-07-31 15:32 - 2014-08-01 16:15 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Audacity
2014-07-30 11:19 - 2014-07-30 11:19 - 00320122 _____ () C:\Users\Alessio\Downloads\pq6-2.zip
2014-07-30 11:19 - 2003-09-05 01:09 - 00322663 _____ (Grumdrig) C:\Users\Alessio\Desktop\pq.exe
2014-07-29 18:40 - 2014-07-29 18:41 - 42894411 _____ () C:\Users\Alessio\Downloads\20120504_moonshell210childzwai_updated.7z
2014-07-29 18:26 - 2014-07-29 18:26 - 00434802 _____ () C:\Users\Alessio\Downloads\StellaDS_V12.zip
2014-07-29 18:12 - 2014-07-29 18:12 - 01185111 _____ () C:\Users\Alessio\Downloads\dsiwarehaxinj_v11.zip
2014-07-29 18:04 - 2014-07-29 18:04 - 04427097 _____ () C:\Users\Alessio\Downloads\hackmii_installer_v1.2.zip
2014-07-29 18:04 - 2014-07-29 18:04 - 00146508 _____ () C:\Users\Alessio\Downloads\dsi_homebrew_channel.rar
2014-07-26 10:52 - 2014-07-26 10:52 - 00000000 ___HD () C:\Users\Alessio\Desktop\.updtmp
2014-07-25 20:25 - 2014-08-01 12:29 - 00000000 ____D () C:\Users\Alessio\Desktop\Monster
2014-07-25 12:19 - 2014-07-25 12:19 - 00049776 _____ (Visicom Media Inc.) C:\WINDOWS\system32\Drivers\mcvidrv.sys
2014-07-24 20:33 - 2014-07-31 11:43 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Earth Alerts
2014-07-24 20:30 - 2014-07-24 20:30 - 06163191 _____ () C:\Users\Alessio\Downloads\Setup_EarthAlerts_2014.1.174_.zip
2014-07-23 18:36 - 2014-07-23 18:37 - 00000000 ____D () C:\Users\Alessio\Desktop\servermod
2014-07-23 18:34 - 2014-07-16 09:39 - 34176936 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\jre-8u11-windows-x64.exe@1406127811-1406135311-276bbe-B-ca440cc4230f31e2965e0fdc23cef2fa.exe.1
2014-07-23 18:32 - 2014-07-16 09:39 - 34176936 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\jre-8u11-windows-x64.exe@1406127811-1406135311-276bbe-B-ca440cc4230f31e2965e0fdc23cef2fa.exe
2014-07-23 16:37 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-23 16:37 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-23 16:37 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-23 16:36 - 2014-07-16 09:39 - 34176936 _____ (Oracle Corporation) C:\Users\Alessio\jre-8u11-windows-x64.exe@1406125847-1406133347-74f899-B-1c1494132f13ec168f9c97106957ec33.exe
2014-07-23 16:34 - 2014-07-22 13:28 - 00401408 _____ () C:\WINDOWS\system32\wget.exe
2014-07-23 13:01 - 2014-07-23 13:02 - 11895013 _____ () C:\Users\Alessio\Downloads\WeepCraft(1).zip
2014-07-23 12:48 - 2014-07-23 12:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-23 12:48 - 2014-07-23 12:48 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-22 19:19 - 2014-08-01 17:32 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\uTorrent
2014-07-22 19:16 - 2014-07-22 19:16 - 01855312 _____ (BitTorrent Inc.) C:\Users\Alessio\Downloads\uTorrent54.exe
2014-07-22 18:41 - 2014-07-22 18:48 - 00011680 _____ () C:\Users\Alessio\Desktop\clicker.txt
2014-07-22 15:14 - 2014-07-22 15:14 - 00137376 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcomp120.dll
2014-07-22 13:25 - 2014-07-22 13:25 - 03417936 _____ () C:\Users\Alessio\Downloads\wget-1.15.tar.gz
2014-07-22 13:25 - 2014-07-22 13:25 - 03012464 _____ (GnuWin32 <gnuwin32.sourceforge.net> ) C:\Users\Alessio\Downloads\wget-1.11.4-1-setup.exe
2014-07-22 13:25 - 2014-07-22 13:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GnuWin32
2014-07-22 13:25 - 2014-07-22 13:25 - 00000000 ____D () C:\Program Files (x86)\GnuWin32
2014-07-22 13:16 - 2014-07-22 13:19 - 00000000 ____D () C:\Users\Alessio\Downloads\a
2014-07-22 12:02 - 2014-07-22 12:02 - 00113256 _____ () C:\Users\Alessio\Downloads\TooManyItems-Mod-Forge-1.7.10.jar
2014-07-21 22:05 - 2014-07-21 22:05 - 00230912 _____ () C:\WINDOWS\system32\clinfo.exe
2014-07-21 22:05 - 2014-07-21 22:05 - 00135168 _____ (AMD) C:\WINDOWS\system32\coinst_13.251.9001.1001.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00100352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OpenVideo64.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00086528 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OVDecode64.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00083968 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OpenVideo.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00073728 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OVDecode.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 29382144 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 26352128 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 22157824 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 15716352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 13209088 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2014-07-21 22:04 - 2014-07-21 22:04 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 03461040 _____ () C:\WINDOWS\SysWOW64\atiumdva.cap
2014-07-21 22:04 - 2014-07-21 22:04 - 03426688 _____ () C:\WINDOWS\system32\atiumd6a.cap
2014-07-21 22:04 - 2014-07-21 22:04 - 00825344 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00626688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2014-07-21 22:04 - 2014-07-21 22:04 - 00550472 _____ () C:\WINDOWS\SysWOW64\atiapfxx.blb
2014-07-21 22:04 - 2014-07-21 22:04 - 00550472 _____ () C:\WINDOWS\system32\atiapfxx.blb
2014-07-21 22:04 - 2014-07-21 22:04 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2014-07-21 22:04 - 2014-07-21 22:04 - 00190976 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00063488 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00062464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00057344 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00055808 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00031232 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 24860160 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00412672 _____ () C:\WINDOWS\system32\amdmiracast.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00134656 _____ () C:\WINDOWS\system32\amdhdl64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00123392 _____ () C:\WINDOWS\SysWOW64\amdhdl32.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2014-07-21 20:38 - 2014-08-01 17:41 - 00000088 _____ () C:\Users\Alessio\Desktop\dewfgrerv.txt
2014-07-21 18:08 - 2014-07-21 18:08 - 00046136 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2014-07-21 16:52 - 2014-07-21 16:52 - 03009067 _____ () C:\Users\Alessio\Downloads\forge-1.7.10-10.13.0.1187-installer.jar
2014-07-21 16:36 - 2014-07-21 17:56 - 00000000 ____D () C:\Users\Alessio\Desktop\mod
2014-07-21 13:39 - 2014-07-21 13:40 - 00000021 _____ () C:\Users\Alessio\Desktop\text.txt
2014-07-20 19:33 - 2014-08-01 18:04 - 00000228 _____ () C:\Users\Alessio\Desktop\Musik.txt
2014-07-20 15:32 - 2014-07-20 16:03 - 00000000 ____D () C:\Users\Alessio\Desktop\cauldron
2014-07-20 15:31 - 2014-07-20 15:31 - 11469687 _____ () C:\Users\Alessio\Downloads\cauldron-1.7.10-1.1187.03.119-installer.jar
2014-07-19 17:55 - 2014-07-19 17:55 - 00000657 _____ () C:\Users\Alessio\Desktop\Pylo - Verknüpfung.lnk
2014-07-19 17:52 - 2014-07-19 17:52 - 00000000 ____D () C:\Pylo
2014-07-19 17:50 - 2014-07-19 17:51 - 71049059 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.7 [1.7.10].exe
2014-07-19 16:56 - 2014-07-19 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Deployment
2014-07-19 16:56 - 2014-07-19 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Apps\2.0
2014-07-19 16:52 - 2014-07-19 16:52 - 00001801 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files\iTunes
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files\iPod
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-19 16:46 - 2014-07-19 16:47 - 34176936 _____ (Oracle Corporation) C:\Users\Alessio\Downloads\jre-8u11-windows-x64.exe
2014-07-19 16:25 - 2014-07-19 16:25 - 00001988 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-19 16:25 - 2014-07-19 16:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-19 16:24 - 2014-07-19 16:25 - 00427360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 01041168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00307344 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-07-19 16:24 - 2014-07-19 16:24 - 00224896 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00092008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00079184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00044640 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\aswTap.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-07-19 16:24 - 2014-07-19 16:24 - 00000000 ____D () C:\Program Files\AVAST Software
2014-07-19 16:23 - 2014-07-19 16:24 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-07-19 13:20 - 2014-07-19 13:20 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Google
2014-07-19 13:19 - 2014-08-03 11:43 - 00000000 ____D () C:\Program Files\Google
2014-07-18 14:20 - 2014-07-18 14:20 - 02936397 _____ () C:\Users\Alessio\Downloads\forge-1.7.2-10.12.2.1147-installer(1).jar
2014-07-18 14:14 - 2014-07-19 18:54 - 00000000 ____D () C:\Users\Alessio\Desktop\mod server
2014-07-18 14:02 - 2014-07-18 14:05 - 88567838 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.7 [1.7.10].zip
2014-07-18 13:35 - 2014-07-18 13:35 - 00000054 _____ () C:\Users\Alessio\Desktop\sachen.txt
2014-07-17 20:28 - 2013-09-24 11:14 - 00179200 _____ (fabi.me) C:\Users\Alessio\Desktop\SpeedAutoClicker.exe
2014-07-17 18:43 - 2014-07-17 18:50 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\.technic
2014-07-17 18:43 - 2014-07-17 18:42 - 02346942 _____ () C:\Users\Alessio\Desktop\TechnicLauncher.exe
2014-07-17 18:42 - 2014-07-17 18:42 - 02346942 _____ () C:\Users\Alessio\Downloads\TechnicLauncher.exe
2014-07-17 15:51 - 2014-07-27 17:51 - 00001306 _____ () C:\Users\Public\Desktop\paint.net.lnk
2014-07-16 17:53 - 2014-07-16 17:57 - 94441323 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.6 [1.7.2].zip
2014-07-16 12:49 - 2014-07-16 12:49 - 00280944 _____ () C:\WINDOWS\Minidump\071614-25031-01.dmp
2014-07-15 18:57 - 2014-07-15 18:57 - 00000000 _____ () C:\Users\Alessio\AppData\Local\{91158A2F-B624-4B04-B2C0-716841072181}
2014-07-15 15:10 - 2014-07-15 15:13 - 00000000 ____D () C:\Users\Alessio\Desktop\Horizons
2014-07-15 15:05 - 2014-08-01 13:12 - 00000000 ____D () C:\Users\Alessio\AppData\Local\ftblauncher
2014-07-15 15:05 - 2014-07-25 20:24 - 04980105 _____ () C:\Users\Alessio\Desktop\launcher^FTB_Launcher.exe
2014-07-15 15:05 - 2014-07-25 20:24 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\ftblauncher
2014-07-14 19:07 - 2014-07-14 19:07 - 00000000 _____ () C:\Users\Alessio\iexplore.exe
2014-07-14 15:18 - 2014-07-14 15:19 - 00001697 _____ () C:\Users\Alessio\Desktop\server.lnk
2014-07-13 16:04 - 2014-08-07 18:33 - 00001953 _____ () C:\Users\Alessio\Desktop\Notepad++.lnk
2014-07-13 15:32 - 2014-07-13 15:32 - 00149672 _____ () C:\Users\Alessio\Downloads\p168375258361.zip
2014-07-13 14:57 - 2014-07-13 14:57 - 00316781 _____ () C:\Users\Alessio\Downloads\242109__unfa__padsynth-forcefield-loop-02.flac
2014-07-13 14:57 - 2014-07-13 14:57 - 00156221 _____ () C:\Users\Alessio\Downloads\242004__junkfood2121__fart-01.flac
2014-07-13 14:56 - 2014-07-13 14:56 - 00262188 _____ () C:\Users\Alessio\Downloads\241970__saltchicken__teleport.wav
2014-07-13 12:43 - 2014-07-13 12:46 - 00000000 ____D () C:\Users\Alessio\Desktop\Programme

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-12 12:10 - 2014-08-12 12:10 - 00024161 _____ () C:\Users\Alessio\Desktop\FRST.txt
2014-08-12 12:10 - 2014-08-12 12:10 - 00000000 ____D () C:\FRST
2014-08-12 12:08 - 2014-08-12 12:07 - 02099712 _____ (Farbar) C:\Users\Alessio\Desktop\FRST64.exe
2014-08-12 12:08 - 2014-08-11 13:35 - 00000000 ____D () C:\Users\Alessio\Desktop\map
2014-08-12 12:07 - 2014-05-14 17:23 - 00000000 ____D () C:\Users\Alessio\Desktop\Ordner
2014-08-12 12:07 - 2014-05-10 15:23 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Skype
2014-08-12 12:04 - 2014-05-10 15:29 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\.minecraft
2014-08-12 12:01 - 2014-05-15 17:01 - 02006385 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-12 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-08-12 11:53 - 2014-05-10 14:55 - 00003590 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-62763404-3214291445-45913408-1001
2014-08-12 11:51 - 2014-05-19 16:41 - 00002201 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-12 11:51 - 2014-05-19 16:41 - 00001138 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-12 11:49 - 2014-05-31 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\LogMeIn Hamachi
2014-08-12 11:49 - 2014-05-19 16:40 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-12 11:48 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-08-12 11:02 - 2014-05-15 16:44 - 00000000 _____ () C:\WINDOWS\system32\Drivers\lvuvc.hs
2014-08-12 11:01 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-08-12 10:56 - 2014-05-15 17:56 - 00003954 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{584D786A-69FE-4BF5-AD35-57F16EE1098A}
2014-08-12 10:55 - 2014-06-04 12:02 - 00002548 _____ () C:\WINDOWS\setupact.log
2014-08-12 10:55 - 2014-05-15 16:43 - 00021119 _____ () C:\WINDOWS\system32\lvcoinst.log
2014-08-12 10:54 - 2014-08-12 10:54 - 00000000 ____D () C:\ProgramData\EmailNotifier
2014-08-12 10:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-08-12 10:45 - 2014-06-06 20:39 - 00026960 _____ () C:\WINDOWS\PFRO.log
2014-08-12 10:45 - 2014-05-10 15:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-11 15:50 - 2014-05-28 18:40 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-11 15:28 - 2014-07-01 13:03 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-08-11 11:17 - 2014-08-11 11:17 - 00000000 ____D () C:\Program Files (x86)\Nightly
2014-08-10 14:31 - 2014-08-10 14:31 - 00000000 ____D () C:\ProgramData\ATI
2014-08-10 11:28 - 2014-05-10 15:39 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Raptr
2014-08-10 11:27 - 2014-08-10 11:27 - 00060817 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201408101127053511.log
2014-08-10 11:27 - 2014-08-10 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-08-10 11:27 - 2014-05-10 15:39 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-08-10 11:26 - 2014-08-10 11:26 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-08-10 11:26 - 2014-05-10 15:32 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-08-10 11:25 - 2014-08-10 11:25 - 00048824 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201408101125434144.log
2014-08-10 11:24 - 2014-08-10 11:23 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp
2014-08-09 16:11 - 2014-05-15 16:49 - 00000000 ____D () C:\Users\Alessio
2014-08-09 15:19 - 2014-08-09 15:19 - 00000000 ____D () C:\Program Files (x86)\Valve
2014-08-09 15:19 - 2014-05-15 16:49 - 00000000 ____D () C:\Users\Admin
2014-08-08 13:11 - 2014-08-08 13:11 - 00450709 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140808-131141.backup
2014-08-08 13:09 - 2014-07-03 17:39 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-08-07 18:34 - 2014-08-07 18:33 - 00001266 _____ () C:\Users\Alessio\Desktop\Gema Trojaner.lnk
2014-08-07 18:33 - 2014-07-13 16:04 - 00001953 _____ () C:\Users\Alessio\Desktop\Notepad++.lnk
2014-08-07 18:32 - 2014-08-06 18:02 - 00000180 _____ () C:\Users\Alessio\Desktop\spiel.url
2014-08-07 18:29 - 2014-08-07 14:45 - 00000177 _____ () C:\Users\Alessio\Desktop\tf2.url
2014-08-05 16:08 - 2014-08-05 16:06 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Temporary Projects
2014-08-05 16:02 - 2014-06-13 16:21 - 00000000 ____D () C:\Users\Alessio\Documents\Visual Studio 2010
2014-08-05 15:57 - 2014-08-05 15:57 - 00141143 _____ () C:\Users\Alessio\Downloads\Bukkit Plugin Creator.zip
2014-08-05 15:51 - 2014-08-05 15:51 - 00001299 _____ () C:\Users\Alessio\Downloads\plugin-test-1.0.zip
2014-08-04 10:21 - 2014-05-22 12:02 - 00000000 ____D () C:\Meine Webseiten
2014-08-03 18:07 - 2014-08-03 18:07 - 00000566 _____ () C:\Users\Alessio\Downloads\chat_id-1146960.txt
2014-08-03 17:38 - 2014-05-18 19:51 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Windows Live
2014-08-03 11:43 - 2014-07-19 13:19 - 00000000 ____D () C:\Program Files\Google
2014-08-03 11:43 - 2014-05-19 16:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-02 13:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-02 12:39 - 2014-07-10 16:26 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2014-08-02 12:37 - 2014-05-19 16:40 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Google
2014-08-02 11:56 - 2014-06-01 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-08-02 11:51 - 2014-05-15 17:08 - 00000000 ___DO () C:\Users\Alessio\OneDrive
2014-08-01 18:04 - 2014-07-20 19:33 - 00000228 _____ () C:\Users\Alessio\Desktop\Musik.txt
2014-08-01 17:41 - 2014-07-21 20:38 - 00000088 _____ () C:\Users\Alessio\Desktop\dewfgrerv.txt
2014-08-01 17:32 - 2014-07-22 19:19 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\uTorrent
2014-08-01 17:27 - 2014-05-11 10:41 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-08-01 17:26 - 2014-07-31 17:57 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\XBMC
2014-08-01 16:15 - 2014-07-31 15:32 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Audacity
2014-08-01 13:12 - 2014-07-15 15:05 - 00000000 ____D () C:\Users\Alessio\AppData\Local\ftblauncher
2014-08-01 13:10 - 2014-08-01 13:10 - 00009245 _____ () C:\Users\Alessio\Downloads\[1.6.4][c][forge]LumberJack.zip
2014-08-01 12:37 - 2014-08-01 12:37 - 00307390 _____ () C:\Users\Alessio\Downloads\Damage-Indicators-Mod-1.6.4.zip
2014-08-01 12:35 - 2014-08-01 12:35 - 00436148 _____ () C:\Users\Alessio\Downloads\Not-Enough-Items-1.6.4(1).jar
2014-08-01 12:34 - 2014-08-01 12:34 - 00427800 _____ () C:\Users\Alessio\Downloads\Not-Enough-Items-1.6.4.jar
2014-08-01 12:32 - 2014-08-01 12:32 - 00449021 _____ () C:\Users\Alessio\Downloads\NotEnoughItems-1.7.10-1.0.2.15-universal.jar
2014-08-01 12:29 - 2014-07-25 20:25 - 00000000 ____D () C:\Users\Alessio\Desktop\Monster
2014-08-01 09:22 - 2013-08-22 16:44 - 00555272 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-31 19:46 - 2014-05-11 19:13 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-31 19:46 - 2012-07-26 07:26 - 00000167 _____ () C:\WINDOWS\win.ini
2014-07-31 18:02 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\dvdcss
2014-07-31 17:55 - 2014-07-31 17:55 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC
2014-07-31 17:55 - 2014-07-31 17:54 - 00000000 ____D () C:\Program Files (x86)\XBMC
2014-07-31 11:43 - 2014-07-24 20:33 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Earth Alerts
2014-07-30 14:19 - 2014-05-11 10:39 - 00000000 ____D () C:\ProgramData\Origin
2014-07-30 12:27 - 2014-05-11 10:39 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-07-30 11:19 - 2014-07-30 11:19 - 00320122 _____ () C:\Users\Alessio\Downloads\pq6-2.zip
2014-07-29 18:41 - 2014-07-29 18:40 - 42894411 _____ () C:\Users\Alessio\Downloads\20120504_moonshell210childzwai_updated.7z
2014-07-29 18:26 - 2014-07-29 18:26 - 00434802 _____ () C:\Users\Alessio\Downloads\StellaDS_V12.zip
2014-07-29 18:12 - 2014-07-29 18:12 - 01185111 _____ () C:\Users\Alessio\Downloads\dsiwarehaxinj_v11.zip
2014-07-29 18:04 - 2014-07-29 18:04 - 04427097 _____ () C:\Users\Alessio\Downloads\hackmii_installer_v1.2.zip
2014-07-29 18:04 - 2014-07-29 18:04 - 00146508 _____ () C:\Users\Alessio\Downloads\dsi_homebrew_channel.rar
2014-07-29 11:56 - 2014-05-10 15:45 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-07-27 17:51 - 2014-07-17 15:51 - 00001306 _____ () C:\Users\Public\Desktop\paint.net.lnk
2014-07-27 17:51 - 2014-05-11 18:58 - 00001318 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
2014-07-27 17:51 - 2014-05-11 18:56 - 00000000 ____D () C:\Program Files\Paint.NET
2014-07-26 10:52 - 2014-07-26 10:52 - 00000000 ___HD () C:\Users\Alessio\Desktop\.updtmp
2014-07-26 10:49 - 2014-05-11 19:17 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-26 10:49 - 2014-05-11 19:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-25 20:42 - 2014-05-11 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-25 20:24 - 2014-07-15 15:05 - 04980105 _____ () C:\Users\Alessio\Desktop\launcher^FTB_Launcher.exe
2014-07-25 20:24 - 2014-07-15 15:05 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\ftblauncher
2014-07-25 17:04 - 2014-06-04 20:25 - 00000000 ____D () C:\Users\Alessio\.gimp-2.8
2014-07-25 12:19 - 2014-07-25 12:19 - 00049776 _____ (Visicom Media Inc.) C:\WINDOWS\system32\Drivers\mcvidrv.sys
2014-07-24 20:35 - 2014-05-11 10:43 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-07-24 20:32 - 2014-05-14 13:29 - 00001294 _____ () C:\Users\Public\Desktop\SimCity™.lnk
2014-07-24 20:30 - 2014-07-24 20:30 - 06163191 _____ () C:\Users\Alessio\Downloads\Setup_EarthAlerts_2014.1.174_.zip
2014-07-24 20:24 - 2014-05-12 13:55 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\vlc
2014-07-24 15:38 - 2014-05-12 13:11 - 00000000 ____D () C:\Users\Alessio\Documents\Bandicam
2014-07-23 18:37 - 2014-07-23 18:36 - 00000000 ____D () C:\Users\Alessio\Desktop\servermod
2014-07-23 18:35 - 2014-05-10 15:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 18:11 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-23 13:02 - 2014-07-23 13:01 - 11895013 _____ () C:\Users\Alessio\Downloads\WeepCraft(1).zip
2014-07-23 13:01 - 2014-05-11 19:52 - 00162120 _____ () C:\Users\Alessio\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-23 12:48 - 2014-07-23 12:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-23 12:48 - 2014-07-23 12:48 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 12:48 - 2014-05-31 16:56 - 00000944 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-07-22 19:16 - 2014-07-22 19:16 - 01855312 _____ (BitTorrent Inc.) C:\Users\Alessio\Downloads\uTorrent54.exe
2014-07-22 18:48 - 2014-07-22 18:41 - 00011680 _____ () C:\Users\Alessio\Desktop\clicker.txt
2014-07-22 15:14 - 2014-07-22 15:14 - 00137376 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcomp120.dll
2014-07-22 13:34 - 2014-05-11 19:37 - 00000000 ____D () C:\TEMP
2014-07-22 13:28 - 2014-07-23 16:34 - 00401408 _____ () C:\WINDOWS\system32\wget.exe
2014-07-22 13:25 - 2014-07-22 13:25 - 03417936 _____ () C:\Users\Alessio\Downloads\wget-1.15.tar.gz
2014-07-22 13:25 - 2014-07-22 13:25 - 03012464 _____ (GnuWin32 <gnuwin32.sourceforge.net> ) C:\Users\Alessio\Downloads\wget-1.11.4-1-setup.exe
2014-07-22 13:25 - 2014-07-22 13:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GnuWin32
2014-07-22 13:25 - 2014-07-22 13:25 - 00000000 ____D () C:\Program Files (x86)\GnuWin32
2014-07-22 13:19 - 2014-07-22 13:16 - 00000000 ____D () C:\Users\Alessio\Downloads\a
2014-07-22 12:02 - 2014-07-22 12:02 - 00113256 _____ () C:\Users\Alessio\Downloads\TooManyItems-Mod-Forge-1.7.10.jar
2014-07-21 22:05 - 2014-07-21 22:05 - 00230912 _____ () C:\WINDOWS\system32\clinfo.exe
2014-07-21 22:05 - 2014-07-21 22:05 - 00135168 _____ (AMD) C:\WINDOWS\system32\coinst_13.251.9001.1001.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00100352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OpenVideo64.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00086528 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OVDecode64.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00083968 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OpenVideo.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00073728 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OVDecode.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 29382144 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 26352128 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 22157824 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 15716352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 13209088 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2014-07-21 22:04 - 2014-07-21 22:04 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 03461040 _____ () C:\WINDOWS\SysWOW64\atiumdva.cap
2014-07-21 22:04 - 2014-07-21 22:04 - 03426688 _____ () C:\WINDOWS\system32\atiumd6a.cap
2014-07-21 22:04 - 2014-07-21 22:04 - 00825344 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00626688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2014-07-21 22:04 - 2014-07-21 22:04 - 00550472 _____ () C:\WINDOWS\SysWOW64\atiapfxx.blb
2014-07-21 22:04 - 2014-07-21 22:04 - 00550472 _____ () C:\WINDOWS\system32\atiapfxx.blb
2014-07-21 22:04 - 2014-07-21 22:04 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2014-07-21 22:04 - 2014-07-21 22:04 - 00190976 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00063488 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00062464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00057344 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00055808 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00031232 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 09753752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 08406024 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 01318552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 01144320 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 01100216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 00588288 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2014-07-21 22:04 - 2014-05-10 15:15 - 00239616 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2014-07-21 22:04 - 2014-05-10 15:15 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 24860160 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00412672 _____ () C:\WINDOWS\system32\amdmiracast.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00134656 _____ () C:\WINDOWS\system32\amdhdl64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00123392 _____ () C:\WINDOWS\SysWOW64\amdhdl32.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2014-07-21 18:08 - 2014-07-21 18:08 - 00046136 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2014-07-21 17:56 - 2014-07-21 16:36 - 00000000 ____D () C:\Users\Alessio\Desktop\mod
2014-07-21 16:52 - 2014-07-21 16:52 - 03009067 _____ () C:\Users\Alessio\Downloads\forge-1.7.10-10.13.0.1187-installer.jar
2014-07-21 13:40 - 2014-07-21 13:39 - 00000021 _____ () C:\Users\Alessio\Desktop\text.txt
2014-07-20 16:03 - 2014-07-20 15:32 - 00000000 ____D () C:\Users\Alessio\Desktop\cauldron
2014-07-20 15:31 - 2014-07-20 15:31 - 11469687 _____ () C:\Users\Alessio\Downloads\cauldron-1.7.10-1.1187.03.119-installer.jar
2014-07-19 18:54 - 2014-07-18 14:14 - 00000000 ____D () C:\Users\Alessio\Desktop\mod server
2014-07-19 17:55 - 2014-07-19 17:55 - 00000657 _____ () C:\Users\Alessio\Desktop\Pylo - Verknüpfung.lnk
2014-07-19 17:52 - 2014-07-19 17:52 - 00000000 ____D () C:\Pylo
2014-07-19 17:51 - 2014-07-19 17:50 - 71049059 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.7 [1.7.10].exe
2014-07-19 16:56 - 2014-07-19 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Deployment
2014-07-19 16:56 - 2014-07-19 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Apps\2.0
2014-07-19 16:52 - 2014-07-19 16:52 - 00001801 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files\iTunes
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files\iPod
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-19 16:47 - 2014-07-19 16:46 - 34176936 _____ (Oracle Corporation) C:\Users\Alessio\Downloads\jre-8u11-windows-x64.exe
2014-07-19 16:32 - 2014-05-10 15:13 - 00000000 ____D () C:\Program Files\WinRAR
2014-07-19 16:29 - 2014-05-10 15:13 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-19 16:29 - 2014-05-10 15:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-19 16:25 - 2014-07-19 16:25 - 00001988 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-19 16:25 - 2014-07-19 16:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-19 16:25 - 2014-07-19 16:24 - 00427360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-07-19 16:25 - 2014-05-10 15:46 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\AVAST Software
2014-07-19 16:24 - 2014-07-19 16:24 - 01041168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00307344 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-07-19 16:24 - 2014-07-19 16:24 - 00224896 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00092008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00079184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00044640 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\aswTap.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-07-19 16:24 - 2014-07-19 16:24 - 00000000 ____D () C:\Program Files\AVAST Software
2014-07-19 16:24 - 2014-07-19 16:23 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-07-19 16:24 - 2014-05-10 15:45 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-07-19 13:20 - 2014-07-19 13:20 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Google
2014-07-18 14:20 - 2014-07-18 14:20 - 02936397 _____ () C:\Users\Alessio\Downloads\forge-1.7.2-10.12.2.1147-installer(1).jar
2014-07-18 14:05 - 2014-07-18 14:02 - 88567838 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.7 [1.7.10].zip
2014-07-18 13:35 - 2014-07-18 13:35 - 00000054 _____ () C:\Users\Alessio\Desktop\sachen.txt
2014-07-18 12:07 - 2014-07-03 20:14 - 00000000 ____D () C:\Users\Alessio\AppData\Local\fabi.me
2014-07-17 18:50 - 2014-07-17 18:43 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\.technic
2014-07-17 18:42 - 2014-07-17 18:43 - 02346942 _____ () C:\Users\Alessio\Desktop\TechnicLauncher.exe
2014-07-17 18:42 - 2014-07-17 18:42 - 02346942 _____ () C:\Users\Alessio\Downloads\TechnicLauncher.exe
2014-07-16 17:57 - 2014-07-16 17:53 - 94441323 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.6 [1.7.2].zip
2014-07-16 17:21 - 2014-06-19 16:42 - 00000000 ____D () C:\ProgramData\InstallMate
2014-07-16 17:21 - 2014-06-17 11:35 - 00000000 ____D () C:\Program Files (x86)\AnyToISO
2014-07-16 17:12 - 2014-07-09 19:18 - 00000000 ____D () C:\Program Files\Blender Foundation
2014-07-16 12:49 - 2014-07-16 12:49 - 00280944 _____ () C:\WINDOWS\Minidump\071614-25031-01.dmp
2014-07-16 12:49 - 2014-06-07 18:39 - 590960820 _____ () C:\WINDOWS\MEMORY.DMP
2014-07-16 12:49 - 2014-05-30 13:23 - 00000000 ____D () C:\WINDOWS\Minidump
2014-07-16 09:39 - 2014-07-23 18:34 - 34176936 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\jre-8u11-windows-x64.exe@1406127811-1406135311-276bbe-B-ca440cc4230f31e2965e0fdc23cef2fa.exe.1
2014-07-16 09:39 - 2014-07-23 18:32 - 34176936 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\jre-8u11-windows-x64.exe@1406127811-1406135311-276bbe-B-ca440cc4230f31e2965e0fdc23cef2fa.exe
2014-07-16 09:39 - 2014-07-23 16:36 - 34176936 _____ (Oracle Corporation) C:\Users\Alessio\jre-8u11-windows-x64.exe@1406125847-1406133347-74f899-B-1c1494132f13ec168f9c97106957ec33.exe
2014-07-15 18:57 - 2014-07-15 18:57 - 00000000 _____ () C:\Users\Alessio\AppData\Local\{91158A2F-B624-4B04-B2C0-716841072181}
2014-07-15 15:13 - 2014-07-15 15:10 - 00000000 ____D () C:\Users\Alessio\Desktop\Horizons
2014-07-15 12:56 - 2013-08-22 13:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-07-15 12:56 - 2013-08-22 13:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-07-15 12:56 - 2013-08-22 13:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-07-15 12:56 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-07-15 12:56 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-07-15 12:56 - 2013-08-22 06:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-07-15 12:56 - 2013-08-22 06:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-07-15 12:56 - 2013-08-22 05:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-07-15 12:56 - 2013-08-22 05:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-07-15 12:56 - 2013-08-22 05:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-07-15 12:56 - 2013-08-22 05:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-07-15 12:56 - 2013-08-22 05:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-07-15 12:56 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-07-15 12:56 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-07-14 19:07 - 2014-07-14 19:07 - 00000000 _____ () C:\Users\Alessio\iexplore.exe
2014-07-14 15:19 - 2014-07-14 15:18 - 00001697 _____ () C:\Users\Alessio\Desktop\server.lnk
2014-07-14 12:42 - 2014-07-10 16:26 - 00000000 ____D () C:\Users\Alessio\Downloads\Gameforge Live
2014-07-13 16:04 - 2014-05-30 19:53 - 00001071 _____ () C:\Users\Admin\Desktop\Notepad++.lnk
2014-07-13 16:04 - 2014-05-11 19:00 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Notepad++
2014-07-13 16:04 - 2014-05-11 19:00 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-07-13 15:32 - 2014-07-13 15:32 - 00149672 _____ () C:\Users\Alessio\Downloads\p168375258361.zip
2014-07-13 14:57 - 2014-07-13 14:57 - 00316781 _____ () C:\Users\Alessio\Downloads\242109__unfa__padsynth-forcefield-loop-02.flac
2014-07-13 14:57 - 2014-07-13 14:57 - 00156221 _____ () C:\Users\Alessio\Downloads\242004__junkfood2121__fart-01.flac
2014-07-13 14:56 - 2014-07-13 14:56 - 00262188 _____ () C:\Users\Alessio\Downloads\241970__saltchicken__teleport.wav
2014-07-13 12:50 - 2014-07-07 18:24 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-07-13 12:49 - 2014-07-07 18:25 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-07-13 12:49 - 2014-07-07 18:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-07-13 12:47 - 2014-07-09 20:00 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\inkscape
2014-07-13 12:46 - 2014-07-13 12:43 - 00000000 ____D () C:\Users\Alessio\Desktop\Programme

Files to move or delete:
====================
C:\Users\Alessio\iexplore.exe
C:\Users\Alessio\jre-8u11-windows-x64.exe@1406125847-1406133347-74f899-B-1c1494132f13ec168f9c97106957ec33.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-01 09:33

==================== End Of Log ============================

--- --- ---

AlGrande · 12.08.2014, 11:21

Addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-08-2014 01
Ran by Alessio at 2014-08-12 12:11:05
Running from C:\Users\Alessio\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

8GadgetPack (HKLM-x32\...\{32A7C3B0-E5C3-4913-B1F2-49FE860FAA5E}) (Version: 11.0.0 - Helmut Buhler)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.30.100.40415 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{F5B2C61F-1C10-FD9B-C29C-D8B88C9849CF}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.01.0000 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.5.510 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Catalyst Control Center InstallProxy (x32 Version: 2014.0415.2225.38428 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0423.449.6734 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
CDBurnerXP (HKLM-x32\...\{909A791A-DBB0-432F-BC0E-D0C81925E340}) (Version: 4.5.3.4746 - Canneverbe Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
Die Sims™ 3 Stadt-Accessoires (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
Epson Event Manager (HKLM-x32\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX430 Series Printer Uninstall (HKLM\...\EPSON SX430 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Freemake Audio Converter Version 1.1.0 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.0 - Ellora Assets Corporation)
Freemake Video Converter Version 4.1.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GnuWin32: Wget-1.11.4-1 (HKLM-x32\...\Wget-1.11.4-1_is1) (Version: 1.11.4-1 - GnuWin32)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Half-Life Dedicated Server Update Tool (HKLM-x32\...\Half-Life Dedicated Server Update Tool) (Version:  - )
Hotfix für Microsoft Visual Basic 2010 Express - DEU (KB2635973) (HKLM-x32\...\{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}.KB2635973) (Version: 1 - Microsoft Corporation)
iFunbox (v2.7.2386.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.7.2386.747 - )
Imperial Glory (HKLM-x32\...\Steam App 277450) (Version:  - Pyro Studios)
Intel(R) Chipset Device Software (Version: 10.0.13 - Intel Corporation) Hidden
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
iTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)
Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Landwirtschafts Simulator 2011 (HKLM-x32\...\FarmingSimulator2011DE_is1) (Version: 1.0 - GIANTS Software)
LEGO® Harry Potter™: Die Jahre 1-4 (HKLM-x32\...\{C5A8DF48-580B-44D3-B2B2-E965A9368F28}) (Version: 1.0.0.0 - WB Games)
LEGO® Harry Potter™: Die Jahre 5-7 (HKLM-x32\...\{5C5A944F-096E-4ADD-B8E8-887F18BA6228}) (Version: 1.0.0.0 - WB Games)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.227 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.227 - LogMeIn, Inc.) Hidden
MAGIX Burn routines (HKLM\...\{A64B679B-E591-4C74-B74A-147E0CCEDCE4}) (Version: 11.0.0.238 - MAGIX Software GmbH)
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker 2013 Premium (HKLM-x32\...\MAGIX_{00A8886C-FF3D-4B52-A95D-321735687B32}) (Version: 19.0.0.29 - MAGIX AG)
MAGIX Music Maker 2013 Premium (Version: 19.0.0.29 - MAGIX AG) Hidden
MAGIX Music Maker 2013 Premium Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Music Maker 2013 Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Music Maker 2014 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Music Studio (HKLM-x32\...\MAGIX_{58AF1918-E670-44DF-BE45-BF5014AF144C}) (Version: 19.0.0.12 - MAGIX AG)
MAGIX Music Studio (Version: 19.0.0.12 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\MAGIX_{341D13B7-3C84-4D68-90B7-1F4B6C2BCB21}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare (Version: 4.3.6.1987 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{44CD9DB4-74FD-41BD-A138-AC8F279E6959}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.4.0.4000 - Maxthon International Limited)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.1165.0612 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{E9089B6A-1FDE-47F3-8D29-175F5B7A0722}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50325 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.50330 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.50325 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50325 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mining & Tunneling Simulator (HKLM-x32\...\Steam App 273820) (Version:  - United Independent Entertainment GmbH)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0a1 - Mozilla)
MP3jam 1.1.1.9 (HKLM-x32\...\MP3jam_is1) (Version: 1.1.1.9 - MP3jam)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Need for Speed™ Undercover (HKLM-x32\...\{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}) (Version: 1.0.1.0 - Electronic Arts)
Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts)
Nightly 32.0a1 (x86 en-US) (HKLM-x32\...\Nightly 32.0a1 (x86 en-US)) (Version: 32.0a1 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.7 - Notepad++ Team)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Process Hacker 2.33 (r5590) (HKLM\...\Process_Hacker2_is1) (Version: 2.33.0.5590 - wj32)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Secure Eraser (HKLM-x32\...\Secure Eraser_is1) (Version: 4.2.0.1 - ASCOMP Software GmbH)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Start Menu 8 (HKLM-x32\...\IObit_StartMenu8_is1) (Version: 1.5.0.0 - IObit)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 4.5.1f3 - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Vita 2 (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita 2 Zusatzcontent (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Bass Machine (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Drum Engine (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Power Guitar (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Rock Drums (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita String Ensemble (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita World Percussion (Version: 1.0.0.0 - MAGIX AG) Hidden
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
x64 Components v4.6.4 (HKLM\...\Advanced x64Components_is1) (Version: 4.6.4 - Shark007)
XBMC (HKCU\...\XBMC) (Version:  - Team XBMC)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-62763404-3214291445-45913408-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-62763404-3214291445-45913408-1001_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\InprocServer32 -> C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Clipboarder.gadget\Release\Clipboarder64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-62763404-3214291445-45913408-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-62763404-3214291445-45913408-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Alessio\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

08-08-2014 10:54:21 Geplanter Prüfpunkt
10-08-2014 09:24:33 Entfernt Catalyst Control Center

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2014-08-08 13:11 - 00450709 ____R C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {12227657-AE11-4270-9006-C3AC01192C74} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {1AA4B042-ED6B-4148-9E3A-CF84CA9D3D89} - \RegCure Pro_sch_DAD9A167-DB8C-11E3-BE7D-94DE80712BBD No Task File <==== ATTENTION
Task: {1D559CEF-9895-44D4-AF7A-34F3F550C9A4} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4BA39FA2-7585-40F1-AB73-AE58C0921C27} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6F5561CF-E5B3-4AC6-98BB-458E94B7949B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {70363DDD-D6CA-4520-A15C-2663B989E5C9} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-19] (AVAST Software)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {926A9A37-57A1-4BEB-AFA1-5BD07281A773} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-19] (Google Inc.)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {BDFBD7EA-62E5-41A9-8E5A-E9B7804B65C5} - System32\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805} => C:\ProgramData\cisAC4.exe
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D4970C0F-2C7E-4C4B-BAF2-2F2302DA19BD} - System32\Tasks\StartMenuAutoupdate => C:\Program Files (x86)\IObit\Start Menu 8\AutoUpdate.exe [2014-06-06] (IObit)
Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DC05071D-4688-4B52-BA22-F1724412D8C3} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-62763404-3214291445-45913408-1001 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe
Task: {DFDCD43A-38D8-4859-8A05-D0FD331ECA38} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-11] (Microsoft Corporation)
Task: {E5588757-1D1E-4335-8548-14231C9DEEFC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-19] (Google Inc.)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EDC80C80-F22B-43F7-ADD8-C86C32DCC3B9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {F0768128-CC9D-4887-9FC5-F8112E1CA44F} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\mxup.exe [2014-05-14] (Maxthon International ltd.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-10 15:07 - 2012-09-07 16:57 - 00559424 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-05-10 15:56 - 2013-06-06 20:16 - 00012520 _____ () C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\CoreTempReader.dll
2014-05-10 15:56 - 2013-06-06 20:16 - 00015080 _____ () C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\GetCoreTempInfoNET.dll
2014-05-10 15:56 - 2013-06-06 20:16 - 00014056 _____ () C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\SystemInfo.dll
2014-07-19 16:24 - 2014-07-19 16:24 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-08-12 10:46 - 2014-08-12 10:46 - 02786304 _____ () C:\Program Files\AVAST Software\Avast\defs\14081200\algo.dll
2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-03 17:39 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-07-03 17:39 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-07-03 17:39 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-07-03 17:39 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-07-03 17:39 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-07-11 18:24 - 2014-06-06 13:07 - 00348960 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madExcept_.bpl
2014-07-11 18:24 - 2014-06-06 13:07 - 00183584 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madBasic_.bpl
2014-07-11 18:24 - 2014-06-06 13:07 - 00050976 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madDisAsm_.bpl
2014-07-11 18:24 - 2014-06-06 13:08 - 00041248 _____ () C:\Program Files (x86)\IObit\Start Menu 8\winkey.dll
2014-07-05 12:24 - 2012-11-20 16:13 - 00264192 _____ () C:\Program Files (x86)\Razer\Razer Game Booster\D3DX8Wrapper.dll
2014-07-05 12:24 - 2013-11-12 09:57 - 00098304 _____ () C:\Program Files (x86)\Razer\Razer Game Booster\EasyHook32.dll
2014-07-19 16:24 - 2014-07-19 16:24 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-05-22 14:24 - 2013-09-10 10:06 - 00258944 _____ () C:\Program Files (x86)\Maxthon\bin\Maxzlib.dll
2014-05-22 14:24 - 2014-06-03 11:37 - 00247096 _____ () C:\Program Files (x86)\Maxthon\Addons\Mobile\MxMobile.dll
2014-05-22 14:24 - 2013-09-10 10:06 - 00258944 _____ () C:\Program Files (x86)\Maxthon\Bin\maxzlib.dll
2014-05-22 14:24 - 2013-11-25 09:42 - 00887064 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\libglesv2.dll
2014-05-22 14:24 - 2013-11-25 09:42 - 00109336 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\libegl.dll
2014-05-22 14:24 - 2013-11-25 09:42 - 02128152 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Alessio\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: FileZilla Server => 2
MSCONFIG\Services: PnkBstrA => 2
HKLM\...\StartupApproved\Run: => "CCE"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "EEventManager"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "BingDesktop"
HKLM\...\StartupApproved\Run32: => "ComodoFSFirefox"
HKLM\...\StartupApproved\Run32: => "PrivDogService"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "FileZilla Server Interface"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKCU\...\StartupApproved\StartupFolder: => "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Sidebar478.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Need for Speed™ Undercover Registration.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Sidebar405.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Sidebar12.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Pastebin Desktop.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Need for Speed™ Undercover Registration.lnk.disabled"
HKCU\...\StartupApproved\StartupFolder: => "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.disabled"
HKCU\...\StartupApproved\StartupFolder: => "Pastebin Desktop.lnk.disabled"
HKCU\...\StartupApproved\Run: => "Raptr"
HKCU\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKCU\...\StartupApproved\Run: => "msnmsgr"
HKCU\...\StartupApproved\Run: => "EarthAlerts"

==================== Faulty Device Manager Devices =============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/12/2014 11:49:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbamservice.exe, Version: 3.0.2.0, Zeitstempel: 0x5318d363
Name des fehlerhaften Moduls: mbamservice.exe, Version: 3.0.2.0, Zeitstempel: 0x5318d363
Ausnahmecode: 0x40000015
Fehleroffset: 0x0007da8a
ID des fehlerhaften Prozesses: 0xbcc
Startzeit der fehlerhaften Anwendung: 0xmbamservice.exe0
Pfad der fehlerhaften Anwendung: mbamservice.exe1
Pfad des fehlerhaften Moduls: mbamservice.exe2
Berichtskennung: mbamservice.exe3
Vollständiger Name des fehlerhaften Pakets: mbamservice.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbamservice.exe5

Error: (08/12/2014 11:49:06 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (08/12/2014 11:48:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbamscheduler.exe, Version: 3.0.2.0, Zeitstempel: 0x5339cec3
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xb1c
Startzeit der fehlerhaften Anwendung: 0xmbamscheduler.exe0
Pfad der fehlerhaften Anwendung: mbamscheduler.exe1
Pfad des fehlerhaften Moduls: mbamscheduler.exe2
Berichtskennung: mbamscheduler.exe3
Vollständiger Name des fehlerhaften Pakets: mbamscheduler.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbamscheduler.exe5

Error: (08/12/2014 10:56:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SkyDrive.exe, Version: 17.3.1165.612, Zeitstempel: 0x539a47b7
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17055, Zeitstempel: 0x532943a3
Ausnahmecode: 0x80000003
Fehleroffset: 0x000b3425
ID des fehlerhaften Prozesses: 0x1d94
Startzeit der fehlerhaften Anwendung: 0xSkyDrive.exe0
Pfad der fehlerhaften Anwendung: SkyDrive.exe1
Pfad des fehlerhaften Moduls: SkyDrive.exe2
Berichtskennung: SkyDrive.exe3
Vollständiger Name des fehlerhaften Pakets: SkyDrive.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SkyDrive.exe5

Error: (08/12/2014 10:48:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CRYSTALSTONE)
Description: Bei der Aktivierung der App „Microsoft.MoCamera_cw5n1h2txyewy!Microsoft.Camera“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/12/2014 10:48:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CRYSTALSTONE)
Description: Bei der Aktivierung der App „Microsoft.MoCamera_cw5n1h2txyewy!Microsoft.Camera“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/12/2014 10:48:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: CRYSTALSTONE)
Description: Das Paket „Microsoft.MoCamera_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Camera“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (08/12/2014 10:47:13 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (08/12/2014 10:47:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbamservice.exe, Version: 3.0.2.0, Zeitstempel: 0x5318d363
Name des fehlerhaften Moduls: mbamservice.exe, Version: 3.0.2.0, Zeitstempel: 0x5318d363
Ausnahmecode: 0x40000015
Fehleroffset: 0x0007da8a
ID des fehlerhaften Prozesses: 0xab8
Startzeit der fehlerhaften Anwendung: 0xmbamservice.exe0
Pfad der fehlerhaften Anwendung: mbamservice.exe1
Pfad des fehlerhaften Moduls: mbamservice.exe2
Berichtskennung: mbamservice.exe3
Vollständiger Name des fehlerhaften Pakets: mbamservice.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbamservice.exe5

Error: (08/12/2014 10:46:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbamscheduler.exe, Version: 3.0.2.0, Zeitstempel: 0x5339cec3
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xb84
Startzeit der fehlerhaften Anwendung: 0xmbamscheduler.exe0
Pfad der fehlerhaften Anwendung: mbamscheduler.exe1
Pfad des fehlerhaften Moduls: mbamscheduler.exe2
Berichtskennung: mbamscheduler.exe3
Vollständiger Name des fehlerhaften Pakets: mbamscheduler.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbamscheduler.exe5


System errors:
=============
Error: (08/12/2014 11:49:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/12/2014 11:49:06 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (08/12/2014 11:48:59 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMScheduler" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/12/2014 11:48:59 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst MBAMScheduler erreicht.

Error: (08/12/2014 11:48:24 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Bing Desktop Update service erreicht.

Error: (08/12/2014 10:48:14 AM) (Source: DCOM) (EventID: 10010) (User: CRYSTALSTONE)
Description: Microsoft.Camera

Error: (08/12/2014 10:47:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/12/2014 10:47:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (08/12/2014 10:46:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMScheduler" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/12/2014 10:46:52 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst MBAMScheduler erreicht.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-07-19 16:20:01.550
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:20:01.463
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:20:01.275
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:20:01.189
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:19:59.752
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:19:59.667
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:19:59.580
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:19:59.458
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-11 17:52:23.842
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-09 17:37:04.026
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 8138.64 MB
Available physical RAM: 5545.72 MB
Total Pagefile: 16330.64 MB
Available Pagefile: 12520.97 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:416.93 GB) (Free:224.19 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:48.83 GB) (Free:26.22 GB) NTFS
Drive f: () (Removable) (Total:1.92 GB) (Free:1.9 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: D98CD4DC)
Partition 1: (Active) - (Size=417 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

Soll ich diese ganzen links in der Hosts Datei löschen?

Warlord711 · 12.08.2014, 12:12

Zitat:

Zitat von AlGrande

Mist ich ich sollte mein Minecraft passwort ändern... Wie kriegt man den Virus denn?
Wieso sind da porno Seiten in meiner Hosts Datei!?

Soll ich diese ganzen links in der Hosts Datei löschen?

Die kommen von Spybot S&D, löschen wäre doch Quatsch.

Mal kurz schauen was das ist:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

file: "C:\Users\Alessio\AppData\Local\Temp\Rar$EXa0.993\CCE\CCE.exe"

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

AlGrande · 12.08.2014, 12:33

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-08-2014 01
Ran by Alessio at 2014-08-12 13:33:39 Run:1
Running from C:\Users\Alessio\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
file: "C:\Users\Alessio\AppData\Local\Temp\Rar$EXa0.993\CCE\CCE.exe"
*****************


========================= file: "C:\Users\Alessio\AppData\Local\Temp\Rar$EXa0.993\CCE\CCE.exe" ========================

"C:\Users\Alessio\AppData\Local\Temp\Rar$EXa0.993\CCE\CCE.exe" not found.
====== End Of File: ======


==== End of Fixlog ====

Warlord711 · 12.08.2014, 13:06

Hm komisch.

Dann mal normal weiter:

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

AlGrande · 12.08.2014, 15:09

adwcleaner:

Code:

ATTFilter

# AdwCleaner v3.304 - Bericht erstellt am 12/08/2014 um 15:17:53
# Aktualisiert 08/08/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Alessio - CRYSTALSTONE
# Gestartet von : C:\Users\Alessio\Desktop\adwcleaner_3.304.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Alessio\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Datei Gelöscht : C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\foxydeal.sqlite

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\Software\Email Notifier
Schlüssel Gelöscht : HKLM\Software\mystarttb

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v

[ Datei : C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.betterff.surfcanyon.ramp.start_time", "1403451559446");

-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Homepage] : hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=9609A0F3C1231F1C&affID=123884&tsp=4952
Gelöscht [Extension] : eofcbnmajmjmplflapaojjnihcjkigck

*************************

AdwCleaner[R0].txt - [1862 octets] - [31/05/2014 15:20:41]
AdwCleaner[R1].txt - [1446 octets] - [13/06/2014 16:08:51]
AdwCleaner[R2].txt - [1250 octets] - [22/06/2014 17:29:17]
AdwCleaner[R3].txt - [2282 octets] - [12/08/2014 14:14:45]
AdwCleaner[S0].txt - [1772 octets] - [31/05/2014 15:22:25]
AdwCleaner[S1].txt - [1408 octets] - [13/06/2014 16:10:52]
AdwCleaner[S2].txt - [1312 octets] - [22/06/2014 17:34:59]
AdwCleaner[S3].txt - [2157 octets] - [12/08/2014 15:17:53]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [2217 octets] ##########

JUNKWARE REMOVAL TOOL:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Alessio on 12.08.2014 at 15:30:25,48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.08.2014 at 15:35:44,03
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Trojan.Agent -.-
MBAM LOG:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 12.08.2014
Suchlauf-Zeit: 15:45:51
Logdatei: log.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.12.04
Rootkit Datenbank: v2014.08.04.01
Lizenz: Testversion
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Alessio

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 387889
Verstrichene Zeit: 16 Min, 48 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 2
Trojan.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\IEXPLORE.EXE, In Quarantäne, [edab517185f6023475a8a8bbe02303fd], 
Trojan.Agent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\IEXPLORE.EXE, In Quarantäne, [edab517185f6023475a8a8bbe02303fd], 

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 1
Trojan.Agent, C:\Users\Alessio\iexplore.exe, In Quarantäne, [edab517185f6023475a8a8bbe02303fd], 

Physische Sektoren: 0
(No malicious items detected)


(end)

Addition.txt:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-08-2014 01
Ran by Alessio at 2014-08-12 16:07:13
Running from C:\Users\Alessio\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

8GadgetPack (HKLM-x32\...\{32A7C3B0-E5C3-4913-B1F2-49FE860FAA5E}) (Version: 11.0.0 - Helmut Buhler)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.30.100.40415 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{F5B2C61F-1C10-FD9B-C29C-D8B88C9849CF}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.01.0000 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.5.510 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Catalyst Control Center InstallProxy (x32 Version: 2014.0415.2225.38428 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0423.449.6734 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0704.2132.36938 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0704.2133.36938 - Advanced Micro Devices, Inc.) Hidden
CDBurnerXP (HKLM-x32\...\{909A791A-DBB0-432F-BC0E-D0C81925E340}) (Version: 4.5.3.4746 - Canneverbe Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
Die Sims™ 3 Stadt-Accessoires (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
Epson Event Manager (HKLM-x32\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX430 Series Printer Uninstall (HKLM\...\EPSON SX430 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Freemake Audio Converter Version 1.1.0 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.0 - Ellora Assets Corporation)
Freemake Video Converter Version 4.1.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GnuWin32: Wget-1.11.4-1 (HKLM-x32\...\Wget-1.11.4-1_is1) (Version: 1.11.4-1 - GnuWin32)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Half-Life Dedicated Server Update Tool (HKLM-x32\...\Half-Life Dedicated Server Update Tool) (Version:  - )
Hotfix für Microsoft Visual Basic 2010 Express - DEU (KB2635973) (HKLM-x32\...\{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}.KB2635973) (Version: 1 - Microsoft Corporation)
iFunbox (v2.7.2386.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.7.2386.747 - )
Imperial Glory (HKLM-x32\...\Steam App 277450) (Version:  - Pyro Studios)
Intel(R) Chipset Device Software (Version: 10.0.13 - Intel Corporation) Hidden
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
iTunes (HKLM\...\{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}) (Version: 11.3.0.54 - Apple Inc.)
Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Landwirtschafts Simulator 2011 (HKLM-x32\...\FarmingSimulator2011DE_is1) (Version: 1.0 - GIANTS Software)
LEGO® Harry Potter™: Die Jahre 1-4 (HKLM-x32\...\{C5A8DF48-580B-44D3-B2B2-E965A9368F28}) (Version: 1.0.0.0 - WB Games)
LEGO® Harry Potter™: Die Jahre 5-7 (HKLM-x32\...\{5C5A944F-096E-4ADD-B8E8-887F18BA6228}) (Version: 1.0.0.0 - WB Games)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.227 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.227 - LogMeIn, Inc.) Hidden
MAGIX Burn routines (HKLM\...\{A64B679B-E591-4C74-B74A-147E0CCEDCE4}) (Version: 11.0.0.238 - MAGIX Software GmbH)
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Music Maker 2013 Premium (HKLM-x32\...\MAGIX_{00A8886C-FF3D-4B52-A95D-321735687B32}) (Version: 19.0.0.29 - MAGIX AG)
MAGIX Music Maker 2013 Premium (Version: 19.0.0.29 - MAGIX AG) Hidden
MAGIX Music Maker 2013 Premium Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Music Maker 2013 Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Music Maker 2014 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Music Studio (HKLM-x32\...\MAGIX_{58AF1918-E670-44DF-BE45-BF5014AF144C}) (Version: 19.0.0.12 - MAGIX AG)
MAGIX Music Studio (Version: 19.0.0.12 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\MAGIX_{341D13B7-3C84-4D68-90B7-1F4B6C2BCB21}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare (Version: 4.3.6.1987 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{44CD9DB4-74FD-41BD-A138-AC8F279E6959}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.4.0.4000 - Maxthon International Limited)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.1165.0612 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{E9089B6A-1FDE-47F3-8D29-175F5B7A0722}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50325 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.50330 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.50325 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50325 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mining & Tunneling Simulator (HKLM-x32\...\Steam App 273820) (Version:  - United Independent Entertainment GmbH)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0a1 - Mozilla)
MP3jam 1.1.1.9 (HKLM-x32\...\MP3jam_is1) (Version: 1.1.1.9 - MP3jam)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Need for Speed™ Undercover (HKLM-x32\...\{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}) (Version: 1.0.1.0 - Electronic Arts)
Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts)
Nightly 32.0a1 (x86 en-US) (HKLM-x32\...\Nightly 32.0a1 (x86 en-US)) (Version: 32.0a1 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.7 - Notepad++ Team)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Process Hacker 2.33 (r5590) (HKLM\...\Process_Hacker2_is1) (Version: 2.33.0.5590 - wj32)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Secure Eraser (HKLM-x32\...\Secure Eraser_is1) (Version: 4.2.0.1 - ASCOMP Software GmbH)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Start Menu 8 (HKLM-x32\...\IObit_StartMenu8_is1) (Version: 1.5.0.0 - IObit)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 4.5.1f3 - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Vita 2 (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita 2 Zusatzcontent (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Bass Machine (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Drum Engine (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Power Guitar (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Rock Drums (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita String Ensemble (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita World Percussion (Version: 1.0.0.0 - MAGIX AG) Hidden
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
x64 Components v4.6.4 (HKLM\...\Advanced x64Components_is1) (Version: 4.6.4 - Shark007)
XBMC (HKCU\...\XBMC) (Version:  - Team XBMC)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-62763404-3214291445-45913408-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-62763404-3214291445-45913408-1001_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\InprocServer32 -> C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Clipboarder.gadget\Release\Clipboarder64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-62763404-3214291445-45913408-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-62763404-3214291445-45913408-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Alessio\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

08-08-2014 10:54:21 Geplanter Prüfpunkt
10-08-2014 09:24:33 Entfernt Catalyst Control Center

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2014-08-08 13:11 - 00450709 ____R C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {12227657-AE11-4270-9006-C3AC01192C74} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {1AA4B042-ED6B-4148-9E3A-CF84CA9D3D89} - \RegCure Pro_sch_DAD9A167-DB8C-11E3-BE7D-94DE80712BBD No Task File <==== ATTENTION
Task: {1D559CEF-9895-44D4-AF7A-34F3F550C9A4} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4BA39FA2-7585-40F1-AB73-AE58C0921C27} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6F5561CF-E5B3-4AC6-98BB-458E94B7949B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {70363DDD-D6CA-4520-A15C-2663B989E5C9} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-19] (AVAST Software)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {926A9A37-57A1-4BEB-AFA1-5BD07281A773} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-19] (Google Inc.)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {BDFBD7EA-62E5-41A9-8E5A-E9B7804B65C5} - System32\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805} => C:\ProgramData\cisAC4.exe
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D4970C0F-2C7E-4C4B-BAF2-2F2302DA19BD} - System32\Tasks\StartMenuAutoupdate => C:\Program Files (x86)\IObit\Start Menu 8\AutoUpdate.exe [2014-06-06] (IObit)
Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DC05071D-4688-4B52-BA22-F1724412D8C3} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-62763404-3214291445-45913408-1001 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe
Task: {DFDCD43A-38D8-4859-8A05-D0FD331ECA38} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-11] (Microsoft Corporation)
Task: {E5588757-1D1E-4335-8548-14231C9DEEFC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-19] (Google Inc.)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EDC80C80-F22B-43F7-ADD8-C86C32DCC3B9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {F0768128-CC9D-4887-9FC5-F8112E1CA44F} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\mxup.exe [2014-05-14] (Maxthon International ltd.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-10 15:56 - 2013-06-06 20:16 - 00012520 _____ () C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\CoreTempReader.dll
2014-05-10 15:56 - 2013-06-06 20:16 - 00015080 _____ () C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\GetCoreTempInfoNET.dll
2014-05-10 15:56 - 2013-06-06 20:16 - 00014056 _____ () C:\Users\Alessio\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\SystemInfo.dll
2014-05-10 15:07 - 2012-09-07 16:57 - 00559424 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-07-19 16:24 - 2014-07-19 16:24 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-08-12 10:46 - 2014-08-12 10:46 - 02786304 _____ () C:\Program Files\AVAST Software\Avast\defs\14081200\algo.dll
2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-03 17:39 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-07-03 17:39 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-07-03 17:39 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-07-03 17:39 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-07-03 17:39 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-07-11 18:24 - 2014-06-06 13:07 - 00348960 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madExcept_.bpl
2014-07-11 18:24 - 2014-06-06 13:07 - 00183584 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madBasic_.bpl
2014-07-11 18:24 - 2014-06-06 13:07 - 00050976 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madDisAsm_.bpl
2014-07-05 12:24 - 2012-11-20 16:13 - 00264192 _____ () C:\Program Files (x86)\Razer\Razer Game Booster\D3DX8Wrapper.dll
2014-07-05 12:24 - 2013-11-12 09:57 - 00098304 _____ () C:\Program Files (x86)\Razer\Razer Game Booster\EasyHook32.dll
2014-07-19 16:24 - 2014-07-19 16:24 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-05-22 14:24 - 2013-09-10 10:06 - 00258944 _____ () C:\Program Files (x86)\Maxthon\bin\Maxzlib.dll
2014-05-22 14:24 - 2014-06-03 11:37 - 00247096 _____ () C:\Program Files (x86)\Maxthon\Addons\Mobile\MxMobile.dll
2014-05-22 14:24 - 2013-09-10 10:06 - 00258944 _____ () C:\Program Files (x86)\Maxthon\Bin\maxzlib.dll
2014-05-22 14:24 - 2013-11-25 09:42 - 00887064 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\libglesv2.dll
2014-05-22 14:24 - 2013-11-25 09:42 - 00109336 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\libegl.dll
2014-05-22 14:24 - 2013-11-25 09:42 - 02128152 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\ffmpegsumo.dll
2014-06-24 12:25 - 2014-06-03 11:37 - 04055504 _____ () C:\Program Files (x86)\Maxthon\Core\Webkit\pdf.dll
2014-05-28 18:41 - 2014-07-12 02:53 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-05-28 18:41 - 2014-07-12 02:53 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-05-28 18:41 - 2014-07-12 02:53 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-05-28 18:41 - 2014-07-12 02:53 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-28 18:42 - 2014-06-27 00:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-28 18:42 - 2014-07-16 04:28 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-28 18:41 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-05-28 18:42 - 2014-07-16 04:28 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-05-28 18:42 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Alessio\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: FileZilla Server => 2
MSCONFIG\Services: PnkBstrA => 2
HKLM\...\StartupApproved\Run: => "CCE"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "EEventManager"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "BingDesktop"
HKLM\...\StartupApproved\Run32: => "ComodoFSFirefox"
HKLM\...\StartupApproved\Run32: => "PrivDogService"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "FileZilla Server Interface"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKCU\...\StartupApproved\StartupFolder: => "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Sidebar478.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Need for Speed™ Undercover Registration.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Sidebar405.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Sidebar12.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Pastebin Desktop.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Need for Speed™ Undercover Registration.lnk.disabled"
HKCU\...\StartupApproved\StartupFolder: => "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.disabled"
HKCU\...\StartupApproved\StartupFolder: => "Pastebin Desktop.lnk.disabled"
HKCU\...\StartupApproved\Run: => "Raptr"
HKCU\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKCU\...\StartupApproved\Run: => "msnmsgr"
HKCU\...\StartupApproved\Run: => "EarthAlerts"

==================== Faulty Device Manager Devices =============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/12/2014 03:39:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1918
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5

Error: (08/12/2014 03:37:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x1b90
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5


System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-07-19 16:20:01.550
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:20:01.463
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:20:01.275
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:20:01.189
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:19:59.752
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:19:59.667
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:19:59.580
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-19 16:19:59.458
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-11 17:52:23.842
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-09 17:37:04.026
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 8138.64 MB
Available physical RAM: 5517.84 MB
Total Pagefile: 16330.64 MB
Available Pagefile: 12577.1 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:416.93 GB) (Free:223.98 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:48.83 GB) (Free:26.22 GB) NTFS
Drive f: () (Removable) (Total:1.92 GB) (Free:1.9 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: D98CD4DC)
Partition 1: (Active) - (Size=417 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

AlGrande · 12.08.2014, 15:13

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Alessio (administrator) on CRYSTALSTONE on 12-08-2014 16:06:29
Running from C:\Users\Alessio\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(fabi.me) C:\Users\Alessio\Desktop\SpeedAutoClicker.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\main.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-04-03] (Realtek Semiconductor)
HKLM\...\Run: [CCE] => "C:\Users\Alessio\AppData\Local\Temp\Rar$EXa0.993\CCE\CCE.exe" -showlog <===== ATTENTION
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RazerGameBooster] => C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe [61152 2014-02-25] (Razer Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-05-12] (Malwarebytes Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21442176 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHAE.EXE [283232 2014-05-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [EarthAlerts] => C:\Program Files (x86)\Earth Alerts\EarthAlerts.exe
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Run: [Speed AutoClicker] => C:\Users\Alessio\Desktop\SpeedAutoClicker.exe [179200 2013-09-24] (fabi.me)
HKU\S-1-5-21-62763404-3214291445-45913408-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Need for Speed™ Undercover Registration.lnk.disabled
ShortcutTarget: Need for Speed™ Undercover Registration.lnk.disabled -> C:\Program Files (x86)\EA Games\Need for Speed Undercover\Support\EAregister.exe (Leader Technologies)
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.disabled
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.disabled -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Pastebin Desktop.lnk.disabled
ShortcutTarget: Pastebin Desktop.lnk.disabled -> C:\Program Files (x86)\Pastebin Desktop\pastebin.exe (No File)
Startup: C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar587.lnk
ShortcutTarget: Sidebar587.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://localoem.msn.com
SearchScopes: HKLM - {F228E334-350F-4596-8F9D-F9880AFF5ECF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MASBJS
SearchScopes: HKLM-x32 - {09F155E3-0B7E-40C4-9E28-A073383614C1} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MASBJS
SearchScopes: HKCU - {F228E334-350F-4596-8F9D-F9880AFF5ECF} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default
FF NewTab: file:///C:/Meine%20Webseiten/1/www.google.de/index1127.html
FF Homepage: file:///C:/Meine%20Webseiten/1/www.google.de/index1127.html
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "62.113.208.89"
FF NetworkProxy: "socks_port", 8089
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "socks_version", 4
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Alessio\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\searchplugins\beemp3.xml
FF SearchPlugin: C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\searchplugins\mp3-search.xml
FF Extension: Flash Video Downloader - YouTube Full HD Download - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\artur.dubovoy@gmail.com [2014-07-31]
FF Extension: FoxyProxy Standard - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\foxyproxy@eric.h.jung [2014-05-29]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\ich@maltegoetz.de [2014-05-10]
FF Extension: Master Password+ - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\masterpasswordtimeoutplus@vano [2014-05-15]
FF Extension: LastPass - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\support@lastpass.com [2014-05-15]
FF Extension: WOT - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-06-12]
FF Extension: DownloadHelper - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-09]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\admin@proxy-listen.de.xpi [2014-05-10]
FF Extension: Grooveshark Unlocker - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\groovesharkUnlocker@overlord1337.xpi [2014-05-10]
FF Extension: betterFox - Make your browsing experience 15% faster. - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\multirevenue@googlemail.com.xpi [2014-05-10]
FF Extension: Download Manager (S3) - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\s3download@statusbar.xpi [2014-05-10]
FF Extension: XJZ Survey Remover - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\survey-remover@gmx.com.xpi [2014-05-10]
FF Extension: All-in-One Sidebar - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{097d3191-e6fa-4728-9826-b533d755359d}.xpi [2014-05-10]
FF Extension: {228790f3-0170-435a-be1f-7511046ea7e9} - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{228790f3-0170-435a-be1f-7511046ea7e9}.xpi [2014-05-10]
FF Extension: ProxTube - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-08-01]
FF Extension: ScrapBook - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA5}.xpi [2014-05-22]
FF Extension: NoScript - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-05-10]
FF Extension: YouTube High Definition - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2014-07-10]
FF Extension: Adblock Plus - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-10]
FF Extension: DownThemAll! - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-05-10]
FF Extension: Greasemonkey - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-05-10]
FF Extension: Download Manager Tweak - C:\Users\Alessio\AppData\Roaming\Mozilla\Firefox\Profiles\vj5kmjkb.default\Extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}.xpi [2014-05-10]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-19]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Nightly\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.de/",
			"hxxp://orteil.dashnet.org/cookieclicker/",
			"hxxp://clickingbad.nullism.com/",
			"hxxp://pizzaclicker.efekt.sk/",
			"hxxp://choppin-wood.com/",
			"hxxp://icecreamstand.ca/",
			"hxxp://candyclicker.com/",
			"hxxp://drmeth.com/index.php#",
			"hxxp://gameoftor.com/",
			"hxxp://www.minethings.com/",
			"hxxp://dhmholley.co.uk/civclicker.html",
			"hxxp://joezeng.github.io/goomyclicker/",
			"hxxp://speed-warp.net/#",
			"hxxp://progressquest.com/play/roster.html",
			"hxxp://castle.chirpingmustard.com/castle.html",
			"hxxp://candies.aniwey.net/index.php?pass=b9nmv",
			"hxxp://goldenminer.org/",
			"hxxp://adarkroom.doublespeakgames.com/",
			"hxxp://www.digitalchestnut.com/merryclickmas/",
			"hxxp://www.bluemaskgames.com/NBB/NanoBotBuilder.html",
			"https://dripstat.com/game/",
			"hxxp://candybox2.net/?slot=1",
			"hxxp://www.clickerheroes.com/",
			"hxxp://bary12.github.io/Computed/",
			"hxxp://www.gamesbutler.com/game/20892/Idle_Web_Tycoon/",
			"hxxp://deathraygames.com/play-online/miniLD48/"
CHR Extension: (Google Docs) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-19]
CHR Extension: (ArkhamNetwork) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojpohconccadjkbnmehmlpngiimmboo [2014-07-24]
CHR Extension: (Google Drive) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-19]
CHR Extension: (YouTube) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-19]
CHR Extension: (Google-Suche) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-19]
CHR Extension: (Tampermonkey) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-05-19]
CHR Extension: (No Name) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-08-05]
CHR Extension: (avast! Online Security) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-19]
CHR Extension: (Secure Bookmarks) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\leocjgngiajhfiikjolfhcpiokgbinep [2014-07-29]
CHR Extension: (Google Wallet) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-19]
CHR Extension: (Simple Startup Password) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojoalkffommhmdmbohjphohoejjmgepc [2014-07-29]
CHR Extension: (Google Mail) - C:\Users\Alessio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-19] (AVAST Software)
S2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S4 PnkBstrA; C:\Program Files (x86)\EA Games\Need for Speed Undercover\PB\PnkBstrA.exe [63040 2008-10-23] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [72992 2014-06-06] (IObit)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-05-15] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-15] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U0 acdqotfj; C:\Windows\System32\drivers\djuxo.sys [79064 2014-08-12] (Malwarebytes Corporation)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-19] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-19] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-19] (AVAST Software)
S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2014-07-19] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-19] ()
R3 athur; C:\Windows\system32\DRIVERS\athuw8x.sys [3744256 2012-11-21] (Qualcomm Atheros Communications, Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-05-14] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-07-21] (LogMeIn Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-05-14] ()
S3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv.sys [49776 2014-07-25] (Visicom Media Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [122584 2014-08-12] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
S3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-05-15] (Microsoft Corporation)
S3 cpuz136; \??\C:\Program Files (x86)\CPUID\PC Wizard 2013\pcwiz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-12 16:04 - 2014-08-12 16:04 - 00079064 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\djuxo.sys
2014-08-12 15:42 - 2014-08-12 15:45 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-08-12 15:42 - 2014-08-12 15:42 - 00001116 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-12 15:42 - 2014-08-12 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-12 15:42 - 2014-08-12 15:42 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-12 15:42 - 2014-08-12 15:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-12 15:42 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-08-12 15:42 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-08-12 15:42 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-08-12 15:41 - 2014-08-12 15:41 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Alessio\Desktop\mbam-clean-2.1.1.1001.exe
2014-08-12 15:37 - 2014-08-12 15:37 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Alessio\Desktop\mbam-setup-2.0.2.1012.exe
2014-08-12 15:35 - 2014-08-12 15:35 - 00000616 _____ () C:\Users\Alessio\Desktop\JRT.txt
2014-08-12 15:29 - 2014-08-12 15:29 - 01016261 _____ (Thisisu) C:\Users\Alessio\Desktop\JRT.exe
2014-08-12 15:29 - 2014-08-12 15:29 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-08-12 14:14 - 2014-08-12 14:14 - 01366203 _____ () C:\Users\Alessio\Desktop\adwcleaner_3.304.exe
2014-08-12 12:30 - 2014-08-12 12:30 - 00000957 _____ () C:\Users\Alessio\Desktop\Neues Textdokument.txt - Verknüpfung.lnk
2014-08-12 12:29 - 2014-08-12 12:30 - 00000060 _____ () C:\Users\Alessio\Desktop\nichtlöschenmcpasswort.txt
2014-08-12 12:11 - 2014-08-12 12:11 - 00053249 _____ () C:\Users\Alessio\Desktop\Addition.txt
2014-08-12 12:10 - 2014-08-12 16:06 - 00024907 _____ () C:\Users\Alessio\Desktop\FRST.txt
2014-08-12 12:10 - 2014-08-12 16:06 - 00000000 ____D () C:\FRST
2014-08-12 12:07 - 2014-08-12 12:08 - 02099712 _____ (Farbar) C:\Users\Alessio\Desktop\FRST64.exe
2014-08-12 10:54 - 2014-08-12 10:54 - 00000000 ____D () C:\ProgramData\EmailNotifier
2014-08-11 13:35 - 2014-08-12 12:08 - 00000000 ____D () C:\Users\Alessio\Desktop\map
2014-08-11 11:17 - 2014-08-11 11:17 - 00000000 ____D () C:\Program Files (x86)\Nightly
2014-08-10 14:31 - 2014-08-10 14:31 - 00000000 ____D () C:\ProgramData\ATI
2014-08-10 11:27 - 2014-08-10 11:27 - 00060817 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201408101127053511.log
2014-08-10 11:27 - 2014-08-10 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-08-10 11:26 - 2014-08-10 11:26 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-08-10 11:25 - 2014-08-10 11:25 - 00048824 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201408101125434144.log
2014-08-10 11:23 - 2014-08-10 11:24 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp
2014-08-09 15:19 - 2014-08-09 15:19 - 00000000 ____D () C:\Program Files (x86)\Valve
2014-08-08 13:11 - 2014-08-08 13:11 - 00450709 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140808-131141.backup
2014-08-08 13:11 - 2014-07-03 17:46 - 00450709 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140808-131125.backup
2014-08-07 14:45 - 2014-08-07 18:29 - 00000177 _____ () C:\Users\Alessio\Desktop\tf2.url
2014-08-06 18:02 - 2014-08-07 18:32 - 00000180 _____ () C:\Users\Alessio\Desktop\spiel.url
2014-08-05 16:06 - 2014-08-05 16:08 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Temporary Projects
2014-08-05 15:57 - 2014-08-05 15:57 - 00141143 _____ () C:\Users\Alessio\Downloads\Bukkit Plugin Creator.zip
2014-08-05 15:51 - 2014-08-05 15:51 - 00001299 _____ () C:\Users\Alessio\Downloads\plugin-test-1.0.zip
2014-08-03 18:07 - 2014-08-03 18:07 - 00000566 _____ () C:\Users\Alessio\Downloads\chat_id-1146960.txt
2014-08-01 13:10 - 2014-08-01 13:10 - 00009245 _____ () C:\Users\Alessio\Downloads\[1.6.4][c][forge]LumberJack.zip
2014-08-01 12:37 - 2014-08-01 12:37 - 00307390 _____ () C:\Users\Alessio\Downloads\Damage-Indicators-Mod-1.6.4.zip
2014-08-01 12:35 - 2014-08-01 12:35 - 00436148 _____ () C:\Users\Alessio\Downloads\Not-Enough-Items-1.6.4(1).jar
2014-08-01 12:34 - 2014-08-01 12:34 - 00427800 _____ () C:\Users\Alessio\Downloads\Not-Enough-Items-1.6.4.jar
2014-08-01 12:32 - 2014-08-01 12:32 - 00449021 _____ () C:\Users\Alessio\Downloads\NotEnoughItems-1.7.10-1.0.2.15-universal.jar
2014-07-31 17:57 - 2014-08-01 17:26 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\XBMC
2014-07-31 17:55 - 2014-07-31 17:55 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC
2014-07-31 17:54 - 2014-07-31 17:55 - 00000000 ____D () C:\Program Files (x86)\XBMC
2014-07-31 15:32 - 2014-08-01 16:15 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Audacity
2014-07-30 11:19 - 2014-07-30 11:19 - 00320122 _____ () C:\Users\Alessio\Downloads\pq6-2.zip
2014-07-30 11:19 - 2003-09-05 01:09 - 00322663 _____ (Grumdrig) C:\Users\Alessio\Desktop\pq.exe
2014-07-29 18:40 - 2014-07-29 18:41 - 42894411 _____ () C:\Users\Alessio\Downloads\20120504_moonshell210childzwai_updated.7z
2014-07-29 18:26 - 2014-07-29 18:26 - 00434802 _____ () C:\Users\Alessio\Downloads\StellaDS_V12.zip
2014-07-29 18:12 - 2014-07-29 18:12 - 01185111 _____ () C:\Users\Alessio\Downloads\dsiwarehaxinj_v11.zip
2014-07-29 18:04 - 2014-07-29 18:04 - 04427097 _____ () C:\Users\Alessio\Downloads\hackmii_installer_v1.2.zip
2014-07-29 18:04 - 2014-07-29 18:04 - 00146508 _____ () C:\Users\Alessio\Downloads\dsi_homebrew_channel.rar
2014-07-26 10:52 - 2014-07-26 10:52 - 00000000 ___HD () C:\Users\Alessio\Desktop\.updtmp
2014-07-25 20:25 - 2014-08-01 12:29 - 00000000 ____D () C:\Users\Alessio\Desktop\Monster
2014-07-25 12:19 - 2014-07-25 12:19 - 00049776 _____ (Visicom Media Inc.) C:\WINDOWS\system32\Drivers\mcvidrv.sys
2014-07-24 20:33 - 2014-07-31 11:43 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Earth Alerts
2014-07-24 20:30 - 2014-07-24 20:30 - 06163191 _____ () C:\Users\Alessio\Downloads\Setup_EarthAlerts_2014.1.174_.zip
2014-07-23 18:36 - 2014-07-23 18:37 - 00000000 ____D () C:\Users\Alessio\Desktop\servermod
2014-07-23 18:34 - 2014-07-16 09:39 - 34176936 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\jre-8u11-windows-x64.exe@1406127811-1406135311-276bbe-B-ca440cc4230f31e2965e0fdc23cef2fa.exe.1
2014-07-23 18:32 - 2014-07-16 09:39 - 34176936 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\jre-8u11-windows-x64.exe@1406127811-1406135311-276bbe-B-ca440cc4230f31e2965e0fdc23cef2fa.exe
2014-07-23 16:37 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-23 16:37 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-23 16:37 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-23 16:36 - 2014-07-16 09:39 - 34176936 _____ (Oracle Corporation) C:\Users\Alessio\jre-8u11-windows-x64.exe@1406125847-1406133347-74f899-B-1c1494132f13ec168f9c97106957ec33.exe
2014-07-23 16:34 - 2014-07-22 13:28 - 00401408 _____ () C:\WINDOWS\system32\wget.exe
2014-07-23 13:01 - 2014-07-23 13:02 - 11895013 _____ () C:\Users\Alessio\Downloads\WeepCraft(1).zip
2014-07-23 12:48 - 2014-07-23 12:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-23 12:48 - 2014-07-23 12:48 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-22 19:19 - 2014-08-01 17:32 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\uTorrent
2014-07-22 19:16 - 2014-07-22 19:16 - 01855312 _____ (BitTorrent Inc.) C:\Users\Alessio\Downloads\uTorrent54.exe
2014-07-22 18:41 - 2014-07-22 18:48 - 00011680 _____ () C:\Users\Alessio\Desktop\clicker.txt
2014-07-22 15:14 - 2014-07-22 15:14 - 00137376 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcomp120.dll
2014-07-22 13:25 - 2014-07-22 13:25 - 03417936 _____ () C:\Users\Alessio\Downloads\wget-1.15.tar.gz
2014-07-22 13:25 - 2014-07-22 13:25 - 03012464 _____ (GnuWin32 <gnuwin32.sourceforge.net> ) C:\Users\Alessio\Downloads\wget-1.11.4-1-setup.exe
2014-07-22 13:25 - 2014-07-22 13:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GnuWin32
2014-07-22 13:25 - 2014-07-22 13:25 - 00000000 ____D () C:\Program Files (x86)\GnuWin32
2014-07-22 13:16 - 2014-07-22 13:19 - 00000000 ____D () C:\Users\Alessio\Downloads\a
2014-07-22 12:02 - 2014-07-22 12:02 - 00113256 _____ () C:\Users\Alessio\Downloads\TooManyItems-Mod-Forge-1.7.10.jar
2014-07-21 22:05 - 2014-07-21 22:05 - 00230912 _____ () C:\WINDOWS\system32\clinfo.exe
2014-07-21 22:05 - 2014-07-21 22:05 - 00135168 _____ (AMD) C:\WINDOWS\system32\coinst_13.251.9001.1001.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00100352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OpenVideo64.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00086528 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OVDecode64.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00083968 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OpenVideo.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00073728 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OVDecode.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 29382144 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 26352128 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 22157824 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 15716352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 13209088 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2014-07-21 22:04 - 2014-07-21 22:04 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 03461040 _____ () C:\WINDOWS\SysWOW64\atiumdva.cap
2014-07-21 22:04 - 2014-07-21 22:04 - 03426688 _____ () C:\WINDOWS\system32\atiumd6a.cap
2014-07-21 22:04 - 2014-07-21 22:04 - 00825344 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00626688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2014-07-21 22:04 - 2014-07-21 22:04 - 00550472 _____ () C:\WINDOWS\SysWOW64\atiapfxx.blb
2014-07-21 22:04 - 2014-07-21 22:04 - 00550472 _____ () C:\WINDOWS\system32\atiapfxx.blb
2014-07-21 22:04 - 2014-07-21 22:04 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2014-07-21 22:04 - 2014-07-21 22:04 - 00190976 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00063488 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00062464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00057344 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00055808 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00031232 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 24860160 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00412672 _____ () C:\WINDOWS\system32\amdmiracast.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00134656 _____ () C:\WINDOWS\system32\amdhdl64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00123392 _____ () C:\WINDOWS\SysWOW64\amdhdl32.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2014-07-21 20:38 - 2014-08-01 17:41 - 00000088 _____ () C:\Users\Alessio\Desktop\dewfgrerv.txt
2014-07-21 18:08 - 2014-07-21 18:08 - 00046136 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2014-07-21 16:52 - 2014-07-21 16:52 - 03009067 _____ () C:\Users\Alessio\Downloads\forge-1.7.10-10.13.0.1187-installer.jar
2014-07-21 16:36 - 2014-07-21 17:56 - 00000000 ____D () C:\Users\Alessio\Desktop\mod
2014-07-21 13:39 - 2014-07-21 13:40 - 00000021 _____ () C:\Users\Alessio\Desktop\text.txt
2014-07-20 19:33 - 2014-08-01 18:04 - 00000228 _____ () C:\Users\Alessio\Desktop\Musik.txt
2014-07-20 15:32 - 2014-07-20 16:03 - 00000000 ____D () C:\Users\Alessio\Desktop\cauldron
2014-07-20 15:31 - 2014-07-20 15:31 - 11469687 _____ () C:\Users\Alessio\Downloads\cauldron-1.7.10-1.1187.03.119-installer.jar
2014-07-19 17:55 - 2014-07-19 17:55 - 00000657 _____ () C:\Users\Alessio\Desktop\Pylo - Verknüpfung.lnk
2014-07-19 17:52 - 2014-07-19 17:52 - 00000000 ____D () C:\Pylo
2014-07-19 17:50 - 2014-07-19 17:51 - 71049059 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.7 [1.7.10].exe
2014-07-19 16:56 - 2014-07-19 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Deployment
2014-07-19 16:56 - 2014-07-19 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Apps\2.0
2014-07-19 16:52 - 2014-07-19 16:52 - 00001801 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files\iTunes
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files\iPod
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-19 16:46 - 2014-07-19 16:47 - 34176936 _____ (Oracle Corporation) C:\Users\Alessio\Downloads\jre-8u11-windows-x64.exe
2014-07-19 16:25 - 2014-07-19 16:25 - 00001988 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-19 16:25 - 2014-07-19 16:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-19 16:24 - 2014-07-19 16:25 - 00427360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 01041168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00307344 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-07-19 16:24 - 2014-07-19 16:24 - 00224896 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00092008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00079184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00044640 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\aswTap.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-07-19 16:24 - 2014-07-19 16:24 - 00000000 ____D () C:\Program Files\AVAST Software
2014-07-19 16:23 - 2014-07-19 16:24 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-07-19 13:20 - 2014-07-19 13:20 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Google
2014-07-19 13:19 - 2014-08-03 11:43 - 00000000 ____D () C:\Program Files\Google
2014-07-18 14:20 - 2014-07-18 14:20 - 02936397 _____ () C:\Users\Alessio\Downloads\forge-1.7.2-10.12.2.1147-installer(1).jar
2014-07-18 14:14 - 2014-07-19 18:54 - 00000000 ____D () C:\Users\Alessio\Desktop\mod server
2014-07-18 14:02 - 2014-07-18 14:05 - 88567838 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.7 [1.7.10].zip
2014-07-18 13:35 - 2014-07-18 13:35 - 00000054 _____ () C:\Users\Alessio\Desktop\sachen.txt
2014-07-17 20:28 - 2013-09-24 11:14 - 00179200 _____ (fabi.me) C:\Users\Alessio\Desktop\SpeedAutoClicker.exe
2014-07-17 18:43 - 2014-07-17 18:50 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\.technic
2014-07-17 18:43 - 2014-07-17 18:42 - 02346942 _____ () C:\Users\Alessio\Desktop\TechnicLauncher.exe
2014-07-17 18:42 - 2014-07-17 18:42 - 02346942 _____ () C:\Users\Alessio\Downloads\TechnicLauncher.exe
2014-07-17 15:51 - 2014-07-27 17:51 - 00001306 _____ () C:\Users\Public\Desktop\paint.net.lnk
2014-07-16 17:53 - 2014-07-16 17:57 - 94441323 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.6 [1.7.2].zip
2014-07-16 12:49 - 2014-07-16 12:49 - 00280944 _____ () C:\WINDOWS\Minidump\071614-25031-01.dmp
2014-07-15 18:57 - 2014-07-15 18:57 - 00000000 _____ () C:\Users\Alessio\AppData\Local\{91158A2F-B624-4B04-B2C0-716841072181}
2014-07-15 15:10 - 2014-07-15 15:13 - 00000000 ____D () C:\Users\Alessio\Desktop\Horizons
2014-07-15 15:05 - 2014-08-01 13:12 - 00000000 ____D () C:\Users\Alessio\AppData\Local\ftblauncher
2014-07-15 15:05 - 2014-07-25 20:24 - 04980105 _____ () C:\Users\Alessio\Desktop\launcher^FTB_Launcher.exe
2014-07-15 15:05 - 2014-07-25 20:24 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\ftblauncher
2014-07-14 15:18 - 2014-07-14 15:19 - 00001697 _____ () C:\Users\Alessio\Desktop\server.lnk
2014-07-13 16:04 - 2014-08-07 18:33 - 00001953 _____ () C:\Users\Alessio\Desktop\Notepad++.lnk
2014-07-13 15:32 - 2014-07-13 15:32 - 00149672 _____ () C:\Users\Alessio\Downloads\p168375258361.zip
2014-07-13 14:57 - 2014-07-13 14:57 - 00316781 _____ () C:\Users\Alessio\Downloads\242109__unfa__padsynth-forcefield-loop-02.flac
2014-07-13 14:57 - 2014-07-13 14:57 - 00156221 _____ () C:\Users\Alessio\Downloads\242004__junkfood2121__fart-01.flac
2014-07-13 14:56 - 2014-07-13 14:56 - 00262188 _____ () C:\Users\Alessio\Downloads\241970__saltchicken__teleport.wav
2014-07-13 12:43 - 2014-07-13 12:46 - 00000000 ____D () C:\Users\Alessio\Desktop\Programme

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-12 16:06 - 2014-08-12 12:10 - 00024907 _____ () C:\Users\Alessio\Desktop\FRST.txt
2014-08-12 16:06 - 2014-08-12 12:10 - 00000000 ____D () C:\FRST
2014-08-12 16:06 - 2014-05-10 15:23 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Skype
2014-08-12 16:04 - 2014-08-12 16:04 - 00079064 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\djuxo.sys
2014-08-12 16:04 - 2014-05-15 16:49 - 00000000 ____D () C:\Users\Alessio
2014-08-12 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-08-12 15:52 - 2014-05-10 15:45 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-08-12 15:51 - 2014-05-19 16:41 - 00001138 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-12 15:50 - 2014-05-15 17:01 - 02063809 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-12 15:45 - 2014-08-12 15:42 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-08-12 15:42 - 2014-08-12 15:42 - 00001116 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-12 15:42 - 2014-08-12 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-12 15:42 - 2014-08-12 15:42 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-12 15:42 - 2014-08-12 15:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-12 15:42 - 2014-05-10 14:55 - 00003590 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-62763404-3214291445-45913408-1001
2014-08-12 15:41 - 2014-08-12 15:41 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Alessio\Desktop\mbam-clean-2.1.1.1001.exe
2014-08-12 15:37 - 2014-08-12 15:37 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Alessio\Desktop\mbam-setup-2.0.2.1012.exe
2014-08-12 15:35 - 2014-08-12 15:35 - 00000616 _____ () C:\Users\Alessio\Desktop\JRT.txt
2014-08-12 15:32 - 2014-05-28 18:40 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-12 15:31 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-08-12 15:29 - 2014-08-12 15:29 - 01016261 _____ (Thisisu) C:\Users\Alessio\Desktop\JRT.exe
2014-08-12 15:29 - 2014-08-12 15:29 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-08-12 15:28 - 2014-07-01 13:03 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-08-12 15:22 - 2014-05-19 16:41 - 00002201 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-12 15:20 - 2014-05-31 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\LogMeIn Hamachi
2014-08-12 15:20 - 2014-05-19 16:40 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-12 15:19 - 2014-06-06 20:39 - 00027274 _____ () C:\WINDOWS\PFRO.log
2014-08-12 15:19 - 2014-05-15 16:44 - 00000000 _____ () C:\WINDOWS\system32\Drivers\lvuvc.hs
2014-08-12 15:19 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-08-12 15:18 - 2014-05-31 15:20 - 00000000 ____D () C:\AdwCleaner
2014-08-12 15:18 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-08-12 14:14 - 2014-08-12 14:14 - 01366203 _____ () C:\Users\Alessio\Desktop\adwcleaner_3.304.exe
2014-08-12 14:14 - 2014-05-10 15:29 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\.minecraft
2014-08-12 12:30 - 2014-08-12 12:30 - 00000957 _____ () C:\Users\Alessio\Desktop\Neues Textdokument.txt - Verknüpfung.lnk
2014-08-12 12:30 - 2014-08-12 12:29 - 00000060 _____ () C:\Users\Alessio\Desktop\nichtlöschenmcpasswort.txt
2014-08-12 12:11 - 2014-08-12 12:11 - 00053249 _____ () C:\Users\Alessio\Desktop\Addition.txt
2014-08-12 12:08 - 2014-08-12 12:07 - 02099712 _____ (Farbar) C:\Users\Alessio\Desktop\FRST64.exe
2014-08-12 12:08 - 2014-08-11 13:35 - 00000000 ____D () C:\Users\Alessio\Desktop\map
2014-08-12 12:07 - 2014-05-14 17:23 - 00000000 ____D () C:\Users\Alessio\Desktop\Ordner
2014-08-12 10:56 - 2014-05-15 17:56 - 00003954 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{584D786A-69FE-4BF5-AD35-57F16EE1098A}
2014-08-12 10:55 - 2014-06-04 12:02 - 00002548 _____ () C:\WINDOWS\setupact.log
2014-08-12 10:55 - 2014-05-15 16:43 - 00021119 _____ () C:\WINDOWS\system32\lvcoinst.log
2014-08-12 10:54 - 2014-08-12 10:54 - 00000000 ____D () C:\ProgramData\EmailNotifier
2014-08-12 10:45 - 2014-05-10 15:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-11 11:17 - 2014-08-11 11:17 - 00000000 ____D () C:\Program Files (x86)\Nightly
2014-08-10 14:31 - 2014-08-10 14:31 - 00000000 ____D () C:\ProgramData\ATI
2014-08-10 11:28 - 2014-05-10 15:39 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Raptr
2014-08-10 11:27 - 2014-08-10 11:27 - 00060817 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201408101127053511.log
2014-08-10 11:27 - 2014-08-10 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-08-10 11:27 - 2014-05-10 15:39 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-08-10 11:26 - 2014-08-10 11:26 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-08-10 11:26 - 2014-05-10 15:32 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-08-10 11:25 - 2014-08-10 11:25 - 00048824 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201408101125434144.log
2014-08-10 11:24 - 2014-08-10 11:23 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp
2014-08-09 15:19 - 2014-08-09 15:19 - 00000000 ____D () C:\Program Files (x86)\Valve
2014-08-09 15:19 - 2014-05-15 16:49 - 00000000 ____D () C:\Users\Admin
2014-08-08 13:11 - 2014-08-08 13:11 - 00450709 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20140808-131141.backup
2014-08-08 13:09 - 2014-07-03 17:39 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-08-07 18:33 - 2014-07-13 16:04 - 00001953 _____ () C:\Users\Alessio\Desktop\Notepad++.lnk
2014-08-07 18:32 - 2014-08-06 18:02 - 00000180 _____ () C:\Users\Alessio\Desktop\spiel.url
2014-08-07 18:29 - 2014-08-07 14:45 - 00000177 _____ () C:\Users\Alessio\Desktop\tf2.url
2014-08-05 16:08 - 2014-08-05 16:06 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Temporary Projects
2014-08-05 16:02 - 2014-06-13 16:21 - 00000000 ____D () C:\Users\Alessio\Documents\Visual Studio 2010
2014-08-05 15:57 - 2014-08-05 15:57 - 00141143 _____ () C:\Users\Alessio\Downloads\Bukkit Plugin Creator.zip
2014-08-05 15:51 - 2014-08-05 15:51 - 00001299 _____ () C:\Users\Alessio\Downloads\plugin-test-1.0.zip
2014-08-04 10:21 - 2014-05-22 12:02 - 00000000 ____D () C:\Meine Webseiten
2014-08-03 18:07 - 2014-08-03 18:07 - 00000566 _____ () C:\Users\Alessio\Downloads\chat_id-1146960.txt
2014-08-03 17:38 - 2014-05-18 19:51 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Windows Live
2014-08-03 11:43 - 2014-07-19 13:19 - 00000000 ____D () C:\Program Files\Google
2014-08-03 11:43 - 2014-05-19 16:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-02 13:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-02 12:39 - 2014-07-10 16:26 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2014-08-02 12:37 - 2014-05-19 16:40 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Google
2014-08-02 11:56 - 2014-06-01 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-08-02 11:51 - 2014-05-15 17:08 - 00000000 ___DO () C:\Users\Alessio\OneDrive
2014-08-01 18:04 - 2014-07-20 19:33 - 00000228 _____ () C:\Users\Alessio\Desktop\Musik.txt
2014-08-01 17:41 - 2014-07-21 20:38 - 00000088 _____ () C:\Users\Alessio\Desktop\dewfgrerv.txt
2014-08-01 17:32 - 2014-07-22 19:19 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\uTorrent
2014-08-01 17:27 - 2014-05-11 10:41 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-08-01 17:26 - 2014-07-31 17:57 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\XBMC
2014-08-01 16:15 - 2014-07-31 15:32 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Audacity
2014-08-01 13:12 - 2014-07-15 15:05 - 00000000 ____D () C:\Users\Alessio\AppData\Local\ftblauncher
2014-08-01 13:10 - 2014-08-01 13:10 - 00009245 _____ () C:\Users\Alessio\Downloads\[1.6.4][c][forge]LumberJack.zip
2014-08-01 12:37 - 2014-08-01 12:37 - 00307390 _____ () C:\Users\Alessio\Downloads\Damage-Indicators-Mod-1.6.4.zip
2014-08-01 12:35 - 2014-08-01 12:35 - 00436148 _____ () C:\Users\Alessio\Downloads\Not-Enough-Items-1.6.4(1).jar
2014-08-01 12:34 - 2014-08-01 12:34 - 00427800 _____ () C:\Users\Alessio\Downloads\Not-Enough-Items-1.6.4.jar
2014-08-01 12:32 - 2014-08-01 12:32 - 00449021 _____ () C:\Users\Alessio\Downloads\NotEnoughItems-1.7.10-1.0.2.15-universal.jar
2014-08-01 12:29 - 2014-07-25 20:25 - 00000000 ____D () C:\Users\Alessio\Desktop\Monster
2014-08-01 09:22 - 2013-08-22 16:44 - 00555272 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-31 19:46 - 2014-05-11 19:13 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-31 19:46 - 2012-07-26 07:26 - 00000167 _____ () C:\WINDOWS\win.ini
2014-07-31 18:02 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\dvdcss
2014-07-31 17:55 - 2014-07-31 17:55 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC
2014-07-31 17:55 - 2014-07-31 17:54 - 00000000 ____D () C:\Program Files (x86)\XBMC
2014-07-31 11:43 - 2014-07-24 20:33 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Earth Alerts
2014-07-30 14:19 - 2014-05-11 10:39 - 00000000 ____D () C:\ProgramData\Origin
2014-07-30 12:27 - 2014-05-11 10:39 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-07-30 11:19 - 2014-07-30 11:19 - 00320122 _____ () C:\Users\Alessio\Downloads\pq6-2.zip
2014-07-29 18:41 - 2014-07-29 18:40 - 42894411 _____ () C:\Users\Alessio\Downloads\20120504_moonshell210childzwai_updated.7z
2014-07-29 18:26 - 2014-07-29 18:26 - 00434802 _____ () C:\Users\Alessio\Downloads\StellaDS_V12.zip
2014-07-29 18:12 - 2014-07-29 18:12 - 01185111 _____ () C:\Users\Alessio\Downloads\dsiwarehaxinj_v11.zip
2014-07-29 18:04 - 2014-07-29 18:04 - 04427097 _____ () C:\Users\Alessio\Downloads\hackmii_installer_v1.2.zip
2014-07-29 18:04 - 2014-07-29 18:04 - 00146508 _____ () C:\Users\Alessio\Downloads\dsi_homebrew_channel.rar
2014-07-27 17:51 - 2014-07-17 15:51 - 00001306 _____ () C:\Users\Public\Desktop\paint.net.lnk
2014-07-27 17:51 - 2014-05-11 18:58 - 00001318 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
2014-07-27 17:51 - 2014-05-11 18:56 - 00000000 ____D () C:\Program Files\Paint.NET
2014-07-26 10:52 - 2014-07-26 10:52 - 00000000 ___HD () C:\Users\Alessio\Desktop\.updtmp
2014-07-26 10:49 - 2014-05-11 19:17 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-26 10:49 - 2014-05-11 19:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-25 20:42 - 2014-05-11 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-25 20:24 - 2014-07-15 15:05 - 04980105 _____ () C:\Users\Alessio\Desktop\launcher^FTB_Launcher.exe
2014-07-25 20:24 - 2014-07-15 15:05 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\ftblauncher
2014-07-25 17:04 - 2014-06-04 20:25 - 00000000 ____D () C:\Users\Alessio\.gimp-2.8
2014-07-25 12:19 - 2014-07-25 12:19 - 00049776 _____ (Visicom Media Inc.) C:\WINDOWS\system32\Drivers\mcvidrv.sys
2014-07-24 20:35 - 2014-05-11 10:43 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-07-24 20:32 - 2014-05-14 13:29 - 00001294 _____ () C:\Users\Public\Desktop\SimCity™.lnk
2014-07-24 20:30 - 2014-07-24 20:30 - 06163191 _____ () C:\Users\Alessio\Downloads\Setup_EarthAlerts_2014.1.174_.zip
2014-07-24 20:24 - 2014-05-12 13:55 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\vlc
2014-07-24 15:38 - 2014-05-12 13:11 - 00000000 ____D () C:\Users\Alessio\Documents\Bandicam
2014-07-23 18:37 - 2014-07-23 18:36 - 00000000 ____D () C:\Users\Alessio\Desktop\servermod
2014-07-23 18:35 - 2014-05-10 15:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 18:11 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-23 13:02 - 2014-07-23 13:01 - 11895013 _____ () C:\Users\Alessio\Downloads\WeepCraft(1).zip
2014-07-23 13:01 - 2014-05-11 19:52 - 00162120 _____ () C:\Users\Alessio\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-23 12:48 - 2014-07-23 12:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-23 12:48 - 2014-07-23 12:48 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 12:48 - 2014-05-31 16:56 - 00000944 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-07-22 19:16 - 2014-07-22 19:16 - 01855312 _____ (BitTorrent Inc.) C:\Users\Alessio\Downloads\uTorrent54.exe
2014-07-22 18:48 - 2014-07-22 18:41 - 00011680 _____ () C:\Users\Alessio\Desktop\clicker.txt
2014-07-22 15:14 - 2014-07-22 15:14 - 00137376 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcomp120.dll
2014-07-22 13:34 - 2014-05-11 19:37 - 00000000 ____D () C:\TEMP
2014-07-22 13:28 - 2014-07-23 16:34 - 00401408 _____ () C:\WINDOWS\system32\wget.exe
2014-07-22 13:25 - 2014-07-22 13:25 - 03417936 _____ () C:\Users\Alessio\Downloads\wget-1.15.tar.gz
2014-07-22 13:25 - 2014-07-22 13:25 - 03012464 _____ (GnuWin32 <gnuwin32.sourceforge.net> ) C:\Users\Alessio\Downloads\wget-1.11.4-1-setup.exe
2014-07-22 13:25 - 2014-07-22 13:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GnuWin32
2014-07-22 13:25 - 2014-07-22 13:25 - 00000000 ____D () C:\Program Files (x86)\GnuWin32
2014-07-22 13:19 - 2014-07-22 13:16 - 00000000 ____D () C:\Users\Alessio\Downloads\a
2014-07-22 12:02 - 2014-07-22 12:02 - 00113256 _____ () C:\Users\Alessio\Downloads\TooManyItems-Mod-Forge-1.7.10.jar
2014-07-21 22:05 - 2014-07-21 22:05 - 00230912 _____ () C:\WINDOWS\system32\clinfo.exe
2014-07-21 22:05 - 2014-07-21 22:05 - 00135168 _____ (AMD) C:\WINDOWS\system32\coinst_13.251.9001.1001.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00100352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OpenVideo64.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00086528 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OVDecode64.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00083968 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OpenVideo.dll
2014-07-21 22:05 - 2014-07-21 22:05 - 00073728 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OVDecode.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 29382144 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 26352128 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 22157824 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 15716352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 13209088 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2014-07-21 22:04 - 2014-07-21 22:04 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 03461040 _____ () C:\WINDOWS\SysWOW64\atiumdva.cap
2014-07-21 22:04 - 2014-07-21 22:04 - 03426688 _____ () C:\WINDOWS\system32\atiumd6a.cap
2014-07-21 22:04 - 2014-07-21 22:04 - 00825344 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00626688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2014-07-21 22:04 - 2014-07-21 22:04 - 00550472 _____ () C:\WINDOWS\SysWOW64\atiapfxx.blb
2014-07-21 22:04 - 2014-07-21 22:04 - 00550472 _____ () C:\WINDOWS\system32\atiapfxx.blb
2014-07-21 22:04 - 2014-07-21 22:04 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2014-07-21 22:04 - 2014-07-21 22:04 - 00190976 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00063488 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00062464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00057344 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00055808 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2014-07-21 22:04 - 2014-07-21 22:04 - 00031232 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 09753752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 08406024 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 01318552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 01144320 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 01100216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 00588288 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2014-07-21 22:04 - 2014-05-10 15:15 - 00239616 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2014-07-21 22:04 - 2014-05-10 15:15 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2014-07-21 22:04 - 2014-05-10 15:15 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 24860160 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00412672 _____ () C:\WINDOWS\system32\amdmiracast.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00157736 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00142304 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00134656 _____ () C:\WINDOWS\system32\amdhdl64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00123392 _____ () C:\WINDOWS\SysWOW64\amdhdl32.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2014-07-21 22:03 - 2014-07-21 22:03 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2014-07-21 18:08 - 2014-07-21 18:08 - 00046136 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2014-07-21 17:56 - 2014-07-21 16:36 - 00000000 ____D () C:\Users\Alessio\Desktop\mod
2014-07-21 16:52 - 2014-07-21 16:52 - 03009067 _____ () C:\Users\Alessio\Downloads\forge-1.7.10-10.13.0.1187-installer.jar
2014-07-21 13:40 - 2014-07-21 13:39 - 00000021 _____ () C:\Users\Alessio\Desktop\text.txt
2014-07-20 16:03 - 2014-07-20 15:32 - 00000000 ____D () C:\Users\Alessio\Desktop\cauldron
2014-07-20 15:31 - 2014-07-20 15:31 - 11469687 _____ () C:\Users\Alessio\Downloads\cauldron-1.7.10-1.1187.03.119-installer.jar
2014-07-19 18:54 - 2014-07-18 14:14 - 00000000 ____D () C:\Users\Alessio\Desktop\mod server
2014-07-19 17:55 - 2014-07-19 17:55 - 00000657 _____ () C:\Users\Alessio\Desktop\Pylo - Verknüpfung.lnk
2014-07-19 17:52 - 2014-07-19 17:52 - 00000000 ____D () C:\Pylo
2014-07-19 17:51 - 2014-07-19 17:50 - 71049059 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.7 [1.7.10].exe
2014-07-19 16:56 - 2014-07-19 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Deployment
2014-07-19 16:56 - 2014-07-19 16:56 - 00000000 ____D () C:\Users\Alessio\AppData\Local\Apps\2.0
2014-07-19 16:52 - 2014-07-19 16:52 - 00001801 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files\iTunes
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files\iPod
2014-07-19 16:52 - 2014-07-19 16:52 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-19 16:47 - 2014-07-19 16:46 - 34176936 _____ (Oracle Corporation) C:\Users\Alessio\Downloads\jre-8u11-windows-x64.exe
2014-07-19 16:32 - 2014-05-10 15:13 - 00000000 ____D () C:\Program Files\WinRAR
2014-07-19 16:29 - 2014-05-10 15:13 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-19 16:29 - 2014-05-10 15:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-19 16:25 - 2014-07-19 16:25 - 00001988 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-19 16:25 - 2014-07-19 16:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-19 16:25 - 2014-07-19 16:24 - 00427360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-07-19 16:25 - 2014-05-10 15:46 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\AVAST Software
2014-07-19 16:24 - 2014-07-19 16:24 - 01041168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00307344 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-07-19 16:24 - 2014-07-19 16:24 - 00224896 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00092008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00079184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00044640 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\aswTap.sys
2014-07-19 16:24 - 2014-07-19 16:24 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-07-19 16:24 - 2014-07-19 16:24 - 00000000 ____D () C:\Program Files\AVAST Software
2014-07-19 16:24 - 2014-07-19 16:23 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-07-19 16:24 - 2014-05-10 15:45 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-07-19 13:20 - 2014-07-19 13:20 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Google
2014-07-18 14:20 - 2014-07-18 14:20 - 02936397 _____ () C:\Users\Alessio\Downloads\forge-1.7.2-10.12.2.1147-installer(1).jar
2014-07-18 14:05 - 2014-07-18 14:02 - 88567838 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.7 [1.7.10].zip
2014-07-18 13:35 - 2014-07-18 13:35 - 00000054 _____ () C:\Users\Alessio\Desktop\sachen.txt
2014-07-18 12:07 - 2014-07-03 20:14 - 00000000 ____D () C:\Users\Alessio\AppData\Local\fabi.me
2014-07-17 18:50 - 2014-07-17 18:43 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\.technic
2014-07-17 18:42 - 2014-07-17 18:43 - 02346942 _____ () C:\Users\Alessio\Desktop\TechnicLauncher.exe
2014-07-17 18:42 - 2014-07-17 18:42 - 02346942 _____ () C:\Users\Alessio\Downloads\TechnicLauncher.exe
2014-07-16 17:57 - 2014-07-16 17:53 - 94441323 _____ () C:\Users\Alessio\Downloads\MCreator 1.4.6 [1.7.2].zip
2014-07-16 17:21 - 2014-06-19 16:42 - 00000000 ____D () C:\ProgramData\InstallMate
2014-07-16 17:21 - 2014-06-17 11:35 - 00000000 ____D () C:\Program Files (x86)\AnyToISO
2014-07-16 17:12 - 2014-07-09 19:18 - 00000000 ____D () C:\Program Files\Blender Foundation
2014-07-16 12:49 - 2014-07-16 12:49 - 00280944 _____ () C:\WINDOWS\Minidump\071614-25031-01.dmp
2014-07-16 12:49 - 2014-06-07 18:39 - 590960820 _____ () C:\WINDOWS\MEMORY.DMP
2014-07-16 12:49 - 2014-05-30 13:23 - 00000000 ____D () C:\WINDOWS\Minidump
2014-07-16 09:39 - 2014-07-23 18:34 - 34176936 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\jre-8u11-windows-x64.exe@1406127811-1406135311-276bbe-B-ca440cc4230f31e2965e0fdc23cef2fa.exe.1
2014-07-16 09:39 - 2014-07-23 18:32 - 34176936 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\jre-8u11-windows-x64.exe@1406127811-1406135311-276bbe-B-ca440cc4230f31e2965e0fdc23cef2fa.exe
2014-07-16 09:39 - 2014-07-23 16:36 - 34176936 _____ (Oracle Corporation) C:\Users\Alessio\jre-8u11-windows-x64.exe@1406125847-1406133347-74f899-B-1c1494132f13ec168f9c97106957ec33.exe
2014-07-15 18:57 - 2014-07-15 18:57 - 00000000 _____ () C:\Users\Alessio\AppData\Local\{91158A2F-B624-4B04-B2C0-716841072181}
2014-07-15 15:13 - 2014-07-15 15:10 - 00000000 ____D () C:\Users\Alessio\Desktop\Horizons
2014-07-15 12:56 - 2013-08-22 13:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-07-15 12:56 - 2013-08-22 13:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-07-15 12:56 - 2013-08-22 13:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-07-15 12:56 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-07-15 12:56 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-07-15 12:56 - 2013-08-22 06:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-07-15 12:56 - 2013-08-22 06:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-07-15 12:56 - 2013-08-22 05:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-07-15 12:56 - 2013-08-22 05:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-07-15 12:56 - 2013-08-22 05:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-07-15 12:56 - 2013-08-22 05:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-07-15 12:56 - 2013-08-22 05:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-07-15 12:56 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-07-15 12:56 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-07-14 15:19 - 2014-07-14 15:18 - 00001697 _____ () C:\Users\Alessio\Desktop\server.lnk
2014-07-14 12:42 - 2014-07-10 16:26 - 00000000 ____D () C:\Users\Alessio\Downloads\Gameforge Live
2014-07-13 16:04 - 2014-05-30 19:53 - 00001071 _____ () C:\Users\Admin\Desktop\Notepad++.lnk
2014-07-13 16:04 - 2014-05-11 19:00 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\Notepad++
2014-07-13 16:04 - 2014-05-11 19:00 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-07-13 15:32 - 2014-07-13 15:32 - 00149672 _____ () C:\Users\Alessio\Downloads\p168375258361.zip
2014-07-13 14:57 - 2014-07-13 14:57 - 00316781 _____ () C:\Users\Alessio\Downloads\242109__unfa__padsynth-forcefield-loop-02.flac
2014-07-13 14:57 - 2014-07-13 14:57 - 00156221 _____ () C:\Users\Alessio\Downloads\242004__junkfood2121__fart-01.flac
2014-07-13 14:56 - 2014-07-13 14:56 - 00262188 _____ () C:\Users\Alessio\Downloads\241970__saltchicken__teleport.wav
2014-07-13 12:50 - 2014-07-07 18:24 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-07-13 12:49 - 2014-07-07 18:25 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-07-13 12:49 - 2014-07-07 18:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-07-13 12:47 - 2014-07-09 20:00 - 00000000 ____D () C:\Users\Alessio\AppData\Roaming\inkscape
2014-07-13 12:46 - 2014-07-13 12:43 - 00000000 ____D () C:\Users\Alessio\Desktop\Programme

Files to move or delete:
====================
C:\Users\Alessio\jre-8u11-windows-x64.exe@1406125847-1406133347-74f899-B-1c1494132f13ec168f9c97106957ec33.exe


Some content of TEMP:
====================
C:\Users\Alessio\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-01 09:33

==================== End Of Log ============================

--- --- ---

Warlord711 · 12.08.2014, 15:26

Ok, weiter gehts.
Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Mit ESET noch nen Komplettscan, der kann etwas dauern:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

AlGrande · 12.08.2014, 19:10

SECURITY CHECK:

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.86  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 MVPS Hosts File  
 Spybot - Search & Destroy 
 Adobe Flash Player 	14.0.0.145  
 Adobe Reader XI  
 Google Chrome 35.0.1916.153  
 Google Chrome 36.0.1985.125  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Spybot Teatimer.exe is disabled! 
 Malwarebytes Anti-Malware mbamscheduler.exe   
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast avastui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

eset log:

Code:

ATTFilter

C:\AdwCleaner\Quarantine\C\Users\Alessio\AppData\Local\Temp\OCS\ocs_v71b.exe.vir	Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung
C:\ProgramData\InstallMate\{41C86274-C71E-4D14-AFFF-8F3C9A2B4082}\Custom.dll	Win32/InstalleRex.M evtl. unerwünschte Anwendung
C:\ProgramData\InstallMate\{5C008E80-5BC8-41D8-A333-13EA87E3AC76}\Custom.dll	Win32/InstalleRex.M evtl. unerwünschte Anwendung
C:\Users\Alessio\AppData\Local\Microsoft\Windows\INetCache\IE\D4HHP0N0\mystartTb_manycam_5239[1].exe	Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung
C:\Users\Alessio\Documents\MAGIX Downloads\Installationsmanager\Music_Maker_2014_Premium_DLV_de-DE_130802_13-14_20_0_2_35.exe	Variante von Win32/Bundled.Toolbar.Ask.G potenziell unsichere Anwendung
C:\Users\All Users\InstallMate\{41C86274-C71E-4D14-AFFF-8F3C9A2B4082}\Custom.dll	Win32/InstalleRex.M evtl. unerwünschte Anwendung
C:\Users\All Users\InstallMate\{5C008E80-5BC8-41D8-A333-13EA87E3AC76}\Custom.dll	Win32/InstalleRex.M evtl. unerwünschte Anwendung
D:\Ordner\Desktop\Windows Helper\skins\windows 8\SkinPack AwOken Light Win8.rar	Win32/DownWare.L evtl. unerwünschte Anwendung

Warlord711 · 13.08.2014, 08:48

Wieso issen das ESET Log geschnitten ?

AlGrande · 13.08.2014, 10:29

Achso falsches log.
Hier das richtige:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=54017715211bd0418dc2d7e66a42a4e5
# engine=19620
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-08-12 06:07:30
# local_time=2014-08-12 08:07:30 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 95 1038472 2087063 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 2102840 7698630 0 0
# scanned=469524
# found=8
# cleaned=0
# scan_time=11480
sh=99F97AD369E8621AB4D17DF53E80E60FEE99C727 ft=1 fh=42567613b862d846 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Alessio\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"
sh=87ACA7965ACCB43236DED22E5D8ED1299188BDA0 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{41C86274-C71E-4D14-AFFF-8F3C9A2B4082}\Custom.dll"
sh=87ACA7965ACCB43236DED22E5D8ED1299188BDA0 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{5C008E80-5BC8-41D8-A333-13EA87E3AC76}\Custom.dll"
sh=6146190DC3C5305163DD3BB69D63D3ED674E0EC9 ft=1 fh=d4ef0c2578d449ce vn="Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Alessio\AppData\Local\Microsoft\Windows\INetCache\IE\D4HHP0N0\mystartTb_manycam_5239[1].exe"
sh=06EDD56FA91B1FF7F78D4139290A08B1E2678F47 ft=1 fh=0f3130b3c1a0b8b1 vn="Variante von Win32/Bundled.Toolbar.Ask.G potenziell unsichere Anwendung" ac=I fn="C:\Users\Alessio\Documents\MAGIX Downloads\Installationsmanager\Music_Maker_2014_Premium_DLV_de-DE_130802_13-14_20_0_2_35.exe"
sh=87ACA7965ACCB43236DED22E5D8ED1299188BDA0 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{41C86274-C71E-4D14-AFFF-8F3C9A2B4082}\Custom.dll"
sh=87ACA7965ACCB43236DED22E5D8ED1299188BDA0 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{5C008E80-5BC8-41D8-A333-13EA87E3AC76}\Custom.dll"
sh=303E55D8F5B2E6D197E5282FF5EFA2E18AE4691D ft=0 fh=0000000000000000 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="D:\Ordner\Desktop\Windows Helper\skins\windows 8\SkinPack AwOken Light Win8.rar"

Ich habe den avast bildschirmschohner aktiviert der als Bildschirmschohner den Pc auf Viren durchsucht. Bei mit ist er während dem Eset Scan gestartet. Als ich den Bildschirmschohner weggemacht habe war Eset fertig. Kann es sein dass Eet dannn automatisch abgebrochen hat?
Das SkinPack AwOken Light Win8.rar habe ich manuell gelöscht da ich das nicht mehr brauche.

Warlord711 · 13.08.2014, 13:28

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\ProgramData\InstallMate
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Da ist noch ne Ask Toolbar im Magix Musicmaker Setup, ich weiss nicht ob das Setup noch benötigt wird, deshalb lösch ich das nicht. Ansonsten manuell löschen.

Ok, wir sind dann durch, Logs sind sauber !

Das Java:Jacksbot sieht schon sehr zielgerichtet für Minecraft User aus, von dem was ich da gelesen hab. Vermutlich über eins der besuchten Minecraft Foren eingefangen, aber rückwirkend bekommt man das nicht so einfach raus.

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.

Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7 / 8 : Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti-Viren-Programm und zusätzlicher Schutz

Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist!
MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
AdwCleaner
Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt auf den Desktop downloaden.
SpywareBlaster
Eine kurze Einführung findest du Hier
WOT (Web of trust)
Dieses AddOn warnt dich, bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox

Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
NoScript
Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
AdblockPlus
Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
Es spart außerdem Downloadkapazität.

Performance

Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von Registry Cleanern.
Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

AlGrande · 13.08.2014, 16:38

Ist Java:Jacksbot jetzt weg?
Fixlog:

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-08-2014 01
Ran by Alessio at 2014-08-13 15:40:39 Run:2
Running from C:\Users\Alessio\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\ProgramData\InstallMate
EmptyTemp:
*****************

C:\ProgramData\InstallMate => Moved successfully.
EmptyTemp: => Removed 1 GB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

Ich habe den avast bildschirmschohner aktiviert der als Bildschirmschohner den Pc auf Viren durchsucht. Bei mit ist er während dem Eset Scan gestartet. Als ich den Bildschirmschohner weggemacht habe war Eset fertig. Kann es sein dass Eet dannn automatisch abgebrochen hat?

13.08.2014, 08:48	#12
Warlord711 /// TB-Ausbilder	Trojaner gefunden: Java:Jacksbot-Z [Trj] Wieso issen das ESET Log geschnitten ? __________________ Lerne, zurück zu schlagen und unterstütze uns! TB Akademie \| Spende \| Lob & Kritik

Trojaner gefunden: Java:Jacksbot-Z [Trj]

Plagegeister aller Art und deren Bekämpfung: Trojaner gefunden: Java:Jacksbot-Z [Trj]