Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Windows 7: Rechner lahmt durch Systweak und Co.

Windows 7: Rechner lahmt durch Systweak und Co.


Plagegeister aller Art und deren Bekämpfung: Windows 7: Rechner lahmt durch Systweak und Co.

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 21.08.2014, 12:44   #1
sisley24m
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Hallo ihr lieben Leute von trojaner-board.de...

Ich bin gerade bei meinen Eltern zu Besuch und habe bemerkt das der Rechner von ihnen ziemlich langsam arbeitet so wie das booten sehr lange dauert...Unter anderem bekomme ich Meldungen das Fehler erkannt wurden die nur mit einem kostenpflichtigen Update zu bereinigen wären...Ich hab mich dann ein wenig im Netz informiert sowie in der Systemsteuerung nachgeschaut und Programme von Systweak entdeckt...Da ich selbst keine Erfahrung besitze wäre ich froh wenn ihr mir bitte helfen könnten den Rechner wieder fit zu bekommen...


Hier die Logs:

Systemscan mit FRST

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:17-08-2014 01
Ran by Wünsche (administrator) on WÜNSCHE-PC on 21-08-2014 12:22:01
Running from C:\Users\Wünsche\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-813962834-3573142917-1844992356-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKU\S-1-5-21-813962834-3573142917-1844992356-1000\...\Run: [GoogleChromeAutoLaunch_DC2B767C3595397FBCC81637413C5DF1] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [187328 2014-07-22] (Client Connect LTD)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
SearchScopes: HKLM - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3322288&octid=EB_ORIGINAL_CTID&ISID=M1187A095-50E7-4231-B22E-6829E5889835&SearchSource=58&CUI=&UM=6&UP=SP6EEA71DB-0B89-476A-8857-A2837ABA3E73&q={searchTerms}&SSPV=
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Keyword.URL: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-09]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-18]

Chrome: 
=======
CHR HomePage: hxxp://de.msn.com/?ocid=OIE8MSE
CHR StartupUrls: "hxxp://www.google.de/", "www.google.com"
CHR DefaultSuggestURL: 
CHR Extension: (Google Docs) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-04]
CHR Extension: (Google Drive) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-04]
CHR Extension: (YouTube) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-04]
CHR Extension: (Adblock Plus) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-05]
CHR Extension: (Google-Suche) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-04]
CHR Extension: (avast! Online Security) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-04]
CHR Extension: (Window State Sample) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcbhfbnaaancmblfhdknlnojpafjohbi [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-04]
CHR Extension: (YouTube Unblocker) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-08-01]
CHR Extension: (Mein Chrome-Design) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-08-09]
CHR Extension: (Google Mail) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-04]
CHR Extension: (Extutil) - C:\Users\WNSCHE~1\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B [2014-08-01]
CHR Extension: (Managera) - C:\Users\WNSCHE~1\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42 [2014-08-01]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-04]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-04] (AVAST Software)
S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [17536800 2014-07-25] (NVIDIA Corporation)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-04] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-07-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-04] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-07-04] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 12:22 - 2014-08-21 12:22 - 00012878 _____ () C:\Users\Wünsche\Downloads\FRST.txt
2014-08-21 12:21 - 2014-08-21 12:22 - 00000000 ____D () C:\FRST
2014-08-21 12:19 - 2014-08-21 12:19 - 00000476 _____ () C:\Users\Wünsche\Downloads\defogger_disable.log
2014-08-21 12:19 - 2014-08-21 12:19 - 00000000 _____ () C:\Users\Wünsche\defogger_reenable
2014-08-18 23:21 - 2014-08-18 23:21 - 01093632 _____ (Farbar) C:\Users\Wünsche\Downloads\FRST.exe
2014-08-18 23:21 - 2014-08-18 23:21 - 00380416 _____ () C:\Users\Wünsche\Downloads\Gmer-19357.exe
2014-08-18 23:20 - 2014-08-18 23:21 - 00050477 _____ () C:\Users\Wünsche\Downloads\Defogger.exe
2014-08-16 13:25 - 2014-08-16 13:26 - 00362664 _____ () C:\Users\Wünsche\Downloads\7zip_RocketFuelInstaller.exe
2014-08-15 23:58 - 2014-08-15 23:58 - 00016604 _____ () C:\Users\Wünsche\Downloads\umbronite.ump
2014-08-15 18:39 - 2014-08-15 18:39 - 00001480 _____ () C:\Users\Wünsche\AppData\Local\recently-used.xbel
2014-08-15 18:30 - 2014-08-15 18:39 - 00262188 _____ () C:\Users\Wünsche\Documents\Logo.tga
2014-08-15 18:26 - 2014-08-15 18:39 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gtk-2.0
2014-08-15 18:26 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\.thumbnails
2014-08-15 18:05 - 2014-08-15 18:05 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\fontconfig
2014-08-15 18:03 - 2014-08-15 18:37 - 00000000 ____D () C:\Users\Wünsche\.gimp-2.8
2014-08-15 18:03 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gegl-0.2
2014-08-15 17:50 - 2014-08-15 17:50 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:50 - 00000995 _____ () C:\Users\Public\Desktop\GIMP 2.lnk
2014-08-15 17:47 - 2014-08-15 17:50 - 00000000 ____D () C:\Program Files\GIMP 2
2014-08-15 17:36 - 2014-08-15 17:40 - 90396104 _____ (The GIMP Team ) C:\Users\Wünsche\Downloads\gimp-2.8.10-setup.exe
2014-08-15 11:38 - 2014-08-21 12:09 - 00000501 _____ () C:\Users\Wünsche\Documents\aionmemo_fc6c7565.dat
2014-08-13 20:12 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 20:12 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 20:12 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 20:11 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 20:07 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-13 13:51 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 13:51 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 13:51 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 13:51 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 13:51 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 13:51 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 13:51 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 13:51 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 13:51 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 13:51 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 13:51 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 13:51 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 13:51 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 13:51 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 13:51 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 13:51 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 13:51 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 13:51 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 13:51 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 13:51 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 13:51 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 13:51 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 13:51 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 13:51 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 13:51 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 13:51 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 13:51 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 13:51 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 13:51 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 13:51 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 13:51 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 13:51 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 13:51 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 13:51 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 13:50 - 2014-07-16 04:47 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-13 13:50 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 13:50 - 2014-07-16 03:47 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-13 13:49 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 13:49 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 13:49 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 13:49 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 13:49 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 13:49 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 13:49 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 13:49 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 10:56 - 2014-08-13 23:25 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-08-13 10:56 - 2014-07-25 16:01 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll
2014-08-13 10:56 - 2014-07-25 16:01 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-08-13 10:55 - 2014-08-21 11:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-13 10:55 - 2014-07-02 22:54 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-08-13 10:55 - 2014-07-02 21:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-08-13 10:55 - 2014-07-02 19:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-08-13 10:55 - 2014-07-02 07:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2014-08-13 10:49 - 2014-07-02 23:28 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco3220103.dll
2014-08-13 10:49 - 2014-07-02 23:28 - 00162592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys
2014-08-13 10:49 - 2014-07-02 23:28 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 24198088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 16122344 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 15296456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 14498552 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 11283344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 11222048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 10681176 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-08-13 10:49 - 2014-07-02 22:54 - 03988952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 02814656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 01054552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234052.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00907552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234052.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00907096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00869152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00021215 _____ () C:\Windows\system32\nvinfo.pb
2014-08-13 10:49 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll
2014-08-13 10:49 - 2014-03-31 18:42 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys
2014-08-13 10:44 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA
2014-08-13 10:30 - 2014-08-13 10:30 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Wünsche\Downloads\CreativeCloudSet-Up.exe
2014-08-10 11:30 - 2014-08-10 11:30 - 00122880 _____ () C:\Users\Wünsche\Downloads\d3d8thk (1).dll
2014-08-10 11:22 - 2014-08-10 22:02 - 00001801 _____ () C:\Users\Wünsche\Desktop\Aion.lnk
2014-08-10 11:19 - 2014-08-10 11:20 - 00344576 _____ (Just-Aion) C:\Users\Wünsche\Downloads\d3dx9_38.dll
2014-08-10 10:02 - 2014-08-10 10:02 - 00000133 _____ () C:\Users\Wünsche\Downloads\Just Aion - Ariel DEU.bat
2014-08-10 10:01 - 2014-08-10 11:19 - 00195584 _____ () C:\Users\Wünsche\Downloads\d3d8thk.dll
2014-08-09 21:26 - 2014-08-09 21:26 - 00000000 ____D () C:\Users\Wünsche\Downloads\ChaosCrystal2.0.001
2014-08-09 21:17 - 2014-08-09 21:56 - 00000000 ____D () C:\Program Files\aeroFox
2014-08-09 21:17 - 2014-08-09 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aeroFox
2014-08-09 21:14 - 2014-08-09 21:14 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-08 21:03 - 2014-08-08 21:31 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Microsoft Games
2014-08-04 21:34 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-08-04 21:34 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-08-04 21:34 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-08-04 21:33 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-08-04 21:33 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-08-04 21:33 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-08-04 21:33 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-08-04 21:33 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-08-04 21:33 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-08-04 21:33 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-08-04 21:33 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-08-04 21:33 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-08-04 21:33 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-08-04 21:33 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-08-04 21:33 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-08-04 21:33 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-08-04 21:33 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-08-04 21:33 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-08-04 21:33 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-08-04 21:33 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-08-04 21:33 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-08-04 21:33 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-08-04 21:33 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-08-04 21:33 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-08-04 21:33 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-08-04 21:33 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-08-04 21:33 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-08-04 21:33 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-08-04 21:33 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-08-04 21:33 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-08-04 21:33 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-08-04 21:33 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-08-04 21:33 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-08-04 21:33 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-08-04 21:33 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-08-04 21:33 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-08-04 21:33 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-08-04 21:33 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-08-04 21:33 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-08-04 21:33 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-08-04 21:33 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-08-04 21:33 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-08-04 21:33 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-08-04 21:33 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-08-04 21:33 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-08-04 21:33 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-08-04 21:33 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-08-04 21:33 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-08-04 21:33 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-08-04 21:33 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-08-04 21:29 - 2014-08-15 19:42 - 00000000 ____D () C:\Users\W�nsche\Downloads\Gameforge Live
2014-08-04 21:29 - 2014-08-05 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Gameforge4d
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche
2014-08-02 11:48 - 2014-08-10 09:43 - 00001093 _____ () C:\Users\Wünsche\Desktop\Mozilla Firefox.lnk
2014-08-02 11:39 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-02 11:39 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-02 11:39 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-02 11:39 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-02 11:39 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-02 11:39 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-01 16:38 - 2014-08-01 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-08-01 16:37 - 2014-08-01 16:39 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2014-08-01 16:37 - 2014-08-01 16:39 - 00000000 ____D () C:\Windows\WindowsMobile
2014-08-01 13:03 - 2014-08-01 13:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-01 11:53 - 2014-08-01 11:53 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Macromedia
2014-08-01 10:58 - 2014-06-24 14:45 - 00146183 _____ () C:\Users\Wünsche\Documents\YouTube-Unblocker-056 (1).crx
2014-08-01 10:35 - 2014-08-01 10:41 - 55880192 _____ () C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager [1].exe
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\MSDOS.SYS
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\IO.SYS
2014-08-01 10:33 - 2014-08-01 10:33 - 00787392 _____ ( ) C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:25 - 2014-08-01 10:25 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-01 09:44 - 2014-08-09 15:14 - 00000000 ____D () C:\Program Files\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00002232 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00001157 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:44 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\OpenCandy
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-08-01 09:40 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\DVDVideoSoft
2014-08-01 09:38 - 2014-08-01 09:39 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\Wünsche\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 12:22 - 2014-08-21 12:22 - 00012878 _____ () C:\Users\Wünsche\Downloads\FRST.txt
2014-08-21 12:22 - 2014-08-21 12:21 - 00000000 ____D () C:\FRST
2014-08-21 12:19 - 2014-08-21 12:19 - 00000476 _____ () C:\Users\Wünsche\Downloads\defogger_disable.log
2014-08-21 12:19 - 2014-08-21 12:19 - 00000000 _____ () C:\Users\Wünsche\defogger_reenable
2014-08-21 12:19 - 2014-05-18 15:23 - 00000000 ____D () C:\Users\Wünsche
2014-08-21 12:09 - 2014-08-15 11:38 - 00000501 _____ () C:\Users\Wünsche\Documents\aionmemo_fc6c7565.dat
2014-08-21 12:08 - 2014-05-18 21:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-21 11:49 - 2009-07-14 06:34 - 00032112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-21 11:49 - 2009-07-14 06:34 - 00032112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-21 11:45 - 2014-05-18 15:05 - 02076560 _____ () C:\Windows\WindowsUpdate.log
2014-08-21 11:41 - 2014-07-04 18:14 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-21 11:41 - 2014-05-18 19:33 - 00014914 _____ () C:\Windows\setupact.log
2014-08-21 11:41 - 2009-07-14 06:33 - 00268272 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-21 11:40 - 2014-08-13 10:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-21 11:40 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-21 10:24 - 2014-07-04 18:14 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-20 15:02 - 2014-05-18 19:00 - 00000268 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-08-20 15:01 - 2014-06-29 15:01 - 00001414 _____ () C:\Users\Wünsche\Desktop\Registry kostenlos entrümpeln!.lnk
2014-08-18 23:21 - 2014-08-18 23:21 - 01093632 _____ (Farbar) C:\Users\Wünsche\Downloads\FRST.exe
2014-08-18 23:21 - 2014-08-18 23:21 - 00380416 _____ () C:\Users\Wünsche\Downloads\Gmer-19357.exe
2014-08-18 23:21 - 2014-08-18 23:20 - 00050477 _____ () C:\Users\Wünsche\Downloads\Defogger.exe
2014-08-18 23:21 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-16 13:26 - 2014-08-16 13:25 - 00362664 _____ () C:\Users\Wünsche\Downloads\7zip_RocketFuelInstaller.exe
2014-08-15 23:58 - 2014-08-15 23:58 - 00016604 _____ () C:\Users\Wünsche\Downloads\umbronite.ump
2014-08-15 23:33 - 2014-07-04 18:15 - 00002081 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-15 19:42 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche\Downloads\Gameforge Live
2014-08-15 18:39 - 2014-08-15 18:39 - 00001480 _____ () C:\Users\Wünsche\AppData\Local\recently-used.xbel
2014-08-15 18:39 - 2014-08-15 18:30 - 00262188 _____ () C:\Users\Wünsche\Documents\Logo.tga
2014-08-15 18:39 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gtk-2.0
2014-08-15 18:37 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\.gimp-2.8
2014-08-15 18:26 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\.thumbnails
2014-08-15 18:03 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gegl-0.2
2014-08-15 17:50 - 2014-08-15 17:50 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:50 - 00000995 _____ () C:\Users\Public\Desktop\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:47 - 00000000 ____D () C:\Program Files\GIMP 2
2014-08-15 17:40 - 2014-08-15 17:36 - 90396104 _____ (The GIMP Team ) C:\Users\Wünsche\Downloads\gimp-2.8.10-setup.exe
2014-08-14 15:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-13 23:26 - 2014-05-18 18:33 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA
2014-08-13 23:26 - 2014-05-18 18:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-13 23:25 - 2014-08-13 10:56 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA Corporation
2014-08-13 22:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-13 20:30 - 2014-05-18 18:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 20:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-13 20:18 - 2014-05-18 17:20 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 20:14 - 2014-05-18 17:20 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 20:07 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-13 20:07 - 2014-08-13 10:44 - 00000000 ____D () C:\NVIDIA
2014-08-13 19:00 - 2014-05-18 19:00 - 00000276 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-08-13 11:18 - 2014-08-13 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-08-13 10:56 - 2014-05-18 18:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-13 10:55 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help
2014-08-13 10:31 - 2014-05-18 21:11 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Adobe
2014-08-13 10:30 - 2014-08-13 10:30 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Wünsche\Downloads\CreativeCloudSet-Up.exe
2014-08-10 22:02 - 2014-08-10 11:22 - 00001801 _____ () C:\Users\Wünsche\Desktop\Aion.lnk
2014-08-10 11:30 - 2014-08-10 11:30 - 00122880 _____ () C:\Users\Wünsche\Downloads\d3d8thk (1).dll
2014-08-10 11:20 - 2014-08-10 11:19 - 00344576 _____ (Just-Aion) C:\Users\Wünsche\Downloads\d3dx9_38.dll
2014-08-10 11:19 - 2014-08-10 10:01 - 00195584 _____ () C:\Users\Wünsche\Downloads\d3d8thk.dll
2014-08-10 10:02 - 2014-08-10 10:02 - 00000133 _____ () C:\Users\Wünsche\Downloads\Just Aion - Ariel DEU.bat
2014-08-10 09:43 - 2014-08-02 11:48 - 00001093 _____ () C:\Users\Wünsche\Desktop\Mozilla Firefox.lnk
2014-08-10 09:43 - 2014-05-18 16:20 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-10 09:25 - 2014-05-18 19:32 - 00003342 _____ () C:\Windows\PFRO.log
2014-08-09 21:56 - 2014-08-09 21:17 - 00000000 ____D () C:\Program Files\aeroFox
2014-08-09 21:26 - 2014-08-09 21:26 - 00000000 ____D () C:\Users\Wünsche\Downloads\ChaosCrystal2.0.001
2014-08-09 21:17 - 2014-08-09 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aeroFox
2014-08-09 21:14 - 2014-08-09 21:14 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-09 15:43 - 2014-05-28 16:24 - 00000000 ____D () C:\You tube
2014-08-09 15:14 - 2014-08-01 09:44 - 00000000 ____D () C:\Program Files\SearchProtect
2014-08-08 21:31 - 2014-08-08 21:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Microsoft Games
2014-08-07 03:43 - 2014-08-13 13:49 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 13:49 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 21:34 - 2014-08-04 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-08-05 09:20 - 2014-05-18 15:49 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Gameforge4d
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche
2014-08-02 08:36 - 2014-05-18 16:20 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-08-01 19:12 - 2010-11-21 02:46 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-08-01 16:39 - 2014-08-01 16:37 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2014-08-01 16:39 - 2014-08-01 16:37 - 00000000 ____D () C:\Windows\WindowsMobile
2014-08-01 16:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-01 16:38 - 2014-08-01 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-08-01 13:03 - 2014-08-01 13:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-01 11:53 - 2014-08-01 11:53 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Macromedia
2014-08-01 11:52 - 2014-05-18 21:12 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-08-01 11:52 - 2014-05-18 21:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-08-01 10:41 - 2014-08-01 10:35 - 55880192 _____ () C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager [1].exe
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\MSDOS.SYS
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\IO.SYS
2014-08-01 10:33 - 2014-08-01 10:33 - 00787392 _____ ( ) C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:25 - 2014-08-01 10:25 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-01 09:44 - 2014-08-01 09:44 - 00002232 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00001157 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-01 09:44 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-08-01 09:44 - 2014-08-01 09:40 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\OpenCandy
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-08-01 09:39 - 2014-08-01 09:38 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\Wünsche\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe
2014-08-01 01:16 - 2014-08-13 13:51 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-28 19:34 - 2014-05-18 18:36 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\HpUpdate
2014-07-25 16:01 - 2014-08-13 10:56 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll
2014-07-25 16:01 - 2014-08-13 10:56 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-07-25 15:51 - 2014-08-13 13:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:04 - 2014-08-13 13:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 15:03 - 2014-08-13 13:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 14:34 - 2014-08-13 13:51 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 14:34 - 2014-08-13 13:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 14:33 - 2014-08-13 13:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-13 13:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:21 - 2014-08-13 13:51 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 14:18 - 2014-08-13 13:51 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 14:17 - 2014-08-13 13:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 14:12 - 2014-08-13 13:51 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 14:10 - 2014-08-13 13:51 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 14:10 - 2014-08-13 13:51 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:08 - 2014-08-13 13:51 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:06 - 2014-08-13 13:51 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 13:59 - 2014-08-13 13:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 13:52 - 2014-08-13 13:51 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 13:43 - 2014-08-13 13:51 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 13:36 - 2014-08-13 13:51 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 13:34 - 2014-08-13 13:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 13:29 - 2014-08-13 13:51 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 13:13 - 2014-08-13 13:51 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:09 - 2014-08-13 13:51 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:07 - 2014-08-13 13:51 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:07 - 2014-08-13 13:51 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-13 13:51 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 12:09 - 2014-08-13 13:51 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:05 - 2014-08-13 13:51 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:00 - 2014-08-13 13:51 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-23 11:58 - 2009-07-14 06:53 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Wünsche\AppData\Local\Temp\install_reader11_de_gtbd_chrd_dn_aaa_aih.exe
C:\Users\Wünsche\AppData\Local\Temp\nsd82D9.exe
C:\Users\Wünsche\AppData\Local\Temp\nsd8940.exe
C:\Users\Wünsche\AppData\Local\Temp\nsoFC18.exe
C:\Users\Wünsche\AppData\Local\Temp\nstECF9.exe
C:\Users\Wünsche\AppData\Local\Temp\nstF4E6.exe
C:\Users\Wünsche\AppData\Local\Temp\nsy9072.exe
C:\Users\Wünsche\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Wünsche\AppData\Local\Temp\nvStInst.exe
C:\Users\Wünsche\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Wünsche\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-18 15:59

==================== End Of Log ============================

Scan mit GMER

Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-08-21 13:01:28
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HD502IJ rev.1AA01118 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\WNSCHE~1\AppData\Local\Temp\pwdiyfoc.sys


---- System - GMER 2.1 ----

SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwAddBootEntry [0x8CE49BA6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwAssignProcessToJobObject [0x8CE4A684]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateEvent [0x8CE566F8]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateEventPair [0x8CE56744]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateIoCompletion [0x8CE568DE]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateMutant [0x8CE56666]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateSection [0x8CF00DF0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateSemaphore [0x8CE566AE]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateThread [0x8CF01080]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateThreadEx [0x8CF0116A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateTimer [0x8CE56898]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDebugActiveProcess [0x8CE4B472]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDeleteBootEntry [0x8CE49C0C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDuplicateObject [0x8CE4EC68]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwLoadDriver [0x8CE497F8]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwMapViewOfSection [0x8CF00ED0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwModifyBootEntry [0x8CE49C72]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwNotifyChangeKey [0x8CE4F05E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwNotifyChangeMultipleKeys [0x8CE4BF5A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenEvent [0x8CE56722]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenEventPair [0x8CE56766]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenIoCompletion [0x8CE56902]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenMutant [0x8CE5668C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenProcess [0x8CE4E560]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenSection [0x8CE56816]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenSemaphore [0x8CE566D6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenThread [0x8CE4E94C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenTimer [0x8CE568BC]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwProtectVirtualMemory [0x8CF00C6E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwQueryObject [0x8CE4BDCE]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwQueueApcThreadEx [0x8CE4BADC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetBootEntryOrder [0x8CE49CD8]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetBootOptions [0x8CE49D3E]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwSetContextThread [0x8CF00FCC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetSystemInformation [0x8CE49892]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetSystemPowerState [0x8CE49A64]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwShutdownSystem [0x8CE499F2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSuspendProcess [0x8CE4B63C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSuspendThread [0x8CE4B79E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSystemDebugControl [0x8CE49AEC]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwTerminateProcess [0x8CF00D3C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwTerminateThread [0x8CE4B2CC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwVdmControl [0x8CE49DA4]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwWriteVirtualMemory [0x8CF00BA0]

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                           82C50A15 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                             82C8A212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 10CB                                                                82C91460 4 Bytes  [A6, 9B, E4, 8C] {CMPSB ; WAIT ; IN AL, 0x8c}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1153                                                                82C914E8 4 Bytes  [84, A6, E4, 8C]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11A7                                                                82C9153C 2 Bytes  [F8, 66]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11AA                                                                82C9153F 5 Bytes  [8C, 44, 67, E5, 8C]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11B3                                                                82C91548 4 Bytes  [DE, 68, E5, 8C]
.text  ...                                                                                                

---- User code sections - GMER 2.1 ----

.text  C:\Windows\system32\svchost.exe[340] kernel32.dll!GetBinaryTypeW + 70                              75506AAC 1 Byte  [62]
.text  C:\Windows\WindowsMobile\wmdc.exe[364] kernel32.dll!GetBinaryTypeW + 70                            75506AAC 1 Byte  [62]
.text  C:\Windows\system32\csrss.exe[412] kernel32.dll!GetBinaryTypeW + 70                                75506AAC 1 Byte  [62]
.text  C:\Windows\system32\wininit.exe[476] kernel32.dll!GetBinaryTypeW + 70                              75506AAC 1 Byte  [62]
.text  C:\Windows\system32\csrss.exe[492] kernel32.dll!GetBinaryTypeW + 70                                75506AAC 1 Byte  [62]
.text  ...                                                                                                
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1400] kernel32.dll!SetUnhandledExceptionFilter  754EF5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1400] kernel32.dll!GetBinaryTypeW + 70          75506AAC 1 Byte  [62]
.text  C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe[1444] kernel32.dll!GetBinaryTypeW + 70      75506AAC 1 Byte  [62]
.text  C:\Program Files\AVAST Software\Avast\avastui.exe[1476] kernel32.dll!SetUnhandledExceptionFilter   754EF5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\avastui.exe[1476] kernel32.dll!GetBinaryTypeW + 70           75506AAC 1 Byte  [62]
.text  C:\Windows\System32\spoolsv.exe[1580] kernel32.dll!GetBinaryTypeW + 70                             75506AAC 1 Byte  [62]
.text  C:\Windows\system32\taskhost.exe[1636] kernel32.dll!GetBinaryTypeW + 70                            75506AAC 1 Byte  [62]
.text  C:\Windows\system32\Dwm.exe[1688] kernel32.dll!GetBinaryTypeW + 70                                 75506AAC 1 Byte  [62]
.text  C:\Windows\Explorer.EXE[1864] kernel32.dll!GetBinaryTypeW + 70                                     75506AAC 1 Byte  [62]
.text  ...                                                                                                

---- EOF - GMER 2.1 ----

Ich würde euch auch gern die Logs von avast Free Antivirus posten doch weiß ich nicht welche von den vielen in diesem Ordner...

Liebe Grüße...Rico

Alt 21.08.2014, 13:56   #2
M-K-D-B
/// TB-Ausbilder
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.





Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
    Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!


Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!




Zitat:
Running from C:\Users\Wünsche\Downloads
Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.




  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.
__________________
Alt 21.08.2014, 15:30   #3
sisley24m
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Hallo Matthias...Danke das du dich diesem Problem angenommen hast...

Hier noch einmal die Logdateien


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:17-08-2014 01
Ran by Wünsche (administrator) on WÜNSCHE-PC on 21-08-2014 15:53:42
Running from C:\Users\Wünsche\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Users\Wünsche\Desktop\Defogger.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-813962834-3573142917-1844992356-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKU\S-1-5-21-813962834-3573142917-1844992356-1000\...\Run: [GoogleChromeAutoLaunch_DC2B767C3595397FBCC81637413C5DF1] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [187328 2014-07-22] (Client Connect LTD)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
SearchScopes: HKLM - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3322288&octid=EB_ORIGINAL_CTID&ISID=M1187A095-50E7-4231-B22E-6829E5889835&SearchSource=58&CUI=&UM=6&UP=SP6EEA71DB-0B89-476A-8857-A2837ABA3E73&q={searchTerms}&SSPV=
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Keyword.URL: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-09]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-18]

Chrome: 
=======
CHR HomePage: hxxp://de.msn.com/?ocid=OIE8MSE
CHR StartupUrls: "hxxp://www.google.de/", "www.google.com"
CHR DefaultSuggestURL: 
CHR Extension: (Google Docs) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-04]
CHR Extension: (Google Drive) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-04]
CHR Extension: (YouTube) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-04]
CHR Extension: (Adblock Plus) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-05]
CHR Extension: (Google-Suche) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-04]
CHR Extension: (avast! Online Security) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-04]
CHR Extension: (Window State Sample) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcbhfbnaaancmblfhdknlnojpafjohbi [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-04]
CHR Extension: (YouTube Unblocker) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-08-01]
CHR Extension: (Mein Chrome-Design) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-08-09]
CHR Extension: (Google Mail) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-04]
CHR Extension: (Extutil) - C:\Users\WNSCHE~1\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B [2014-08-01]
CHR Extension: (Managera) - C:\Users\WNSCHE~1\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42 [2014-08-01]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-04]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-04] (AVAST Software)
S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [17536800 2014-07-25] (NVIDIA Corporation)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-04] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-07-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-04] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-07-04] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
U3 pwdiyfoc; \??\C:\Users\WNSCHE~1\AppData\Local\Temp\pwdiyfoc.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 15:53 - 2014-08-21 15:53 - 00013048 _____ () C:\Users\Wünsche\Desktop\FRST.txt
2014-08-21 13:31 - 2014-08-21 13:31 - 00002108 _____ () C:\Users\Wünsche\AppData\Local\recently-used.xbel
2014-08-21 12:28 - 2014-08-21 15:51 - 00000476 _____ () C:\Users\Wünsche\Desktop\defogger_disable.log
2014-08-21 12:22 - 2014-08-21 12:24 - 00055219 _____ () C:\Users\Wünsche\Downloads\FRST.txt
2014-08-21 12:22 - 2014-08-21 12:24 - 00021415 _____ () C:\Users\Wünsche\Downloads\Addition.txt
2014-08-21 12:21 - 2014-08-21 15:53 - 00000000 ____D () C:\FRST
2014-08-21 12:19 - 2014-08-21 12:19 - 00000476 _____ () C:\Users\Wünsche\Downloads\defogger_disable.log
2014-08-21 12:19 - 2014-08-21 12:19 - 00000000 _____ () C:\Users\Wünsche\defogger_reenable
2014-08-18 23:21 - 2014-08-18 23:21 - 01093632 _____ (Farbar) C:\Users\Wünsche\Desktop\FRST.exe
2014-08-18 23:21 - 2014-08-18 23:21 - 00380416 _____ () C:\Users\Wünsche\Desktop\Gmer-19357.exe
2014-08-18 23:20 - 2014-08-18 23:21 - 00050477 _____ () C:\Users\Wünsche\Desktop\Defogger.exe
2014-08-16 13:25 - 2014-08-16 13:26 - 00362664 _____ () C:\Users\Wünsche\Downloads\7zip_RocketFuelInstaller.exe
2014-08-15 23:58 - 2014-08-15 23:58 - 00016604 _____ () C:\Users\Wünsche\Downloads\umbronite.ump
2014-08-15 18:30 - 2014-08-15 18:39 - 00262188 _____ () C:\Users\Wünsche\Documents\Logo.tga
2014-08-15 18:26 - 2014-08-21 13:31 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gtk-2.0
2014-08-15 18:26 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\.thumbnails
2014-08-15 18:05 - 2014-08-15 18:05 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\fontconfig
2014-08-15 18:03 - 2014-08-21 13:31 - 00000000 ____D () C:\Users\Wünsche\.gimp-2.8
2014-08-15 18:03 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gegl-0.2
2014-08-15 17:50 - 2014-08-15 17:50 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:50 - 00000995 _____ () C:\Users\Public\Desktop\GIMP 2.lnk
2014-08-15 17:47 - 2014-08-15 17:50 - 00000000 ____D () C:\Program Files\GIMP 2
2014-08-15 17:36 - 2014-08-15 17:40 - 90396104 _____ (The GIMP Team ) C:\Users\Wünsche\Downloads\gimp-2.8.10-setup.exe
2014-08-15 11:38 - 2014-08-21 12:09 - 00000501 _____ () C:\Users\Wünsche\Documents\aionmemo_fc6c7565.dat
2014-08-13 20:12 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 20:12 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 20:12 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 20:11 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 20:07 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-13 13:51 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 13:51 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 13:51 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 13:51 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 13:51 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 13:51 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 13:51 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 13:51 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 13:51 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 13:51 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 13:51 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 13:51 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 13:51 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 13:51 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 13:51 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 13:51 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 13:51 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 13:51 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 13:51 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 13:51 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 13:51 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 13:51 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 13:51 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 13:51 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 13:51 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 13:51 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 13:51 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 13:51 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 13:51 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 13:51 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 13:51 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 13:51 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 13:51 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 13:51 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 13:50 - 2014-07-16 04:47 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-13 13:50 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 13:50 - 2014-07-16 03:47 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-13 13:49 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 13:49 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 13:49 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 13:49 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 13:49 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 13:49 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 13:49 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 13:49 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 10:56 - 2014-08-13 23:25 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-08-13 10:56 - 2014-07-25 16:01 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll
2014-08-13 10:56 - 2014-07-25 16:01 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-08-13 10:55 - 2014-08-21 11:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-13 10:55 - 2014-07-02 22:54 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-08-13 10:55 - 2014-07-02 21:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-08-13 10:55 - 2014-07-02 19:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-08-13 10:55 - 2014-07-02 07:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2014-08-13 10:49 - 2014-07-02 23:28 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco3220103.dll
2014-08-13 10:49 - 2014-07-02 23:28 - 00162592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys
2014-08-13 10:49 - 2014-07-02 23:28 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 24198088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 16122344 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 15296456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 14498552 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 11283344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 11222048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 10681176 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-08-13 10:49 - 2014-07-02 22:54 - 03988952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 02814656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 01054552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234052.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00907552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234052.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00907096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00869152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00021215 _____ () C:\Windows\system32\nvinfo.pb
2014-08-13 10:49 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll
2014-08-13 10:49 - 2014-03-31 18:42 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys
2014-08-13 10:44 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA
2014-08-13 10:30 - 2014-08-13 10:30 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Wünsche\Downloads\CreativeCloudSet-Up.exe
2014-08-10 11:30 - 2014-08-10 11:30 - 00122880 _____ () C:\Users\Wünsche\Downloads\d3d8thk (1).dll
2014-08-10 11:22 - 2014-08-10 22:02 - 00001801 _____ () C:\Users\Wünsche\Desktop\Aion.lnk
2014-08-10 11:19 - 2014-08-10 11:20 - 00344576 _____ (Just-Aion) C:\Users\Wünsche\Downloads\d3dx9_38.dll
2014-08-10 10:02 - 2014-08-10 10:02 - 00000133 _____ () C:\Users\Wünsche\Downloads\Just Aion - Ariel DEU.bat
2014-08-10 10:01 - 2014-08-10 11:19 - 00195584 _____ () C:\Users\Wünsche\Downloads\d3d8thk.dll
2014-08-09 21:26 - 2014-08-09 21:26 - 00000000 ____D () C:\Users\Wünsche\Downloads\ChaosCrystal2.0.001
2014-08-09 21:17 - 2014-08-09 21:56 - 00000000 ____D () C:\Program Files\aeroFox
2014-08-09 21:17 - 2014-08-09 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aeroFox
2014-08-09 21:14 - 2014-08-09 21:14 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-08 21:03 - 2014-08-08 21:31 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Microsoft Games
2014-08-04 21:34 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-08-04 21:34 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-08-04 21:34 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-08-04 21:33 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-08-04 21:33 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-08-04 21:33 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-08-04 21:33 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-08-04 21:33 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-08-04 21:33 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-08-04 21:33 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-08-04 21:33 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-08-04 21:33 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-08-04 21:33 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-08-04 21:33 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-08-04 21:33 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-08-04 21:33 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-08-04 21:33 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-08-04 21:33 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-08-04 21:33 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-08-04 21:33 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-08-04 21:33 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-08-04 21:33 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-08-04 21:33 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-08-04 21:33 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-08-04 21:33 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-08-04 21:33 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-08-04 21:33 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-08-04 21:33 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-08-04 21:33 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-08-04 21:33 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-08-04 21:33 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-08-04 21:33 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-08-04 21:33 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-08-04 21:33 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-08-04 21:33 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-08-04 21:33 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-08-04 21:33 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-08-04 21:33 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-08-04 21:33 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-08-04 21:33 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-08-04 21:33 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-08-04 21:33 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-08-04 21:33 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-08-04 21:33 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-08-04 21:33 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-08-04 21:33 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-08-04 21:33 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-08-04 21:33 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-08-04 21:33 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-08-04 21:33 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-08-04 21:29 - 2014-08-15 19:42 - 00000000 ____D () C:\Users\W�nsche\Downloads\Gameforge Live
2014-08-04 21:29 - 2014-08-05 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Gameforge4d
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche
2014-08-02 11:48 - 2014-08-10 09:43 - 00001093 _____ () C:\Users\Wünsche\Desktop\Mozilla Firefox.lnk
2014-08-02 11:39 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-02 11:39 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-02 11:39 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-02 11:39 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-02 11:39 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-02 11:39 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-01 16:38 - 2014-08-01 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-08-01 16:37 - 2014-08-01 16:39 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2014-08-01 16:37 - 2014-08-01 16:39 - 00000000 ____D () C:\Windows\WindowsMobile
2014-08-01 13:03 - 2014-08-01 13:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-01 11:53 - 2014-08-01 11:53 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Macromedia
2014-08-01 10:58 - 2014-06-24 14:45 - 00146183 _____ () C:\Users\Wünsche\Documents\YouTube-Unblocker-056 (1).crx
2014-08-01 10:35 - 2014-08-01 10:41 - 55880192 _____ () C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager [1].exe
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\MSDOS.SYS
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\IO.SYS
2014-08-01 10:33 - 2014-08-01 10:33 - 00787392 _____ ( ) C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:25 - 2014-08-01 10:25 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-01 09:44 - 2014-08-09 15:14 - 00000000 ____D () C:\Program Files\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00002232 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00001157 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:44 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\OpenCandy
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-08-01 09:40 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\DVDVideoSoft
2014-08-01 09:38 - 2014-08-01 09:39 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\Wünsche\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 15:53 - 2014-08-21 15:53 - 00013048 _____ () C:\Users\Wünsche\Desktop\FRST.txt
2014-08-21 15:53 - 2014-08-21 12:21 - 00000000 ____D () C:\FRST
2014-08-21 15:51 - 2014-08-21 12:28 - 00000476 _____ () C:\Users\Wünsche\Desktop\defogger_disable.log
2014-08-21 15:24 - 2014-07-04 18:14 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-21 15:08 - 2014-05-18 21:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-21 15:02 - 2014-05-18 19:00 - 00000268 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-08-21 15:01 - 2014-06-29 15:01 - 00001414 _____ () C:\Users\Wünsche\Desktop\Registry kostenlos entrümpeln!.lnk
2014-08-21 13:31 - 2014-08-21 13:31 - 00002108 _____ () C:\Users\Wünsche\AppData\Local\recently-used.xbel
2014-08-21 13:31 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gtk-2.0
2014-08-21 13:31 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\.gimp-2.8
2014-08-21 13:02 - 2014-05-18 15:05 - 02076835 _____ () C:\Windows\WindowsUpdate.log
2014-08-21 12:26 - 2009-07-14 06:34 - 00032112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-21 12:26 - 2009-07-14 06:34 - 00032112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-21 12:24 - 2014-08-21 12:22 - 00055219 _____ () C:\Users\Wünsche\Downloads\FRST.txt
2014-08-21 12:24 - 2014-08-21 12:22 - 00021415 _____ () C:\Users\Wünsche\Downloads\Addition.txt
2014-08-21 12:19 - 2014-08-21 12:19 - 00000476 _____ () C:\Users\Wünsche\Downloads\defogger_disable.log
2014-08-21 12:19 - 2014-08-21 12:19 - 00000000 _____ () C:\Users\Wünsche\defogger_reenable
2014-08-21 12:19 - 2014-05-18 15:23 - 00000000 ____D () C:\Users\Wünsche
2014-08-21 12:09 - 2014-08-15 11:38 - 00000501 _____ () C:\Users\Wünsche\Documents\aionmemo_fc6c7565.dat
2014-08-21 11:41 - 2014-07-04 18:14 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-21 11:41 - 2014-05-18 19:33 - 00014914 _____ () C:\Windows\setupact.log
2014-08-21 11:41 - 2009-07-14 06:33 - 00268272 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-21 11:40 - 2014-08-13 10:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-21 11:40 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-18 23:21 - 2014-08-18 23:21 - 01093632 _____ (Farbar) C:\Users\Wünsche\Desktop\FRST.exe
2014-08-18 23:21 - 2014-08-18 23:21 - 00380416 _____ () C:\Users\Wünsche\Desktop\Gmer-19357.exe
2014-08-18 23:21 - 2014-08-18 23:20 - 00050477 _____ () C:\Users\Wünsche\Desktop\Defogger.exe
2014-08-18 23:21 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-16 13:26 - 2014-08-16 13:25 - 00362664 _____ () C:\Users\Wünsche\Downloads\7zip_RocketFuelInstaller.exe
2014-08-15 23:58 - 2014-08-15 23:58 - 00016604 _____ () C:\Users\Wünsche\Downloads\umbronite.ump
2014-08-15 23:33 - 2014-07-04 18:15 - 00002081 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-15 19:42 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche\Downloads\Gameforge Live
2014-08-15 18:39 - 2014-08-15 18:30 - 00262188 _____ () C:\Users\Wünsche\Documents\Logo.tga
2014-08-15 18:26 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\.thumbnails
2014-08-15 18:03 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gegl-0.2
2014-08-15 17:50 - 2014-08-15 17:50 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:50 - 00000995 _____ () C:\Users\Public\Desktop\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:47 - 00000000 ____D () C:\Program Files\GIMP 2
2014-08-15 17:40 - 2014-08-15 17:36 - 90396104 _____ (The GIMP Team ) C:\Users\Wünsche\Downloads\gimp-2.8.10-setup.exe
2014-08-14 15:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-13 23:26 - 2014-05-18 18:33 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA
2014-08-13 23:26 - 2014-05-18 18:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-13 23:25 - 2014-08-13 10:56 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA Corporation
2014-08-13 22:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-13 20:30 - 2014-05-18 18:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 20:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-13 20:18 - 2014-05-18 17:20 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 20:14 - 2014-05-18 17:20 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 20:07 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-13 20:07 - 2014-08-13 10:44 - 00000000 ____D () C:\NVIDIA
2014-08-13 19:00 - 2014-05-18 19:00 - 00000276 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-08-13 11:18 - 2014-08-13 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-08-13 10:56 - 2014-05-18 18:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-13 10:55 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help
2014-08-13 10:31 - 2014-05-18 21:11 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Adobe
2014-08-13 10:30 - 2014-08-13 10:30 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Wünsche\Downloads\CreativeCloudSet-Up.exe
2014-08-10 22:02 - 2014-08-10 11:22 - 00001801 _____ () C:\Users\Wünsche\Desktop\Aion.lnk
2014-08-10 11:30 - 2014-08-10 11:30 - 00122880 _____ () C:\Users\Wünsche\Downloads\d3d8thk (1).dll
2014-08-10 11:20 - 2014-08-10 11:19 - 00344576 _____ (Just-Aion) C:\Users\Wünsche\Downloads\d3dx9_38.dll
2014-08-10 11:19 - 2014-08-10 10:01 - 00195584 _____ () C:\Users\Wünsche\Downloads\d3d8thk.dll
2014-08-10 10:02 - 2014-08-10 10:02 - 00000133 _____ () C:\Users\Wünsche\Downloads\Just Aion - Ariel DEU.bat
2014-08-10 09:43 - 2014-08-02 11:48 - 00001093 _____ () C:\Users\Wünsche\Desktop\Mozilla Firefox.lnk
2014-08-10 09:43 - 2014-05-18 16:20 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-10 09:25 - 2014-05-18 19:32 - 00003342 _____ () C:\Windows\PFRO.log
2014-08-09 21:56 - 2014-08-09 21:17 - 00000000 ____D () C:\Program Files\aeroFox
2014-08-09 21:26 - 2014-08-09 21:26 - 00000000 ____D () C:\Users\Wünsche\Downloads\ChaosCrystal2.0.001
2014-08-09 21:17 - 2014-08-09 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aeroFox
2014-08-09 21:14 - 2014-08-09 21:14 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-09 15:43 - 2014-05-28 16:24 - 00000000 ____D () C:\You tube
2014-08-09 15:14 - 2014-08-01 09:44 - 00000000 ____D () C:\Program Files\SearchProtect
2014-08-08 21:31 - 2014-08-08 21:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Microsoft Games
2014-08-07 03:43 - 2014-08-13 13:49 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 13:49 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 21:34 - 2014-08-04 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-08-05 09:20 - 2014-05-18 15:49 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Gameforge4d
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche
2014-08-02 08:36 - 2014-05-18 16:20 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-08-01 19:12 - 2010-11-21 02:46 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-08-01 16:39 - 2014-08-01 16:37 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2014-08-01 16:39 - 2014-08-01 16:37 - 00000000 ____D () C:\Windows\WindowsMobile
2014-08-01 16:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-01 16:38 - 2014-08-01 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-08-01 13:03 - 2014-08-01 13:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-01 11:53 - 2014-08-01 11:53 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Macromedia
2014-08-01 11:52 - 2014-05-18 21:12 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-08-01 11:52 - 2014-05-18 21:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-08-01 10:41 - 2014-08-01 10:35 - 55880192 _____ () C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager [1].exe
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\MSDOS.SYS
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\IO.SYS
2014-08-01 10:33 - 2014-08-01 10:33 - 00787392 _____ ( ) C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:25 - 2014-08-01 10:25 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-01 09:44 - 2014-08-01 09:44 - 00002232 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00001157 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-01 09:44 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-08-01 09:44 - 2014-08-01 09:40 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\OpenCandy
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-08-01 09:39 - 2014-08-01 09:38 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\Wünsche\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe
2014-08-01 01:16 - 2014-08-13 13:51 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-28 19:34 - 2014-05-18 18:36 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\HpUpdate
2014-07-25 16:01 - 2014-08-13 10:56 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll
2014-07-25 16:01 - 2014-08-13 10:56 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-07-25 15:51 - 2014-08-13 13:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:04 - 2014-08-13 13:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 15:03 - 2014-08-13 13:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 14:34 - 2014-08-13 13:51 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 14:34 - 2014-08-13 13:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 14:33 - 2014-08-13 13:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-13 13:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:21 - 2014-08-13 13:51 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 14:18 - 2014-08-13 13:51 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 14:17 - 2014-08-13 13:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 14:12 - 2014-08-13 13:51 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 14:10 - 2014-08-13 13:51 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 14:10 - 2014-08-13 13:51 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:08 - 2014-08-13 13:51 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:06 - 2014-08-13 13:51 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 13:59 - 2014-08-13 13:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 13:52 - 2014-08-13 13:51 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 13:43 - 2014-08-13 13:51 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 13:36 - 2014-08-13 13:51 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 13:34 - 2014-08-13 13:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 13:29 - 2014-08-13 13:51 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 13:13 - 2014-08-13 13:51 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:09 - 2014-08-13 13:51 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:07 - 2014-08-13 13:51 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:07 - 2014-08-13 13:51 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-13 13:51 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 12:09 - 2014-08-13 13:51 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:05 - 2014-08-13 13:51 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:00 - 2014-08-13 13:51 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-23 11:58 - 2009-07-14 06:53 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Wünsche\AppData\Local\Temp\install_reader11_de_gtbd_chrd_dn_aaa_aih.exe
C:\Users\Wünsche\AppData\Local\Temp\nsd82D9.exe
C:\Users\Wünsche\AppData\Local\Temp\nsd8940.exe
C:\Users\Wünsche\AppData\Local\Temp\nsoFC18.exe
C:\Users\Wünsche\AppData\Local\Temp\nstECF9.exe
C:\Users\Wünsche\AppData\Local\Temp\nstF4E6.exe
C:\Users\Wünsche\AppData\Local\Temp\nsy9072.exe
C:\Users\Wünsche\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Wünsche\AppData\Local\Temp\nvStInst.exe
C:\Users\Wünsche\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Wünsche\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-18 15:59

==================== End Of Log ============================
--- --- ---



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version:17-08-2014 01
Ran by Wünsche at 2014-08-21 15:54:12
Running from C:\Users\Wünsche\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Advanced Disk Recovery (HKLM\...\{2AA44AF4-C116-4219-B800-4573E7E6D421}_is1) (Version: 2.5.500.15827 - Systweak Software)
AION Free-to-Play (HKLM\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version:  - Gameforge)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2021 - AVAST Software)
Bing Bar (HKLM\...\{A7E8CB11-B09E-46F8-9BAE-B2E01EBF7E51}) (Version: 7.0.831.0 - Microsoft Corporation)
Free YouTube to MP3 Converter version 3.12.42.716 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.42.716 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.4 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.4 - Gameforge)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
HP Deskjet 2510 series - Grundlegende Software für das Gerät (HKLM\...\{AEE763B1-34D4-494E-920C-12BCD8A9E76B}) (Version: 27.0.847.0 - Hewlett-Packard Co.)
HP Deskjet 2510 series Hilfe (HKLM\...\{07B48D2C-E60D-41E6-B546-11D128F633EC}) (Version: 27.0.0 - Hewlett Packard)
HP Deskjet 2510 series Setup Guide (HKLM\...\{216C7F38-4BBC-4E9A-8392-C9FA21B54386}) (Version: 27.0.0 - Hewlett Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.3341 - HP Photo Creations Powered by RocketLife)
HP Update (HKLM\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 de) (HKLM\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - JDi Backup Ltd) <==== ATTENTION
Nero 8 Essentials (HKLM\...\{F0AAE3C5-D70C-4F3C-8B6A-EC3992921031}) (Version: 8.3.91 - Nero AG)
neroxml (Version: 1.0.0 - Nero AG) Hidden
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden
NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PC Cleaner (HKLM\...\{25780A42-8553-4a2e-AA54-F413C5D8DA19}_is1) (Version: 2.1.1000.510 - Systweak Software)
RegClean Pro (HKLM\...\RegClean Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Studie zur Verbesserung von HP Deskjet 2510 series Produkten (HKLM\...\{2FB7589D-C95C-4315-BFDF-1EAF75786877}) (Version: 27.0.847.0 - Hewlett-Packard Co.)
Systweak Support Dock (HKLM\...\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1) (Version: 1.2.100.15940 - Systweak Software)
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
Windows Mobile-Gerätecenter (HKLM\...\{904CCF62-818D-4675-BC76-D37EB399F917}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR 5.10 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
YTD Video Downloader 4.8.1 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.1 - GreenTree Applications SRL)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

05-08-2014 10:06:57 Windows Update
05-08-2014 19:35:01 DirectX wurde installiert
09-08-2014 13:31:06 Windows Update
13-08-2014 08:56:53 DirectX wurde installiert
13-08-2014 18:07:30 Windows Update
20-08-2014 05:29:29 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {3EA6D578-1CDD-470E-8CCE-DF983C484410} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-07-04] (Google Inc.)
Task: {70D0F367-C1E2-4FD9-9A3C-558FFAA05AB9} - System32\Tasks\HPCustParticipation HP Deskjet 2510 series => C:\Program Files\HP\HP Deskjet 2510 series\Bin\HPCustPartic.exe [2012-01-31] (Hewlett-Packard Co.)
Task: {7DB92627-C27A-438E-BA6D-5A22EC8C96D5} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-03] (Systweak Inc) <==== ATTENTION
Task: {7DD0A358-8B45-439A-9FAD-A24A65E307AF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-01] (Adobe Systems Incorporated)
Task: {87F81F7D-1E6C-47B0-B4A4-76BFA91A8EED} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-03] (Systweak Inc) <==== ATTENTION
Task: {95CD02EB-17EC-429A-BF70-9D98D2601E9A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-07-04] (Google Inc.)
Task: {BAD43DD8-9B2D-40DD-A3B5-E52FD588A2EE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-04] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-08-13 10:55 - 2014-07-02 21:42 - 00107992 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-07-04 18:11 - 2014-07-04 18:11 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-08-21 09:44 - 2014-08-21 09:44 - 02800128 _____ () C:\Program Files\AVAST Software\Avast\defs\14082001\algo.dll
2014-08-21 15:41 - 2014-08-21 15:41 - 02800128 _____ () C:\Program Files\AVAST Software\Avast\defs\14082100\algo.dll
2014-07-04 18:11 - 2014-07-04 18:11 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 00718152 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libglesv2.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libegl.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 08537928 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\pdf.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 00353096 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 01732936 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ffmpegsumo.dll
2014-08-18 23:20 - 2014-08-18 23:21 - 00050477 _____ () C:\Users\Wünsche\Desktop\Defogger.exe

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: H:\
Description: USB SM Reader   
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: G:\
Description: USB CF Reader   
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: I:\
Description: USB MS Reader   
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: F:\
Description: USB SD Reader   
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Generic 
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Event log errors: =========================

Application errors:
==================
Error: (08/21/2014 00:47:23 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (08/21/2014 11:41:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/21/2014 10:22:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/21/2014 10:21:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NMIndexStoreSvr.exe, Version: 3.3.3.0, Zeitstempel: 0x47c6bd1b
Name des fehlerhaften Moduls: NMIndexStoreSvr.exe, Version: 3.3.3.0, Zeitstempel: 0x47c6bd1b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000c463a
ID des fehlerhaften Prozesses: 0x5c4
Startzeit der fehlerhaften Anwendung: 0xNMIndexStoreSvr.exe0
Pfad der fehlerhaften Anwendung: NMIndexStoreSvr.exe1
Pfad des fehlerhaften Moduls: NMIndexStoreSvr.exe2
Berichtskennung: NMIndexStoreSvr.exe3

Error: (08/21/2014 09:45:07 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/20/2014 08:36:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm aion.bin, Version 4514.1127.512.8163 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: c3c

Startzeit: 01cfbca52317abb2

Endzeit: 30

Anwendungspfad: D:\GameforgeLive\Games\DEU_deu\AION\Download\bin32\aion.bin

Berichts-ID: db98dae5-2898-11e4-9926-00241d5413b5

Error: (08/20/2014 08:33:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/20/2014 02:54:16 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (08/20/2014 02:20:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: aion.bin, Version: 4514.1127.512.8163, Zeitstempel: 0x53702978
Name des fehlerhaften Moduls: Game.dll, Version: 4514.1002.304.7947, Zeitstempel: 0x5315b216
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001cbc47
ID des fehlerhaften Prozesses: 0x162c
Startzeit der fehlerhaften Anwendung: 0xaion.bin0
Pfad der fehlerhaften Anwendung: aion.bin1
Pfad des fehlerhaften Moduls: aion.bin2
Berichtskennung: aion.bin3

Error: (08/20/2014 11:18:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (08/21/2014 02:18:37 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45F5C3E3-FE0A-4876-AC8A-068148A312-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/21/2014 11:41:34 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/21/2014 11:41:34 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (08/21/2014 10:00:55 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (08/21/2014 10:00:55 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (08/21/2014 09:44:58 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/21/2014 09:44:58 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (08/20/2014 00:16:14 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45F5C3E3-FE0A-4876-AC8A-068148A312-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/20/2014 11:18:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/20/2014 11:18:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.


Microsoft Office Sessions:
=========================
Error: (08/21/2014 00:47:23 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Deskjet 2510 series\DriverStore\Pipeline\amd64\hpinkinsAC11.exe

Error: (08/21/2014 11:41:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/21/2014 10:22:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/21/2014 10:21:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: NMIndexStoreSvr.exe3.3.3.047c6bd1bNMIndexStoreSvr.exe3.3.3.047c6bd1bc0000005000c463a5c401cfbd18d1fa5e7dC:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exeC:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe3425368e-290c-11e4-9351-00241d5413b5

Error: (08/21/2014 09:45:07 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/20/2014 08:36:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: aion.bin4514.1127.512.8163c3c01cfbca52317abb230D:\GameforgeLive\Games\DEU_deu\AION\Download\bin32\aion.bindb98dae5-2898-11e4-9926-00241d5413b5

Error: (08/20/2014 08:33:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/20/2014 02:54:16 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Deskjet 2510 series\DriverStore\Pipeline\amd64\hpinkinsAC11.exe

Error: (08/20/2014 02:20:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: aion.bin4514.1127.512.816353702978Game.dll4514.1002.304.79475315b216c0000005001cbc47162c01cfbc57c89925ebD:\GameforgeLive\Games\DEU_deu\AION\Download\bin32\aion.binD:\GameforgeLive\Games\DEU_deu\AION\Download\bin32\Game.dll6b31c2d6-2864-11e4-a180-00241d5413b5

Error: (08/20/2014 11:18:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: Pentium(R) Dual-Core CPU E5200 @ 2.50GHz
Percentage of memory in use: 60%
Total physical RAM: 2046.49 MB
Available physical RAM: 810.38 MB
Total Pagefile: 4092.98 MB
Available Pagefile: 2531.93 MB
Total Virtual: 2047.88 MB
Available Virtual: 1924.63 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:292.87 GB) (Free:260.37 GB) NTFS
Drive d: () (Fixed) (Total:172.69 GB) (Free:144.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E1B9E1B9)
Partition 1: (Not Active) - (Size=172.7 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=292.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-08-21 16:11:46
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HD502IJ rev.1AA01118 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\WNSCHE~1\AppData\Local\Temp\pwdiyfoc.sys


---- System - GMER 2.1 ----

SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwAddBootEntry [0x8CE49BA6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwAssignProcessToJobObject [0x8CE4A684]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateEvent [0x8CE566F8]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateEventPair [0x8CE56744]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateIoCompletion [0x8CE568DE]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateMutant [0x8CE56666]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateSection [0x8CF00DF0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateSemaphore [0x8CE566AE]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateThread [0x8CF01080]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateThreadEx [0x8CF0116A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateTimer [0x8CE56898]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDebugActiveProcess [0x8CE4B472]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDeleteBootEntry [0x8CE49C0C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDuplicateObject [0x8CE4EC68]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwLoadDriver [0x8CE497F8]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwMapViewOfSection [0x8CF00ED0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwModifyBootEntry [0x8CE49C72]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwNotifyChangeKey [0x8CE4F05E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwNotifyChangeMultipleKeys [0x8CE4BF5A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenEvent [0x8CE56722]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenEventPair [0x8CE56766]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenIoCompletion [0x8CE56902]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenMutant [0x8CE5668C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenProcess [0x8CE4E560]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenSection [0x8CE56816]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenSemaphore [0x8CE566D6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenThread [0x8CE4E94C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenTimer [0x8CE568BC]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwProtectVirtualMemory [0x8CF00C6E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwQueryObject [0x8CE4BDCE]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwQueueApcThreadEx [0x8CE4BADC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetBootEntryOrder [0x8CE49CD8]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetBootOptions [0x8CE49D3E]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwSetContextThread [0x8CF00FCC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetSystemInformation [0x8CE49892]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetSystemPowerState [0x8CE49A64]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwShutdownSystem [0x8CE499F2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSuspendProcess [0x8CE4B63C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSuspendThread [0x8CE4B79E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSystemDebugControl [0x8CE49AEC]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwTerminateProcess [0x8CF00D3C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwTerminateThread [0x8CE4B2CC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwVdmControl [0x8CE49DA4]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwWriteVirtualMemory [0x8CF00BA0]

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                           82C50A15 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                             82C8A212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 10CB                                                                82C91460 4 Bytes  [A6, 9B, E4, 8C] {CMPSB ; WAIT ; IN AL, 0x8c}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1153                                                                82C914E8 4 Bytes  [84, A6, E4, 8C]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11A7                                                                82C9153C 2 Bytes  [F8, 66]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11AA                                                                82C9153F 5 Bytes  [8C, 44, 67, E5, 8C]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11B3                                                                82C91548 4 Bytes  [DE, 68, E5, 8C]
.text  ...                                                                                                

---- User code sections - GMER 2.1 ----

.text  C:\Windows\system32\svchost.exe[340] kernel32.dll!GetBinaryTypeW + 70                              75506AAC 1 Byte  [62]
.text  C:\Windows\WindowsMobile\wmdc.exe[364] kernel32.dll!GetBinaryTypeW + 70                            75506AAC 1 Byte  [62]
.text  C:\Windows\system32\csrss.exe[412] kernel32.dll!GetBinaryTypeW + 70                                75506AAC 1 Byte  [62]
.text  C:\Windows\system32\wininit.exe[476] kernel32.dll!GetBinaryTypeW + 70                              75506AAC 1 Byte  [62]
.text  C:\Windows\system32\csrss.exe[492] kernel32.dll!GetBinaryTypeW + 70                                75506AAC 1 Byte  [62]
.text  ...                                                                                                
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1400] kernel32.dll!SetUnhandledExceptionFilter  754EF5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1400] kernel32.dll!GetBinaryTypeW + 70          75506AAC 1 Byte  [62]
.text  C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe[1444] kernel32.dll!GetBinaryTypeW + 70      75506AAC 1 Byte  [62]
.text  C:\Program Files\AVAST Software\Avast\avastui.exe[1476] kernel32.dll!SetUnhandledExceptionFilter   754EF5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\avastui.exe[1476] kernel32.dll!GetBinaryTypeW + 70           75506AAC 1 Byte  [62]
.text  C:\Windows\System32\spoolsv.exe[1580] kernel32.dll!GetBinaryTypeW + 70                             75506AAC 1 Byte  [62]
.text  C:\Windows\system32\taskhost.exe[1636] kernel32.dll!GetBinaryTypeW + 70                            75506AAC 1 Byte  [62]
.text  C:\Windows\system32\Dwm.exe[1688] kernel32.dll!GetBinaryTypeW + 70                                 75506AAC 1 Byte  [62]
.text  C:\Windows\Explorer.EXE[1864] kernel32.dll!GetBinaryTypeW + 70                                     75506AAC 1 Byte  [62]
.text  ...                                                                                                

---- EOF - GMER 2.1 ----
__________________
Geändert von sisley24m (21.08.2014 um 15:52 Uhr)

Alt 22.08.2014, 08:36   #4
M-K-D-B
/// TB-Ausbilder
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).





Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.






Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.







Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von JRT,
  • die Logdatei von MBAM,
  • die beiden neuen Logdateien von FRST.
Alt 22.08.2014, 16:16   #5
sisley24m
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Hallo Matthias...Hier die Logs

Code:
ATTFilter
# AdwCleaner v3.308 - Bericht erstellt am 22/08/2014 um 14:03:59
# Aktualisiert 20/08/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Wünsche - WÜNSCHE-PC
# Gestartet von : C:\Users\Wünsche\Desktop\adwcleaner_3.308.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : BackupStack

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Cleaner
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Systweak Support Dock
Ordner Gelöscht : C:\Program Files\Advanced System Protector
Ordner Gelöscht : C:\Program Files\MyPC Backup
Ordner Gelöscht : C:\Program Files\PC Cleaner
Ordner Gelöscht : C:\Program Files\RegClean Pro
Ordner Gelöscht : C:\Program Files\SearchProtect
Ordner Gelöscht : C:\Program Files\Systweak Support Dock
Ordner Gelöscht : C:\Users\Wünsche\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Wünsche\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Wünsche\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Ordner Gelöscht : C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\Allin1Convert_8h
Datei Gelöscht : C:\Windows\system32\roboot.exe
Datei Gelöscht : C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\searchplugins\trovi-search.xml

***** [ Tasks ] *****

Task Gelöscht : RegClean Pro_DEFAULT
Task Gelöscht : RegClean Pro_UPDATES

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1
Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.firstKnownVersion", "6.33.3.46645");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=2D248A61-F775-4B5C-BCBB-E2AFDEB87D72&n=780bfdde&p2=^AYY^xdm070^YYA^de&si=flvrunner");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.initialized", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installKeysSource", "LocalStorage");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installType", "XPI");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.contextKey", "");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.installDate", "2014051806");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerId", "^AYY^xdm070^YYA^de");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerSubId", "flvrunner");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.pixelUrl", "hxxp://allin1convert.dl.tb.ask.com/install_pixels.jhtml?partner=^AYY^xdm070^YYA^de&coId=0f8f839e62b749bc8f8db1afc5b97b3c&ca[...]
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.success", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.toolbarId", "2D248A61-F775-4B5C-BCBB-E2AFDEB87D72");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.isCompliantUninstallImplementation", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.lastActivePing", "1407060240222");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.lastKnownVersion", "6.58.4.18153");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.defaultSearch", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.homePageEnabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.keywordEnabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.tabEnabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.partnerPixelFired", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.searchHistory", "Youtube musik video||Navifit Falk PN:1677460000||www.navifit.com/falk");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.successUrl", "hxxp://flvrunner.com/thankyou.php");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbarCollapsed", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.weather.location", "10001");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.lastInstalled", "allin1convert@mindspark.com");

-\\ Google Chrome v36.0.1985.143

[ Datei : C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3322288&octid=EB_ORIGINAL_CTID&ISID=M1187A095-50E7-4231-B22E-6829E5889835&SearchSource=58&CUI=&UM=6&UP=SP6EEA71DB-0B89-476A-8857-A2837ABA3E73&q={searchTerms}&SSPV=
Gelöscht [Search Provider] : hxxp://url24.info/?id=8881a9346h1207&q={searchTerms}
Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms}
Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb

*************************

AdwCleaner[R0].txt - [6940 octets] - [22/08/2014 14:01:15]
AdwCleaner[S0].txt - [6865 octets] - [22/08/2014 14:03:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6925 octets] ##########
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 22.08.2014
Suchlauf-Zeit: 14:28:14
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.22.04
Rootkit Datenbank: v2014.08.21.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Wünsche

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 272069
Verstrichene Zeit: 35 Min, 8 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 4
PUP.Optional.AmazonTB.A, C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\jetpack\abb@amazon.com, In Quarantäne, [9c0029a007741620f84fffc3c83af30d], 
PUP.Optional.AmazonTB.A, C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\jetpack\abb@amazon.com\simple-storage, In Quarantäne, [9c0029a007741620f84fffc3c83af30d], 
PUP.Optional.Extutil.A, C:\Users\Wünsche\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B, In Quarantäne, [a7f5a1286a1185b164aa6e67bd45847c], 
PUP.Optional.Managera.A, C:\Users\Wünsche\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42, In Quarantäne, [dcc0be0b0a71ae88739c993c768ca858], 

Dateien: 16
PUP.Optional.Conduit.A, C:\Users\Wünsche\AppData\Local\Temp\nsd82D9.exe, In Quarantäne, [e1bb0bbebac192a47ed6434b847d13ed], 
PUP.Optional.Conduit.A, C:\Users\Wünsche\AppData\Local\Temp\nsd8940.exe, In Quarantäne, [6c30af1a364547efd77dfb930bf657a9], 
PUP.Optional.SearchProtect.A, C:\Users\Wünsche\AppData\Local\Temp\nsi3546.tmp, In Quarantäne, [2e6eb019116aad89c6b51385f01122de], 
PUP.Optional.Conduit.A, C:\Users\Wünsche\AppData\Local\Temp\nsoFC18.exe, In Quarantäne, [53497b4e750640f6c98b1d710ff2a060], 
PUP.Optional.Conduit.A, C:\Users\Wünsche\AppData\Local\Temp\nstECF9.exe, In Quarantäne, [8319f7d2b5c6fa3c82d2e2acb0515ea2], 
PUP.Optional.Conduit.A, C:\Users\Wünsche\AppData\Local\Temp\nstF4E6.exe, In Quarantäne, [63397f4aa8d3b87ed87ce3abb84951af], 
PUP.Optional.Conduit.A, C:\Users\Wünsche\AppData\Local\Temp\nsy9072.exe, In Quarantäne, [27750bbef18a73c39eb6e5a96c9548b8], 
PUP.Optional.Verti, C:\Users\Wünsche\Downloads\7zip_RocketFuelInstaller.exe, In Quarantäne, [7e1e3d8c255637ff7ecfb21c2dd755ab], 
PUP.Optional.RegCleanPro, C:\Users\Wünsche\Downloads\regclean_my40945.exe, In Quarantäne, [a6f6e0e9c0bb13233e7cb77db44cf907], 
PUP.Optional.Spigot, C:\Users\Wünsche\Downloads\YTDSetup481.exe, In Quarantäne, [f0acd4f566152b0bb11030765da44ab6], 
PUP.Optional.AmazonTB.A, C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\jetpack\abb@amazon.com\simple-storage\store.json, In Quarantäne, [9c0029a007741620f84fffc3c83af30d], 
PUP.Optional.Extutil.A, C:\Users\Wünsche\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\bk.js, In Quarantäne, [a7f5a1286a1185b164aa6e67bd45847c], 
PUP.Optional.Extutil.A, C:\Users\Wünsche\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\cs.js, In Quarantäne, [a7f5a1286a1185b164aa6e67bd45847c], 
PUP.Optional.Extutil.A, C:\Users\Wünsche\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\manifest.json, In Quarantäne, [a7f5a1286a1185b164aa6e67bd45847c], 
PUP.Optional.Managera.A, C:\Users\Wünsche\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42\cs.js, In Quarantäne, [dcc0be0b0a71ae88739c993c768ca858], 
PUP.Optional.Managera.A, C:\Users\Wünsche\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42\manifest.json, In Quarantäne, [dcc0be0b0a71ae88739c993c768ca858], 

Physische Sektoren: 0
(No malicious items detected)


(end)
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x86
Ran by Wnsche on 22.08.2014 at 15:54:00,15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"



~~~ FireFox

Emptied folder: C:\Users\Wnsche\AppData\Roaming\mozilla\firefox\profiles\a74gx0g1.default\minidumps [1 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.08.2014 at 15:57:07,64
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-08-2014
Ran by Wünsche (administrator) on WÜNSCHE-PC on 22-08-2014 17:09:52
Running from C:\Users\Wünsche\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [NBKeyScan] => C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-02-18] (Nero AG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKU\S-1-5-21-813962834-3573142917-1844992356-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKU\S-1-5-21-813962834-3573142917-1844992356-1000\...\Run: [GoogleChromeAutoLaunch_DC2B767C3595397FBCC81637413C5DF1] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
SearchScopes: HKLM - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Keyword.URL: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-09]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-18]

Chrome: 
=======
CHR HomePage: hxxp://de.msn.com/?ocid=OIE8MSE
CHR StartupUrls: "hxxp://www.google.de/", "www.google.com"
CHR DefaultSuggestURL: 
CHR Extension: (Google Docs) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-04]
CHR Extension: (Google Drive) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-04]
CHR Extension: (YouTube) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-04]
CHR Extension: (Adblock Plus) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-05]
CHR Extension: (Google-Suche) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-04]
CHR Extension: (avast! Online Security) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-04]
CHR Extension: (Window State Sample) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcbhfbnaaancmblfhdknlnojpafjohbi [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-04]
CHR Extension: (YouTube Unblocker) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-08-01]
CHR Extension: (Mein Chrome-Design) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-08-09]
CHR Extension: (Google Mail) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-04]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-04]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-04] (AVAST Software)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [17536800 2014-07-25] (NVIDIA Corporation)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-04] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-07-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-04] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-07-04] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-22 17:08 - 2014-08-22 17:08 - 00000000 ____D () C:\Users\Wünsche\Desktop\FRST-OlderVersion
2014-08-22 15:57 - 2014-08-22 15:57 - 00001062 _____ () C:\Users\Wünsche\Desktop\JRT.txt
2014-08-22 15:53 - 2014-08-22 15:53 - 00000000 ____D () C:\Windows\ERUNT
2014-08-22 15:52 - 2014-08-22 15:53 - 01016261 _____ (Thisisu) C:\Users\Wünsche\Desktop\JRT.exe
2014-08-22 15:52 - 2014-08-22 15:52 - 00004062 _____ () C:\Users\Wünsche\Desktop\mbam.txt
2014-08-22 14:27 - 2014-08-22 15:51 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-22 14:26 - 2014-08-22 14:26 - 00001020 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-22 14:26 - 2014-08-22 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-22 14:26 - 2014-08-22 14:26 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-22 14:26 - 2014-08-22 14:26 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-22 14:26 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-22 14:26 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-22 14:26 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-22 14:24 - 2014-08-22 14:25 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Wünsche\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-22 14:02 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-08-22 14:01 - 2014-08-22 14:04 - 00000000 ____D () C:\AdwCleaner
2014-08-22 13:59 - 2014-08-22 13:59 - 01364531 _____ () C:\Users\Wünsche\Desktop\adwcleaner_3.308.exe
2014-08-21 16:11 - 2014-08-21 16:11 - 00009880 _____ () C:\Users\Wünsche\Desktop\Gmer.txt
2014-08-21 15:53 - 2014-08-22 17:10 - 00012492 _____ () C:\Users\Wünsche\Desktop\FRST.txt
2014-08-21 13:31 - 2014-08-21 13:31 - 00002108 _____ () C:\Users\Wünsche\AppData\Local\recently-used.xbel
2014-08-21 12:28 - 2014-08-21 15:51 - 00000476 _____ () C:\Users\Wünsche\Desktop\defogger_disable.log
2014-08-21 12:22 - 2014-08-21 12:24 - 00055219 _____ () C:\Users\Wünsche\Downloads\FRST.txt
2014-08-21 12:22 - 2014-08-21 12:24 - 00021415 _____ () C:\Users\Wünsche\Downloads\Addition.txt
2014-08-21 12:21 - 2014-08-22 17:09 - 00000000 ____D () C:\FRST
2014-08-21 12:19 - 2014-08-21 12:19 - 00000476 _____ () C:\Users\Wünsche\Downloads\defogger_disable.log
2014-08-21 12:19 - 2014-08-21 12:19 - 00000000 _____ () C:\Users\Wünsche\defogger_reenable
2014-08-18 23:21 - 2014-08-22 17:08 - 01094144 _____ (Farbar) C:\Users\Wünsche\Desktop\FRST.exe
2014-08-18 23:21 - 2014-08-18 23:21 - 00380416 _____ () C:\Users\Wünsche\Desktop\Gmer-19357.exe
2014-08-18 23:20 - 2014-08-18 23:21 - 00050477 _____ () C:\Users\Wünsche\Desktop\Defogger.exe
2014-08-15 23:58 - 2014-08-15 23:58 - 00016604 _____ () C:\Users\Wünsche\Downloads\umbronite.ump
2014-08-15 18:30 - 2014-08-15 18:39 - 00262188 _____ () C:\Users\Wünsche\Documents\Logo.tga
2014-08-15 18:26 - 2014-08-21 13:31 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gtk-2.0
2014-08-15 18:26 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\.thumbnails
2014-08-15 18:05 - 2014-08-15 18:05 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\fontconfig
2014-08-15 18:03 - 2014-08-21 13:31 - 00000000 ____D () C:\Users\Wünsche\.gimp-2.8
2014-08-15 18:03 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gegl-0.2
2014-08-15 17:50 - 2014-08-15 17:50 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:50 - 00000995 _____ () C:\Users\Public\Desktop\GIMP 2.lnk
2014-08-15 17:47 - 2014-08-15 17:50 - 00000000 ____D () C:\Program Files\GIMP 2
2014-08-15 17:36 - 2014-08-15 17:40 - 90396104 _____ (The GIMP Team ) C:\Users\Wünsche\Downloads\gimp-2.8.10-setup.exe
2014-08-15 11:38 - 2014-08-21 12:09 - 00000501 _____ () C:\Users\Wünsche\Documents\aionmemo_fc6c7565.dat
2014-08-13 20:12 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 20:12 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 20:12 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 20:11 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 20:07 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-13 13:51 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 13:51 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 13:51 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 13:51 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 13:51 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 13:51 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 13:51 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 13:51 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 13:51 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 13:51 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 13:51 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 13:51 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 13:51 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 13:51 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 13:51 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 13:51 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 13:51 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 13:51 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 13:51 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 13:51 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 13:51 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 13:51 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 13:51 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 13:51 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 13:51 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 13:51 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 13:51 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 13:51 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 13:51 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 13:51 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 13:51 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 13:51 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 13:51 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 13:51 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 13:50 - 2014-07-16 04:47 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-13 13:50 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 13:50 - 2014-07-16 03:47 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-13 13:49 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 13:49 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 13:49 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 13:49 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 13:49 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 13:49 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 13:49 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 13:49 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 10:56 - 2014-08-13 23:25 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-08-13 10:56 - 2014-07-25 16:01 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll
2014-08-13 10:56 - 2014-07-25 16:01 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-08-13 10:55 - 2014-08-22 15:48 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-13 10:55 - 2014-07-02 22:54 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-08-13 10:55 - 2014-07-02 21:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-08-13 10:55 - 2014-07-02 19:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-08-13 10:55 - 2014-07-02 07:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2014-08-13 10:49 - 2014-07-02 23:28 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco3220103.dll
2014-08-13 10:49 - 2014-07-02 23:28 - 00162592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys
2014-08-13 10:49 - 2014-07-02 23:28 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 24198088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 16122344 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 15296456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 14498552 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 11283344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 11222048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 10681176 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-08-13 10:49 - 2014-07-02 22:54 - 03988952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 02814656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 01054552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234052.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00907552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234052.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00907096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00869152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00021215 _____ () C:\Windows\system32\nvinfo.pb
2014-08-13 10:49 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll
2014-08-13 10:49 - 2014-03-31 18:42 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys
2014-08-13 10:44 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA
2014-08-13 10:30 - 2014-08-13 10:30 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Wünsche\Downloads\CreativeCloudSet-Up.exe
2014-08-10 11:30 - 2014-08-10 11:30 - 00122880 _____ () C:\Users\Wünsche\Downloads\d3d8thk (1).dll
2014-08-10 11:22 - 2014-08-10 22:02 - 00001801 _____ () C:\Users\Wünsche\Desktop\Aion.lnk
2014-08-10 11:19 - 2014-08-10 11:20 - 00344576 _____ (Just-Aion) C:\Users\Wünsche\Downloads\d3dx9_38.dll
2014-08-10 10:02 - 2014-08-10 10:02 - 00000133 _____ () C:\Users\Wünsche\Downloads\Just Aion - Ariel DEU.bat
2014-08-10 10:01 - 2014-08-10 11:19 - 00195584 _____ () C:\Users\Wünsche\Downloads\d3d8thk.dll
2014-08-09 21:26 - 2014-08-09 21:26 - 00000000 ____D () C:\Users\Wünsche\Downloads\ChaosCrystal2.0.001
2014-08-09 21:17 - 2014-08-09 21:56 - 00000000 ____D () C:\Program Files\aeroFox
2014-08-09 21:17 - 2014-08-09 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aeroFox
2014-08-09 21:14 - 2014-08-09 21:14 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-08 21:03 - 2014-08-08 21:31 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Microsoft Games
2014-08-04 21:34 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-08-04 21:34 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-08-04 21:34 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-08-04 21:33 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-08-04 21:33 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-08-04 21:33 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-08-04 21:33 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-08-04 21:33 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-08-04 21:33 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-08-04 21:33 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-08-04 21:33 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-08-04 21:33 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-08-04 21:33 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-08-04 21:33 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-08-04 21:33 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-08-04 21:33 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-08-04 21:33 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-08-04 21:33 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-08-04 21:33 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-08-04 21:33 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-08-04 21:33 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-08-04 21:33 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-08-04 21:33 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-08-04 21:33 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-08-04 21:33 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-08-04 21:33 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-08-04 21:33 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-08-04 21:33 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-08-04 21:33 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-08-04 21:33 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-08-04 21:33 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-08-04 21:33 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-08-04 21:33 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-08-04 21:33 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-08-04 21:33 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-08-04 21:33 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-08-04 21:33 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-08-04 21:33 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-08-04 21:33 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-08-04 21:33 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-08-04 21:33 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-08-04 21:33 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-08-04 21:33 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-08-04 21:33 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-08-04 21:33 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-08-04 21:33 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-08-04 21:33 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-08-04 21:33 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-08-04 21:33 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-08-04 21:33 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-08-04 21:29 - 2014-08-15 19:42 - 00000000 ____D () C:\Users\W�nsche\Downloads\Gameforge Live
2014-08-04 21:29 - 2014-08-05 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Gameforge4d
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche
2014-08-02 11:48 - 2014-08-10 09:43 - 00001093 _____ () C:\Users\Wünsche\Desktop\Mozilla Firefox.lnk
2014-08-02 11:39 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-02 11:39 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-02 11:39 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-02 11:39 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-02 11:39 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-02 11:39 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-01 16:38 - 2014-08-01 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-08-01 16:37 - 2014-08-01 16:39 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2014-08-01 16:37 - 2014-08-01 16:39 - 00000000 ____D () C:\Windows\WindowsMobile
2014-08-01 13:03 - 2014-08-01 13:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-01 11:53 - 2014-08-01 11:53 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Macromedia
2014-08-01 10:58 - 2014-06-24 14:45 - 00146183 _____ () C:\Users\Wünsche\Documents\YouTube-Unblocker-056 (1).crx
2014-08-01 10:35 - 2014-08-01 10:41 - 55880192 _____ () C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager [1].exe
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\MSDOS.SYS
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\IO.SYS
2014-08-01 10:33 - 2014-08-01 10:33 - 00787392 _____ ( ) C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:25 - 2014-08-01 10:25 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-01 09:44 - 2014-08-01 09:44 - 00002232 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00001157 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:44 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-08-01 09:40 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\DVDVideoSoft
2014-08-01 09:38 - 2014-08-01 09:39 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\Wünsche\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-22 17:10 - 2014-08-21 15:53 - 00012492 _____ () C:\Users\Wünsche\Desktop\FRST.txt
2014-08-22 17:09 - 2014-08-21 12:21 - 00000000 ____D () C:\FRST
2014-08-22 17:08 - 2014-08-22 17:08 - 00000000 ____D () C:\Users\Wünsche\Desktop\FRST-OlderVersion
2014-08-22 17:08 - 2014-08-18 23:21 - 01094144 _____ (Farbar) C:\Users\Wünsche\Desktop\FRST.exe
2014-08-22 17:08 - 2014-05-18 21:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-22 16:24 - 2014-07-04 18:14 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-22 15:57 - 2014-08-22 15:57 - 00001062 _____ () C:\Users\Wünsche\Desktop\JRT.txt
2014-08-22 15:56 - 2009-07-14 06:34 - 00032112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-22 15:56 - 2009-07-14 06:34 - 00032112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-22 15:53 - 2014-08-22 15:53 - 00000000 ____D () C:\Windows\ERUNT
2014-08-22 15:53 - 2014-08-22 15:52 - 01016261 _____ (Thisisu) C:\Users\Wünsche\Desktop\JRT.exe
2014-08-22 15:52 - 2014-08-22 15:52 - 00004062 _____ () C:\Users\Wünsche\Desktop\mbam.txt
2014-08-22 15:52 - 2014-05-18 15:05 - 01087263 _____ () C:\Windows\WindowsUpdate.log
2014-08-22 15:51 - 2014-08-22 14:27 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-22 15:49 - 2014-07-04 18:14 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-22 15:49 - 2014-05-18 19:33 - 00015922 _____ () C:\Windows\setupact.log
2014-08-22 15:49 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-22 15:49 - 2009-07-14 06:33 - 00268272 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-22 15:48 - 2014-08-13 10:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-22 15:48 - 2014-05-18 19:32 - 00009308 _____ () C:\Windows\PFRO.log
2014-08-22 14:26 - 2014-08-22 14:26 - 00001020 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-22 14:26 - 2014-08-22 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-22 14:26 - 2014-08-22 14:26 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-22 14:26 - 2014-08-22 14:26 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-22 14:25 - 2014-08-22 14:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Wünsche\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-22 14:04 - 2014-08-22 14:01 - 00000000 ____D () C:\AdwCleaner
2014-08-22 13:59 - 2014-08-22 13:59 - 01364531 _____ () C:\Users\Wünsche\Desktop\adwcleaner_3.308.exe
2014-08-21 16:11 - 2014-08-21 16:11 - 00009880 _____ () C:\Users\Wünsche\Desktop\Gmer.txt
2014-08-21 15:51 - 2014-08-21 12:28 - 00000476 _____ () C:\Users\Wünsche\Desktop\defogger_disable.log
2014-08-21 15:01 - 2014-06-29 15:01 - 00001414 _____ () C:\Users\Wünsche\Desktop\Registry kostenlos entrümpeln!.lnk
2014-08-21 13:31 - 2014-08-21 13:31 - 00002108 _____ () C:\Users\Wünsche\AppData\Local\recently-used.xbel
2014-08-21 13:31 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gtk-2.0
2014-08-21 13:31 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\.gimp-2.8
2014-08-21 12:24 - 2014-08-21 12:22 - 00055219 _____ () C:\Users\Wünsche\Downloads\FRST.txt
2014-08-21 12:24 - 2014-08-21 12:22 - 00021415 _____ () C:\Users\Wünsche\Downloads\Addition.txt
2014-08-21 12:19 - 2014-08-21 12:19 - 00000476 _____ () C:\Users\Wünsche\Downloads\defogger_disable.log
2014-08-21 12:19 - 2014-08-21 12:19 - 00000000 _____ () C:\Users\Wünsche\defogger_reenable
2014-08-21 12:19 - 2014-05-18 15:23 - 00000000 ____D () C:\Users\Wünsche
2014-08-21 12:09 - 2014-08-15 11:38 - 00000501 _____ () C:\Users\Wünsche\Documents\aionmemo_fc6c7565.dat
2014-08-18 23:21 - 2014-08-18 23:21 - 00380416 _____ () C:\Users\Wünsche\Desktop\Gmer-19357.exe
2014-08-18 23:21 - 2014-08-18 23:20 - 00050477 _____ () C:\Users\Wünsche\Desktop\Defogger.exe
2014-08-18 23:21 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-15 23:58 - 2014-08-15 23:58 - 00016604 _____ () C:\Users\Wünsche\Downloads\umbronite.ump
2014-08-15 23:33 - 2014-07-04 18:15 - 00002081 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-15 19:42 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche\Downloads\Gameforge Live
2014-08-15 18:39 - 2014-08-15 18:30 - 00262188 _____ () C:\Users\Wünsche\Documents\Logo.tga
2014-08-15 18:26 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\.thumbnails
2014-08-15 18:03 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gegl-0.2
2014-08-15 17:50 - 2014-08-15 17:50 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:50 - 00000995 _____ () C:\Users\Public\Desktop\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:47 - 00000000 ____D () C:\Program Files\GIMP 2
2014-08-15 17:40 - 2014-08-15 17:36 - 90396104 _____ (The GIMP Team ) C:\Users\Wünsche\Downloads\gimp-2.8.10-setup.exe
2014-08-14 15:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-13 23:26 - 2014-05-18 18:33 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA
2014-08-13 23:26 - 2014-05-18 18:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-13 23:25 - 2014-08-13 10:56 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA Corporation
2014-08-13 22:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-13 20:30 - 2014-05-18 18:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 20:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-13 20:18 - 2014-05-18 17:20 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 20:14 - 2014-05-18 17:20 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 20:07 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-13 20:07 - 2014-08-13 10:44 - 00000000 ____D () C:\NVIDIA
2014-08-13 11:18 - 2014-08-13 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-08-13 10:56 - 2014-05-18 18:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-13 10:55 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help
2014-08-13 10:31 - 2014-05-18 21:11 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Adobe
2014-08-13 10:30 - 2014-08-13 10:30 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Wünsche\Downloads\CreativeCloudSet-Up.exe
2014-08-10 22:02 - 2014-08-10 11:22 - 00001801 _____ () C:\Users\Wünsche\Desktop\Aion.lnk
2014-08-10 11:30 - 2014-08-10 11:30 - 00122880 _____ () C:\Users\Wünsche\Downloads\d3d8thk (1).dll
2014-08-10 11:20 - 2014-08-10 11:19 - 00344576 _____ (Just-Aion) C:\Users\Wünsche\Downloads\d3dx9_38.dll
2014-08-10 11:19 - 2014-08-10 10:01 - 00195584 _____ () C:\Users\Wünsche\Downloads\d3d8thk.dll
2014-08-10 10:02 - 2014-08-10 10:02 - 00000133 _____ () C:\Users\Wünsche\Downloads\Just Aion - Ariel DEU.bat
2014-08-10 09:43 - 2014-08-02 11:48 - 00001093 _____ () C:\Users\Wünsche\Desktop\Mozilla Firefox.lnk
2014-08-10 09:43 - 2014-05-18 16:20 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-09 21:56 - 2014-08-09 21:17 - 00000000 ____D () C:\Program Files\aeroFox
2014-08-09 21:26 - 2014-08-09 21:26 - 00000000 ____D () C:\Users\Wünsche\Downloads\ChaosCrystal2.0.001
2014-08-09 21:17 - 2014-08-09 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aeroFox
2014-08-09 21:14 - 2014-08-09 21:14 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-09 15:43 - 2014-05-28 16:24 - 00000000 ____D () C:\You tube
2014-08-08 21:31 - 2014-08-08 21:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Microsoft Games
2014-08-07 03:43 - 2014-08-13 13:49 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 13:49 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 21:34 - 2014-08-04 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-08-05 09:20 - 2014-05-18 15:49 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Gameforge4d
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche
2014-08-02 08:36 - 2014-05-18 16:20 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-08-01 19:12 - 2010-11-21 02:46 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-08-01 16:39 - 2014-08-01 16:37 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2014-08-01 16:39 - 2014-08-01 16:37 - 00000000 ____D () C:\Windows\WindowsMobile
2014-08-01 16:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-01 16:38 - 2014-08-01 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-08-01 13:03 - 2014-08-01 13:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-01 11:53 - 2014-08-01 11:53 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Macromedia
2014-08-01 11:52 - 2014-05-18 21:12 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-08-01 11:52 - 2014-05-18 21:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-08-01 10:41 - 2014-08-01 10:35 - 55880192 _____ () C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager [1].exe
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\MSDOS.SYS
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\IO.SYS
2014-08-01 10:33 - 2014-08-01 10:33 - 00787392 _____ ( ) C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:25 - 2014-08-01 10:25 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-01 09:44 - 2014-08-01 09:44 - 00002232 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00001157 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-01 09:44 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-08-01 09:44 - 2014-08-01 09:40 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-08-01 09:39 - 2014-08-01 09:38 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\Wünsche\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe
2014-08-01 01:16 - 2014-08-13 13:51 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-28 19:34 - 2014-05-18 18:36 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\HpUpdate
2014-07-25 16:01 - 2014-08-13 10:56 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll
2014-07-25 16:01 - 2014-08-13 10:56 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-07-25 15:51 - 2014-08-13 13:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:04 - 2014-08-13 13:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 15:03 - 2014-08-13 13:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 14:34 - 2014-08-13 13:51 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 14:34 - 2014-08-13 13:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 14:33 - 2014-08-13 13:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-13 13:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:21 - 2014-08-13 13:51 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 14:18 - 2014-08-13 13:51 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 14:17 - 2014-08-13 13:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 14:12 - 2014-08-13 13:51 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 14:10 - 2014-08-13 13:51 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 14:10 - 2014-08-13 13:51 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:08 - 2014-08-13 13:51 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:06 - 2014-08-13 13:51 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 13:59 - 2014-08-13 13:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 13:52 - 2014-08-13 13:51 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 13:43 - 2014-08-13 13:51 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 13:36 - 2014-08-13 13:51 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 13:34 - 2014-08-13 13:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 13:29 - 2014-08-13 13:51 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 13:13 - 2014-08-13 13:51 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:09 - 2014-08-13 13:51 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:07 - 2014-08-13 13:51 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:07 - 2014-08-13 13:51 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-13 13:51 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 12:09 - 2014-08-13 13:51 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:05 - 2014-08-13 13:51 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:00 - 2014-08-13 13:51 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-23 11:58 - 2009-07-14 06:53 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Wünsche\AppData\Local\Temp\install_reader11_de_gtbd_chrd_dn_aaa_aih.exe
C:\Users\Wünsche\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Wünsche\AppData\Local\Temp\nvStInst.exe
C:\Users\Wünsche\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Wünsche\AppData\Local\Temp\Quarantine.exe
C:\Users\Wünsche\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-18 15:59

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version:21-08-2014
Ran by Wünsche at 2014-08-22 17:10:38
Running from C:\Users\Wünsche\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Advanced Disk Recovery (HKLM\...\{2AA44AF4-C116-4219-B800-4573E7E6D421}_is1) (Version: 2.5.500.15827 - Systweak Software)
AION Free-to-Play (HKLM\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version:  - Gameforge)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2021 - AVAST Software)
Bing Bar (HKLM\...\{A7E8CB11-B09E-46F8-9BAE-B2E01EBF7E51}) (Version: 7.0.831.0 - Microsoft Corporation)
Free YouTube to MP3 Converter version 3.12.42.716 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.42.716 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.4 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.4 - Gameforge)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
HP Deskjet 2510 series - Grundlegende Software für das Gerät (HKLM\...\{AEE763B1-34D4-494E-920C-12BCD8A9E76B}) (Version: 27.0.847.0 - Hewlett-Packard Co.)
HP Deskjet 2510 series Hilfe (HKLM\...\{07B48D2C-E60D-41E6-B546-11D128F633EC}) (Version: 27.0.0 - Hewlett Packard)
HP Deskjet 2510 series Setup Guide (HKLM\...\{216C7F38-4BBC-4E9A-8392-C9FA21B54386}) (Version: 27.0.0 - Hewlett Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.3341 - HP Photo Creations Powered by RocketLife)
HP Update (HKLM\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 de) (HKLM\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 8 Essentials (HKLM\...\{F0AAE3C5-D70C-4F3C-8B6A-EC3992921031}) (Version: 8.3.91 - Nero AG)
neroxml (Version: 1.0.0 - Nero AG) Hidden
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden
NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PC Cleaner (HKLM\...\{25780A42-8553-4a2e-AA54-F413C5D8DA19}_is1) (Version: 2.1.1000.510 - Systweak Software)
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Studie zur Verbesserung von HP Deskjet 2510 series Produkten (HKLM\...\{2FB7589D-C95C-4315-BFDF-1EAF75786877}) (Version: 27.0.847.0 - Hewlett-Packard Co.)
Systweak Support Dock (HKLM\...\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1) (Version: 1.2.100.15940 - Systweak Software)
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
Windows Mobile-Gerätecenter (HKLM\...\{904CCF62-818D-4675-BC76-D37EB399F917}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR 5.10 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
YTD Video Downloader 4.8.1 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.1 - GreenTree Applications SRL)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

05-08-2014 10:06:57 Windows Update
05-08-2014 19:35:01 DirectX wurde installiert
09-08-2014 13:31:06 Windows Update
13-08-2014 08:56:53 DirectX wurde installiert
13-08-2014 18:07:30 Windows Update
20-08-2014 05:29:29 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {3EA6D578-1CDD-470E-8CCE-DF983C484410} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-07-04] (Google Inc.)
Task: {70D0F367-C1E2-4FD9-9A3C-558FFAA05AB9} - System32\Tasks\HPCustParticipation HP Deskjet 2510 series => C:\Program Files\HP\HP Deskjet 2510 series\Bin\HPCustPartic.exe [2012-01-31] (Hewlett-Packard Co.)
Task: {7DD0A358-8B45-439A-9FAD-A24A65E307AF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-01] (Adobe Systems Incorporated)
Task: {95CD02EB-17EC-429A-BF70-9D98D2601E9A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-07-04] (Google Inc.)
Task: {BAD43DD8-9B2D-40DD-A3B5-E52FD588A2EE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-04] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-07-04 18:11 - 2014-07-04 18:11 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-08-21 15:41 - 2014-08-21 15:41 - 02800128 _____ () C:\Program Files\AVAST Software\Avast\defs\14082100\algo.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00107992 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-07-04 18:11 - 2014-07-04 18:11 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 00718152 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libglesv2.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\libegl.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 08537928 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\pdf.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 00353096 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll
2014-08-15 23:33 - 2014-08-07 05:20 - 01732936 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.143\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Pentium(R) Dual-Core CPU E5200 @ 2.50GHz
Percentage of memory in use: 53%
Total physical RAM: 2046.49 MB
Available physical RAM: 954.48 MB
Total Pagefile: 4092.98 MB
Available Pagefile: 2800.87 MB
Total Virtual: 2047.88 MB
Available Virtual: 1912.41 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:292.87 GB) (Free:260.09 GB) NTFS
Drive d: () (Fixed) (Total:172.69 GB) (Free:144.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E1B9E1B9)
Partition 1: (Not Active) - (Size=172.7 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=292.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Bei JRT konnte ich leider nicht das avast Free Antivirus ausschalten da ich unten rechts in der Symbolleiste keine Anzeige mehr fand wo das dann möglich gewesen wäre...Komplikationen gab es keine...

Liebe Grüße...Rico

Geändert von sisley24m (22.08.2014 um 16:24 Uhr)

Alt 22.08.2014, 16:35   #6
M-K-D-B
/// TB-Ausbilder
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 3 h) dauern.
Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg.




Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
HKLM\...\Run: [] => [X]
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.






Schritt 2

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset







Schritt 3
Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.





Schritt 4
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

    Code:
    ATTFilter
    :folderfind
*Systweak*
*mindspark*
*RegClean Pro*
*Advanced System Protector*
*MyPC Backup*
*SearchProtect*

:regfind
Systweak
mindspark
RegClean Pro
Advanced System Protector
MyPC Backup
SearchProtect
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.







Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die Logdatei von ESET,
  • die Logdatei von SecurityCheck,
  • die Logdatei von SystemLook.
Alt 22.08.2014, 19:56   #7
sisley24m
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:21-08-2014
Ran by Wünsche at 2014-08-22 19:13:50 Run:1
Running from C:\Users\Wünsche\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
HKLM\...\Run: [] => [X]
EmptyTemp:
end
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
EmptyTemp: => Removed 3.2 GB temporary data.


The system needed a reboot. 

==== End of Fixlog ====
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=73cc829fd11c2345bdfc1f74f540acc6
# engine=19787
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-22 06:01:43
# local_time=2014-08-22 08:01:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 95 204270 8308611 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 15218 160361694 0 0
# scanned=93074
# found=17
# cleaned=0
# scan_time=1890
sh=29537B5D9E0B9006067890E1D21D0CE6F22E8A99 ft=1 fh=6e7ef67f604e413f vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\RegClean Pro\Cloud_Backup_Setup.exe.vir"
sh=EE0DBC090D6FC9DA0D0A84516D8D34BF1F96E196 ft=1 fh=44b5db033c27eea0 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\RegClean Pro\Cloud_Backup_Setup_Intl.exe.vir"
sh=4F2D43FFB1775DFE2101529769637B9741E2D473 ft=1 fh=7bf72ba7e7e381f9 vn="MSIL/AdvancedSystemProtector.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\RegClean Pro\systweakasp.exe.vir"
sh=A5E3F508640EDB634C378CBF054CFED5D31EB6EB ft=1 fh=6cbbb63b96e95196 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\Main\bin\CltMngSvc.exe.vir"
sh=F13E89EB4B266266C781D119EF61D43A531F572E ft=1 fh=f4753109fd425d5c vn="möglicherweise Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\Main\bin\SPTool.dll.vir"
sh=0BFCC57D92BE5D592F192715663B5881583DCD91 ft=1 fh=c33b19cfb5833110 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\Main\bin\uninstall.exe.vir"
sh=3A63F35D807A4ED2C989AF70D56EDA4701471AEA ft=1 fh=c78bba67b6b31d5a vn="Variante von Win32/Conduit.SearchProtect.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe.vir"
sh=21FEF8C9149B513AEEEB01B07F889431DCD9882B ft=1 fh=514ee34223cecbba vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPTool64.exe.vir"
sh=E98350C0EC8B68DD5E2EFF54D0696B17F42B49AA ft=1 fh=ae7c022d12f5796d vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC32.dll.vir"
sh=F9D5F9CF729BB78318192DABD07C1B79FAC5E725 ft=1 fh=d760b971a4102f06 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll.vir"
sh=E56BC0B5E1977186872B6C7846EBD2A87325894B ft=1 fh=950fcdea9c93786f vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC64.dll.vir"
sh=AF4D8A8F8DD7AA9E49B6E90D3E423000D7E4EDAD ft=1 fh=81c1049b16b8ad1c vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC64Loader.dll.vir"
sh=715FA29CBC677B258DD56EA5D48F74C84B7F0ED3 ft=1 fh=c10597f15a4a7053 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\UI\bin\cltmngui.exe.vir"
sh=52EEE40B0588612547F2F738D6000CF31B86C5DB ft=1 fh=f475e099be04b19b vn="Win32/Systweak.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Systweak Support Dock\amazoninstallerstub.exe.vir"
sh=119E149747A552877117A6D91EFD3BE4B26418AE ft=1 fh=d60c8402287380a1 vn="Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wünsche\AppData\Roaming\OpenCandy\379889BDE25644B28B243B31A2C99708\sp-downloader.exe.vir"
sh=860053958513635A1EE1F6EB5C9BBE9BF080F2C3 ft=1 fh=c71c00118bdf1a27 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Wünsche\AppData\Roaming\OpenCandy\A6B8E0073BC64AE7BC8DD48948B57A6D\OptimizerPro.exe.vir"
sh=969D1114D1E94D3434554C5B3EA3297F60114788 ft=1 fh=74bc3bfe74f37546 vn="Variante von Win32/InstallCore.OZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe"
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.87  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 PC Cleaner    
 Adobe Flash Player 	14.0.0.145  
 Adobe Reader XI  
 Mozilla Firefox (31.0) 
 Google Chrome 36.0.1985.125  
 Google Chrome 36.0.1985.143  
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast avastui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
Code:
ATTFilter
SystemLook 30.07.11 by jpshortstuff
Log created at 20:52 on 22/08/2014 by Wünsche
Administrator - Elevation successful

========== folderfind ==========

Searching for "*Systweak*"
C:\AdwCleaner\Quarantine\C\Program Files\Systweak Support Dock	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\Systweak Support Dock	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\Users\Wünsche\AppData\Roaming\Systweak	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\Users\Wünsche\AppData\Roaming\Systweak\Systweak Support Dock	d------	[12:04 22/08/2014]
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_SystweakDock.exe_760863e47f4b7197bc88ffc77079132357445e_0f0d8c47	d----c-	[17:34 18/05/2014]
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_SystweakDock.exe_760863e47f4b7197bc88ffc77079132357445e_0f0d8c47	d----c-	[17:34 18/05/2014]

Searching for "*mindspark*"
No folders found.

Searching for "*RegClean Pro*"
C:\AdwCleaner\Quarantine\C\Program Files\RegClean Pro	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\Users\Wünsche\AppData\Roaming\Systweak\RegClean Pro	d------	[12:04 22/08/2014]

Searching for "*Advanced System Protector*"
No folders found.

Searching for "*MyPC Backup*"
C:\AdwCleaner\Quarantine\C\Program Files\MyPC Backup	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup	d------	[12:04 22/08/2014]

Searching for "*SearchProtect*"
C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\Program Files\SearchProtect\SearchProtect	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\Users\Wünsche\AppData\Local\SearchProtect	d------	[12:04 22/08/2014]
C:\AdwCleaner\Quarantine\C\Users\Wünsche\AppData\Local\SearchProtect\SearchProtect	d------	[12:04 22/08/2014]

========== regfind ==========

Searching for "Systweak"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{25780A42-8553-4a2e-AA54-F413C5D8DA19}_is1]
"Publisher"="Systweak Software"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{25780A42-8553-4a2e-AA54-F413C5D8DA19}_is1]
"URLInfoAbout"="hxxp://www.systweak.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{25780A42-8553-4a2e-AA54-F413C5D8DA19}_is1]
"HelpLink"="hxxp://www.systweak.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{25780A42-8553-4a2e-AA54-F413C5D8DA19}_is1]
"URLUpdateInfo"="hxxp://www.systweak.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"Inno Setup: App Path"="C:\Program Files\Systweak Support Dock"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"InstallLocation"="C:\Program Files\Systweak Support Dock\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"Inno Setup: Icon Group"="Systweak Support Dock"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"DisplayName"="Systweak Support Dock"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"DisplayIcon"="C:\Program Files\Systweak Support Dock\SystweakDock.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"UninstallString"=""C:\Program Files\Systweak Support Dock\unins000.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"QuietUninstallString"=""C:\Program Files\Systweak Support Dock\unins000.exe" /SILENT"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"Publisher"="Systweak Software"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"URLInfoAbout"="hxxp://www.systweak.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"HelpLink"="hxxp://www.systweak.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1]
"URLUpdateInfo"="hxxp://www.systweak.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2AA44AF4-C116-4219-B800-4573E7E6D421}_is1]
"Publisher"="Systweak Software"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2AA44AF4-C116-4219-B800-4573E7E6D421}_is1]
"URLInfoAbout"="hxxp://www.systweak.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2AA44AF4-C116-4219-B800-4573E7E6D421}_is1]
"HelpLink"="hxxp://www.systweak.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2AA44AF4-C116-4219-B800-4573E7E6D421}_is1]
"URLUpdateInfo"="hxxp://www.systweak.com/"

Searching for "mindspark"
No data found.

Searching for "RegClean Pro"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\4d05abce_0]
@="{0.0.0.00000000}.{170f8805-3b45-4a16-8714-988b30265160}|\Device\HarddiskVolume3\Program Files\RegClean Pro\RegCleanPro.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-813962834-3573142917-1844992356-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\4d05abce_0]
@="{0.0.0.00000000}.{170f8805-3b45-4a16-8714-988b30265160}|\Device\HarddiskVolume3\Program Files\RegClean Pro\RegCleanPro.exe%b{00000000-0000-0000-0000-000000000000}"

Searching for "Advanced System Protector"
No data found.

Searching for "MyPC Backup"
No data found.

Searching for "SearchProtect"
No data found.

-= EOF =-
Liebe Grüße...Rico

Alt 23.08.2014, 08:37   #8
M-K-D-B
/// TB-Ausbilder
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{25780A42-8553-4a2e-AA54-F413C5D8DA19}_is1
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{266DBE1C-B640-46ee-9A6D-86F0A1E483B9}_is1
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2AA44AF4-C116-4219-B800-4573E7E6D421}_is1
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.









Hinweis: Registry Cleaner

Ich sehe, dass du sogenannte Registry Cleaner installiert hast.
In deinem Fall PC Cleaner.

Wir raten von der Verwendung jeglicher Art von Registry Cleaner ab.

Der Grund ist ganz einfach:
Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Man sollte nicht unnötigerweise an der Registry rumbasteln. Schon ein kleiner Fehler kann gravierende Folgen haben und auch Programme machen manchmal Fehler.
Zerstörst du die Registry, zerstörst du Windows.

Zudem ist der Nutzen zur Performancesteigerung umstritten und meist kaum im wahrnehmbaren Bereich.

Ich würde dir empfehlen, Registry Cleaner nicht weiterhin zu verwenden und über
Start --> Systemsteuerung --> Software (bei Windows XP)
Start --> Systemsteuerung --> Programme und Funktionen (bei Vista / Win 7)
zu deinstallieren.







Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.




Schritt 1
Du verwendest veraltete Software auf deinem Rechner, was ein Sicherheitsrisiko darstellt. Daher solltest du veraltete Software deinstallieren und anschließend die aktuellste Version installieren.
Folge dem Pfad Start > Systemsteuerung > Sofware / Programme deinstallieren.
Deinstalliere die folgenden Programme von deinem Rechner:
  • Adobe Flash Player
Starte deinen Rechner nach der Deinstallation neu auf.
Downloade und installiere dir bitte nun:Starte deinen Rechner nach der Installation neu auf.





Schritt 2
Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.







Schritt 3
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.


Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti-Viren-Programm und zusätzlicher Schutz
  • Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist! Ein kostenloses Anti-Viren Programm, das wir empfehlen, wäre z. B. Avast! Free Antivirus oder Microsoft Security Essentials.
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt. Du kannst es zusätzlich zu deinem Anti-Viren Programm verwenden.
    Update das Tool und lasse es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • AdwCleaner
    Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwünschten Programmen (PUPs).
    Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt von der Herstellerseite auf den Desktop herunterladen. Auch dieses Programm kann parallel zu deinem Anti-Viren Programm verwendet werden.
  • SpywareBlaster
    Eine kurze Einführung findest du Hier


Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
    Es spart außerdem Downloadkapazität.


Performance
  • Halte dich fern von Registry Cleanern.
    Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
    Miekemoes Blogspot ( MVP )


Was du vermeiden solltest:
  • Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
  • Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..).
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
  • Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!



Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Alt 23.08.2014, 10:24   #9
sisley24m
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Hallo Matthias...

Ich habe einen Fehler gemacht...Nachdem die Fixlog.txt von FRST erstellt wurde habe ich sie nicht gleich gepostet sondern die Schritte 1 und 2 weiter abgearbeitet...Jetzt hat DelFix die Logdatei gelöscht...Soll ich den Schritt mit FRST noch einmal wiederholen?

Liebe Grüße...Rico

Achso...Bei Schritt 1 ist PC Cleaner nicht mehr vorhanden gewesen bei Systemsteuerung/Programme deinstallieren...

Alt 23.08.2014, 12:36   #10
M-K-D-B
/// TB-Ausbilder
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


FRST brauchst du nicht mehr wiederholen, sollte so passen.


Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

Antwort

Themen zu Windows 7: Rechner lahmt durch Systweak und Co.
administrator, bingbar, conduit.search, conduit.search entfernen, dvdvideosoft ltd., flash player, langsam, msil/advancedsystemprotector.d, pup.optional.amazontb.a, pup.optional.conduit.a, pup.optional.extutil.a, pup.optional.managera.a, pup.optional.regcleanpro, pup.optional.searchprotect.a, pup.optional.spigot, pup.optional.verti, services.exe, svchost.exe, win32/adware.speedingupmypc.n, win32/clientconnect.a, win32/conduit.searchprotect.h, win32/conduit.searchprotect.i, win32/conduit.searchprotect.n, win32/installcore.oz, win32/mypcbackup.a, win32/systweak.g, winlogon.exe


« YahooSearch and Trovi Search | AntiVir durch Gruppenrichtlinie blockiert + Downloads werden gestartet »


Ähnliche Themen: Windows 7: Rechner lahmt durch Systweak und Co.


  1. Rechner lahmt kann wer was finden?
    Log-Analyse und Auswertung - 20.04.2015 (3)
  2. xp rechner lahmt zu sehr für einen P4 mit 3.2 ghz
    Log-Analyse und Auswertung - 13.01.2015 (7)
  3. systweak.com öffnet sich in Firefox und langsamer Rechner
    Plagegeister aller Art und deren Bekämpfung - 17.02.2014 (7)
  4. Systweak Pop Up, langsamer Rechner
    Plagegeister aller Art und deren Bekämpfung - 30.11.2013 (11)
  5. virus eingefangen durch Advanced System Projector von Systweak
    Plagegeister aller Art und deren Bekämpfung - 27.07.2013 (22)
  6. Win7/64 bit Rechner lahmt
    Alles rund um Windows - 02.02.2013 (10)
  7. Weiterleitung zu Gomeo u.a., Rechner lahmt, I-Net Verbindung lahmt -> Panik
    Plagegeister aller Art und deren Bekämpfung - 09.02.2011 (1)
  8. Rechner lahmt
    Mülltonne - 03.01.2009 (0)
  9. Rechner lahmt aber wieso?
    Log-Analyse und Auswertung - 14.11.2008 (1)
  10. Rechner lahmt - Bitte um Logfile-Prüfung
    Log-Analyse und Auswertung - 13.03.2008 (2)
  11. Rechner lahmt - Bitte um Logfile-Prüfung
    Mülltonne - 13.02.2008 (0)
  12. Computer lahmt - XP Balken läuft 35 mal durch...
    Log-Analyse und Auswertung - 07.02.2007 (4)
  13. Bearshare Lite und der Rechner lahmt
    Plagegeister aller Art und deren Bekämpfung - 02.08.2006 (6)
  14. Rechner lahmt
    Plagegeister aller Art und deren Bekämpfung - 31.05.2006 (1)
  15. Rechner von Schwester lahmt!
    Mülltonne - 27.05.2006 (2)
  16. Rechner lahmt
    Plagegeister aller Art und deren Bekämpfung - 26.07.2005 (2)
  17. rechner lahmt
    Log-Analyse und Auswertung - 26.01.2005 (8)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 7: Rechner lahmt durch Systweak und Co. - Hallo ihr lieben Leute von trojaner-board.de... Ich bin gerade bei meinen Eltern zu Besuch und habe bemerkt das der Rechner von ihnen ziemlich langsam arbeitet so wie das booten sehr - Windows 7: Rechner lahmt durch Systweak und Co....
Archiv
Du betrachtest: Windows 7: Rechner lahmt durch Systweak und Co. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55