![]() |
|
Plagegeister aller Art und deren Bekämpfung: Windows 7: Avast meldet URL:MalWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #12 |
![]() | ![]() Windows 7: Avast meldet URL:MalCode:
ATTFilter # AdwCleaner v3.310 - Bericht erstellt am 24/09/2014 um 22:43:40 # Aktualisiert 12/09/2014 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) # Benutzername : freddykrueger - FREDDYKRUEGER88 # Gestartet von : C:\Users\freddykrueger\Desktop\AdwCleaner_3.310 (1).exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio ***** [ Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\Softonic ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17280 -\\ Mozilla Firefox v32.0.2 (x86 de) [ Datei : C:\Users\freddykrueger\AppData\Roaming\Mozilla\Firefox\Profiles\eir7hdjn.default\prefs.js ] -\\ Google Chrome v37.0.2062.120 [ Datei : C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht [Search Provider] : hxxp://www.anisearch.com/anime/index/?char=all&sort=rank&q=true&text={searchTerms} Gelöscht [Search Provider] : hxxp://start.iminent.com/?appId=4752880D-CAB4-40EC-8D23-71BF4804C064&ref=toolbox&q={searchTerms} Gelöscht [Search Provider] : hxxp://www.anisearch.com/anime/index/?char=all&sort=rank&q=true&text={searchTerms} Gelöscht [Search Provider] : hxxp://www.istartsurf.com/web/?type=ds&ts=1408557730&from=smt&uid=SAMSUNGXSSDX830XSeries_S0XYNEAC640617&q={searchTerms} Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms} Gelöscht [Search Provider] : hxxp://www.istartsurf.com/web/?type=ds&ts=1408557730&from=smt&uid=SAMSUNGXSSDX830XSeries_S0XYNEAC640617&q={searchTerms} ************************* AdwCleaner[R0].txt - [16532 octets] - [21/10/2013 21:52:08] AdwCleaner[R1].txt - [2253 octets] - [24/12/2013 10:19:42] AdwCleaner[R2].txt - [7110 octets] - [23/09/2014 22:59:27] AdwCleaner[R3].txt - [2321 octets] - [24/09/2014 22:40:17] AdwCleaner[S0].txt - [15177 octets] - [21/10/2013 21:52:35] AdwCleaner[S1].txt - [2204 octets] - [24/12/2013 10:20:57] AdwCleaner[S2].txt - [6960 octets] - [23/09/2014 23:00:27] AdwCleaner[S3].txt - [2191 octets] - [24/09/2014 22:43:40] ########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [2251 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.2.0 (09.22.2014:1) OS: Windows 7 Ultimate x64 Ran by freddykrueger on 24.09.2014 at 22:48:49,85 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D39B16E9-0C76-43D9-BB69-0246C87F78D3} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F8205E88-7508-4397-8CB5-9181753D7C38} ~~~ Files Successfully deleted: [File] "C:\Users\freddykrueger\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage" Successfully deleted: [File] "C:\Users\freddykrueger\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage-journal" ~~~ Folders Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" ~~~ FireFox Emptied folder: C:\Users\freddykrueger\AppData\Roaming\mozilla\firefox\profiles\eir7hdjn.default\minidumps [12 files] ~~~ Chrome Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 24.09.2014 at 22:51:34,03 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2014 Ran by freddykrueger (administrator) on FREDDYKRUEGER88 on 24-09-2014 22:53:21 Running from C:\Users\freddykrueger\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) D:\Programme\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Apache Software Foundation) D:\Programme\open3A\apache\bin\apache.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Autodesk, Inc.) D:\Programme\Inventor\Inventor 2015\Moldflow\bin\mitsijm.exe () C:\Windows\SysWOW64\HsMgr.exe () C:\Windows\system\HsMgr64.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (CMedia) C:\Program Files\ASUS Xonar DGX Audio\Customapp\AsusAudioCenter.exe () D:\Programme\open3A\mysql\bin\mysqld-nt.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (SparkLabs) D:\Programme\Viscosity\ViscosityService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Apache Software Foundation) D:\Programme\open3A\apache\bin\apache.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Valve Corporation) D:\Programme\Steam\Steam.exe () D:\Programme\Rainlendar2\Rainlendar2.exe (Overwolf LTD) D:\Programme\Overwolf\Overwolf.exe () C:\Users\freddykrueger\AppData\Roaming\ACEStream\engine\ace_engine.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe () C:\Users\freddykrueger\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (Apple Inc.) D:\Programme\iCloud\iCloudServices.exe (Apple Inc.) D:\Programme\iCloud\ApplePhotoStreams.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (AVAST Software) D:\Programme\Avast\AvastUI.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Apple Inc.) D:\Programme\Itunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (TeamSpeak Systems GmbH) D:\Programme\Teamspeak 3\ts3client_win64.exe (Autodesk Inc.) C:\Users\freddykrueger\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe (Apple Inc.) D:\Programme\iCloud\APSDaemon.exe (Valve Corporation) D:\Programme\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe () C:\Users\freddykrueger\AppData\Roaming\ACEStream\updater\ace_update.exe (Overwolf LTD) D:\Programme\Overwolf\0.80.20.0\OverwolfTSHelper.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.80.20.0\OverwolfHelper.exe () D:\Programme\Overwolf\0.80.20.0\OverwolfBrowser.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.80.20.0\OverwolfHelper64.exe (Overwolf LTD) D:\Programme\Overwolf\0.80.20.0\Purplizer\Purplizer.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe () D:\Programme\Overwolf\0.80.20.0\OverwolfBrowser.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\freddykrueger\Desktop\FRST64 (1).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Cmaudio8788] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd HKLM\...\Run: [Cmaudio8788GX] => C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] () HKLM\...\Run: [Cmaudio8788GX64] => C:\Windows\system\HsMgr64.exe [282112 2008-07-11] () HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.) HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403288 2014-08-09] (NVIDIA Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10801944 2014-07-28] (Logitech Inc.) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation) HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\Avast\AvastUI.exe [4085896 2014-08-22] (AVAST Software) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [iTunesHelper] => D:\Programme\Itunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [488328 2014-06-21] (Autodesk Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [Steam] => D:\Programme\Steam\steam.exe [1939136 2014-08-28] (Valve Corporation) HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [Rainlendar2] => D:\Programme\Rainlendar2\Rainlendar2.exe [2611808 2014-03-16] () HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [Overwolf] => D:\Programme\Overwolf\Overwolf.exe [39712 2014-09-21] (Overwolf LTD) HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [AceStream] => C:\Users\freddykrueger\AppData\Roaming\ACEStream\engine\ace_engine.exe [27904 2014-09-14] () HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\freddykrueger\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] () HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [iCloudServices] => D:\Programme\iCloud\iCloudServices.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [ApplePhotoStreams] => D:\Programme\iCloud\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [DAEMON Tools Lite] => D:\Programme\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-668898273-2044096128-2289699793-1000\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-02-19] (Autodesk, Inc.) HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-02-19] (Autodesk, Inc.) AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TeamSpeak 3 Client.lnk ShortcutTarget: TeamSpeak 3 Client.lnk -> D:\Programme\Teamspeak 3\ts3client_win64.exe (TeamSpeak Systems GmbH) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShA64.dll (AVAST Software) ShellIconOverlayIdentifiers: AutoCAD Digital Signatures Icon Overlay Handler -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: http=127.0.0.1:8555;https=127.0.0.1:8555 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3E22DDA01D96CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKCU - {80338CC0-6C8B-45B7-911F-424DFFD34FD9} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10557 BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Programme\Java\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Programme\Java\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\freddykrueger\AppData\Roaming\Mozilla\Firefox\Profiles\eir7hdjn.default FF SearchEngineOrder.1: Yahoo! (Avast) FF Keyword.URL: https://de.search.yahoo.com/yhs/search FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 -> D:\Programme\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> D:\Programme\Java\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> D:\Programme\Itunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> D:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> D:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @live.heroesandgenerals.com/npretox -> D:\Spiele\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll (Reto-Moto ApS) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @veetle.com/vbp;version=0.9.18 -> D:\Programme\Veetle\VLCBroadcast\npvbp.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.19 -> D:\Programme\Veetle\plugins\npVeetle.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 -> D:\Programme\Veetle\Player\npvlc.dll (Veetle Inc) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> D:\Programme\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> D:\Programme\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> D:\Programme\VLC\npvlc.dll (VideoLAN) FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.1.5.3 -> C:\Users\freddykrueger\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\freddykrueger\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Users\freddykrueger\AppData\Roaming\Mozilla\Firefox\Profiles\eir7hdjn.default\searchplugins\yahoo-avast.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\Avast\WebRep\FF FF Extension: avast! Online Security - D:\Programme\Avast\WebRep\FF [2013-08-11] FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\freddykrueger\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org Chrome: ======= CHR Profile: C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-09-05] CHR Extension: (Google Slides) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-05] CHR Extension: (Xmarks Bookmark Sync) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2014-09-18] CHR Extension: (Google Docs) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-05] CHR Extension: (Google Drive) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-05] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05] CHR Extension: (YouTube) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-05] CHR Extension: (Google Search) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-05] CHR Extension: (CHIP Download Adventskalender 2013) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\eieokkbmdedgencncfbagbcapghlakcg [2014-09-05] CHR Extension: (busuu.com) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\epadnjldocmkadjbopkanclaamocokoo [2014-09-05] CHR Extension: (My JDownloader) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2014-09-05] CHR Extension: (UNO HD) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbiocfeggkcomnebamodmbngedojipdp [2014-09-18] CHR Extension: (ZenMate) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2014-09-05] CHR Extension: (Google Sheets) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-05] CHR Extension: (Heroes & Generals) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbophcdhblbipoaacgchllkobdaolpge [2014-09-05] CHR Extension: (HTTPS Everywhere) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2014-09-05] CHR Extension: (AdBlock) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-05] CHR Extension: (avast! Online Security) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-05] CHR Extension: (TweetDeck by Twitter) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2014-09-05] CHR Extension: (LastPass: Free Password Manager) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-09-05] CHR Extension: (eBay Extension for Google Chrome™) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2014-09-20] CHR Extension: (No Name) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2014-09-24] CHR Extension: (Need for Speed World) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnnelgnkomjdakpkjpkfehdipjifjmbk [2014-09-05] CHR Extension: (Google Wallet) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-05] CHR Extension: (NotScripts) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2014-09-05] CHR Extension: (ТВ онлайн) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcfeebemepipakkhapnhljbcdkagkloh [2014-09-18] CHR Extension: (Gmail) - C:\Users\freddykrueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-05] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-22] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [596360 2014-06-21] (Autodesk Inc.) R2 Apache2.2; D:\Programme\open3A\apache\bin\apache.exe [17408 2012-05-23] (Apache Software Foundation) [File not signed] R2 avast! Antivirus; D:\Programme\Avast\AvastSvc.exe [50344 2014-08-22] (AVAST Software) S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-08-28] (BitRaider, LLC) R2 mitsijm2015; D:\Programme\Inventor\Inventor 2015\Moldflow\bin\mitsijm.exe [968480 2013-10-12] (Autodesk, Inc.) R2 mysql; D:\Programme\open3A\mysql\bin\my.cnf [5407 2013-11-20] () [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720792 2014-08-09] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18973144 2014-08-09] (NVIDIA Corporation) S3 OverwolfUpdater; D:\Programme\Overwolf\OverwolfUpdater.exe [998176 2014-09-21] (Overwolf LTD) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-14] () R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 ViscosityService; D:\Programme\Viscosity\ViscosityService.exe [54048 2014-06-06] (SparkLabs) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology) R3 AsrVDrive; C:\Windows\System32\DRIVERS\AsrVDrive.sys [23048 2011-01-26] (ASRock Inc.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-08-22] () R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-08-22] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-08-22] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-08-22] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-08-22] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-22] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-08-22] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-08-22] () S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-08-28] (BitRaider) R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2734080 2013-04-11] (C-Media Inc) R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2013-11-13] (AnchorFree Inc.) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-11-19] (Intel Corporation) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20440 2014-08-09] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-11-08] (Duplex Secure Ltd.) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-09-17] (Anchorfree Inc.) S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2014-05-06] (Spotflux, Inc.) S3 visctap0901; C:\Windows\System32\DRIVERS\visctap0901.sys [39048 2014-06-06] (The OpenVPN Project) U3 as36nulc; C:\Windows\System32\Drivers\as36nulc.sys [0 ] (Intel Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-24 22:53 - 2014-09-24 22:53 - 00028844 _____ () C:\Users\freddykrueger\Desktop\FRST.txt 2014-09-24 22:52 - 2014-09-24 22:52 - 02106880 _____ (Farbar) C:\Users\freddykrueger\Desktop\FRST64 (1).exe 2014-09-24 22:51 - 2014-09-24 22:51 - 00001569 _____ () C:\Users\freddykrueger\Desktop\JRT.txt 2014-09-24 22:48 - 2014-09-24 22:48 - 01024790 _____ (Thisisu) C:\Users\freddykrueger\Desktop\JRT.exe 2014-09-24 22:48 - 2014-09-24 22:48 - 00000000 ____D () C:\Windows\ERUNT 2014-09-24 22:47 - 2014-09-24 22:51 - 00000000 ____D () C:\Users\freddykrueger\Desktop\24092014 2014-09-24 22:37 - 2014-09-24 22:37 - 01373475 _____ () C:\Users\freddykrueger\Desktop\AdwCleaner_3.310 (1).exe 2014-09-24 22:30 - 2014-09-24 22:30 - 00032333 _____ () C:\ComboFix.txt 2014-09-24 22:22 - 2014-09-24 22:30 - 00000000 ____D () C:\ComboFix 2014-09-24 22:22 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-09-24 22:22 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-09-24 22:22 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-09-24 22:22 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-09-24 22:22 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-09-24 22:22 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-09-24 22:22 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-09-24 22:22 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-09-24 22:21 - 2014-09-24 22:30 - 00000000 ____D () C:\Qoobox 2014-09-24 22:21 - 2014-09-24 22:29 - 00000000 ____D () C:\Windows\erdnt 2014-09-24 22:11 - 2014-09-24 22:11 - 05579290 ____R (Swearware) C:\Users\freddykrueger\Desktop\ComboFix.exe 2014-09-24 22:00 - 2014-09-23 22:51 - 00562599 _____ () C:\Users\freddykrueger\Desktop\wrcBrokerx32.log 2014-09-24 22:00 - 2014-09-23 22:51 - 00084668 _____ () C:\Users\freddykrueger\Desktop\webRepx32.log 2014-09-24 20:05 - 2014-09-24 20:05 - 00064096 _____ () C:\Users\freddykrueger\Documents\ts3_clientui-win64-1407159763-2014-09-24 20_05_47.761008.dmp 2014-09-24 19:51 - 2014-09-24 19:51 - 00000680 _____ () C:\Users\freddykrueger\Desktop\EVEREST Ultimate Edition.lnk 2014-09-24 19:51 - 2014-09-24 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2014-09-24 19:50 - 2014-09-24 19:51 - 10255080 _____ (Lavalys, Inc. ) C:\Users\freddykrueger\Desktop\everestultimate550.exe 2014-09-24 19:49 - 2014-09-24 19:49 - 04179293 _____ (Lavalys, Inc. ) C:\Users\freddykrueger\Downloads\everesthome220.exe 2014-09-24 19:49 - 2014-09-24 19:49 - 00367800 _____ () C:\Users\freddykrueger\Downloads\SoftonicDownloader_for_everest-ultimate-edition.exe 2014-09-24 17:27 - 2014-09-24 17:27 - 00014283 _____ () C:\Users\freddykrueger\Desktop\avastlog.rar 2014-09-24 17:03 - 2014-09-24 17:03 - 00032866 _____ () C:\Users\freddykrueger\Downloads\Logs.zip 2014-09-24 16:44 - 2014-09-24 22:53 - 00000000 ____D () C:\FRST 2014-09-24 16:44 - 2014-09-24 17:01 - 00093453 _____ () C:\Users\freddykrueger\Downloads\Addition.txt 2014-09-24 16:44 - 2014-09-24 16:45 - 00065999 _____ () C:\Users\freddykrueger\Downloads\FRST.txt 2014-09-24 16:43 - 2014-09-24 16:43 - 02106880 _____ (Farbar) C:\Users\freddykrueger\Downloads\FRST64.exe 2014-09-24 16:30 - 2014-09-24 16:30 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-09-24 16:30 - 2014-09-24 16:30 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-09-24 16:30 - 2014-09-24 16:30 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-09-24 16:30 - 2014-09-24 16:30 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-09-24 16:29 - 2014-09-24 16:29 - 00918440 _____ (Oracle Corporation) C:\Users\freddykrueger\Downloads\chromeinstall-7u67.exe 2014-09-24 05:18 - 2014-09-24 05:18 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk 2014-09-24 05:18 - 2014-09-24 05:18 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 2014-09-24 05:16 - 2014-09-24 05:16 - 00000000 ____D () C:\Program Files\Java 2014-09-24 05:15 - 2014-09-24 05:18 - 00006563 _____ () C:\Windows\SecuniaPackage.log 2014-09-24 05:12 - 2014-09-24 05:12 - 05329480 _____ (Secunia) C:\Users\freddykrueger\Downloads\PSISetup_3.0.0.9016.exe 2014-09-24 05:12 - 2014-09-24 05:12 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2014-09-24 05:12 - 2014-09-24 05:12 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\Secunia PSI 2014-09-24 05:12 - 2014-09-24 05:12 - 00000000 ____D () C:\Program Files (x86)\Secunia 2014-09-24 05:11 - 2014-09-24 05:11 - 00000816 _____ () C:\Users\freddykrueger\Desktop\checkup.txt 2014-09-24 05:06 - 2014-09-24 05:06 - 00854417 _____ () C:\Users\freddykrueger\Downloads\SecurityCheck.exe 2014-09-23 23:06 - 2014-09-23 23:06 - 02347384 _____ (ESET) C:\Users\freddykrueger\Downloads\esetsmartinstaller_deu.exe 2014-09-23 22:59 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-09-23 22:55 - 2014-09-23 22:55 - 01373475 _____ () C:\Users\freddykrueger\Downloads\AdwCleaner_3.310.exe 2014-09-23 00:52 - 2014-09-23 00:52 - 00025593 _____ () C:\Users\freddykrueger\Downloads\full.ics 2014-09-22 05:20 - 2014-09-22 05:20 - 00000000 ____D () C:\Users\freddykrueger\Downloads\zbot_cs16 2014-09-22 04:34 - 2014-09-22 04:34 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed 2014-09-22 01:45 - 2014-09-22 01:45 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\.mono 2014-09-21 16:07 - 2014-09-21 16:08 - 06057862 _____ (Tim Kosse) C:\Users\freddykrueger\Downloads\FileZilla_3.9.0.5_win32-setup.exe 2014-09-21 16:07 - 2014-09-21 16:07 - 04996210 _____ (Tim Kosse) C:\Users\freddykrueger\Downloads\FileZilla_3.8.1_win32-setup.exe 2014-09-20 05:22 - 2014-09-20 05:22 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gamers.IRC 2014-09-20 04:58 - 2014-09-20 04:58 - 03907097 _____ () C:\Users\freddykrueger\Downloads\girc607.exe 2014-09-19 04:11 - 2014-09-19 04:11 - 00000000 _____ () C:\Users\freddykrueger\Desktop\Neues Textdokument (2).txt 2014-09-19 02:42 - 2014-09-19 02:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-18 00:05 - 2014-09-18 00:05 - 04021536 _____ (Marx Software ) C:\Users\freddykrueger\Downloads\IDMSetup.exe 2014-09-18 00:05 - 2014-09-18 00:05 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\IsolatedStorage 2014-09-18 00:05 - 2014-09-18 00:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iDevice Manager 2014-09-17 22:49 - 2014-09-18 03:34 - 00000000 ____D () C:\Users\freddykrueger\Downloads\EFT2.23.3 2014-09-17 20:51 - 2014-09-17 20:51 - 01306272 _____ (pendrivelinux.com) C:\Users\freddykrueger\Downloads\YUMI-2.0.0.9.exe 2014-09-17 20:15 - 2014-09-17 20:16 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\Apps\Windows 7 USB DVD Download Tool 2014-09-17 20:15 - 2014-09-17 20:15 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool 2014-09-16 15:46 - 2014-09-22 02:55 - 00000000 ____D () C:\Users\freddykrueger\Downloads\Faun - Luna (Deluxe Edition) - 2014 2014-09-16 15:37 - 2014-09-16 15:42 - 135114620 _____ () C:\Users\freddykrueger\Downloads\Kor99.rar 2014-09-16 15:37 - 2014-09-16 15:42 - 118191336 _____ () C:\Users\freddykrueger\Downloads\Kropardel2013.rar 2014-09-16 15:36 - 2014-09-16 15:43 - 190624500 _____ () C:\Users\freddykrueger\Downloads\Kor98.rar 2014-09-16 15:35 - 2014-09-16 15:37 - 115887598 _____ () C:\Users\freddykrueger\Downloads\Kor96.rar 2014-09-16 15:25 - 2014-09-16 15:35 - 172490739 _____ () C:\Users\freddykrueger\Downloads\Kor2010.rar 2014-09-16 15:25 - 2014-09-16 15:35 - 158888579 _____ () C:\Users\freddykrueger\Downloads\Kor94.rar 2014-09-16 15:25 - 2014-09-16 15:33 - 107122218 _____ () C:\Users\freddykrueger\Downloads\Kor2011.rar 2014-09-16 15:24 - 2014-09-16 15:35 - 177313514 _____ () C:\Users\freddykrueger\Downloads\Kor2005.rar 2014-09-16 15:24 - 2014-09-16 15:32 - 127887235 _____ () C:\Users\freddykrueger\Downloads\Kor2007.rar 2014-09-16 15:23 - 2014-09-16 15:30 - 156501661 _____ () C:\Users\freddykrueger\Downloads\Kor2002.rar 2014-09-12 03:06 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-12 03:06 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-12 03:06 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-12 03:06 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-12 03:06 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-12 03:06 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-12 03:06 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-12 03:06 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-12 03:06 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-12 03:06 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-12 03:06 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-12 03:06 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-12 03:06 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-12 03:06 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-12 03:06 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-12 03:06 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-12 03:06 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-12 03:06 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-12 03:06 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-12 03:06 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-12 03:06 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-09-12 03:06 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-12 03:06 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-12 03:06 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-12 03:06 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-12 03:06 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-09-12 03:06 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-09-12 03:06 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-12 03:06 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-12 03:06 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-12 03:06 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-12 03:06 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-12 03:06 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-12 03:06 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-09-12 03:06 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-12 03:06 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-09-12 03:06 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-12 03:06 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-12 03:06 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-12 03:06 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-12 03:06 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-09-12 03:06 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-09-12 03:06 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-12 03:06 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-12 03:06 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-12 03:06 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-12 03:06 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-12 03:06 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-12 03:06 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-12 03:06 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-12 03:06 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-09-12 03:06 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-12 03:06 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-12 03:06 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-12 03:06 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-12 03:06 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-09-12 03:00 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-12 03:00 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-09-12 01:14 - 2014-09-12 01:14 - 00039012 _____ () C:\Users\freddykrueger\Downloads\H1_marine_helmet_GARLAND.pdo 2014-09-12 01:11 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-12 01:11 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-09-12 01:10 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-12 01:10 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-12 01:10 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-12 01:10 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-12 01:10 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-09-12 01:10 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-09-12 01:10 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-09-12 01:10 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-12 01:10 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-09 04:39 - 2014-09-09 04:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-09-05 01:17 - 2014-09-13 02:03 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\EVEMon 2014-09-05 01:17 - 2014-09-05 01:17 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVEMon 2014-09-05 01:08 - 2014-09-05 01:08 - 00000000 ____D () C:\Users\freddykrueger\Downloads\EVE Mentat 1.2.26.1238 2014-09-05 01:07 - 2014-09-05 01:08 - 21926389 _____ () C:\Users\freddykrueger\Downloads\EVE Mentat 1.2.26.1238.zip 2014-09-04 13:56 - 2014-09-05 18:08 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\EveHQ 2014-09-04 13:56 - 2014-09-04 13:56 - 00000000 ____D () C:\Users\freddykrueger\Documents\EveHQ 2014-09-04 04:57 - 2014-09-04 04:57 - 00000649 _____ () C:\Users\freddykrueger\Desktop\EveHQ.lnk 2014-09-04 04:57 - 2014-09-04 04:57 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EveHQ 2014-09-03 23:15 - 2014-09-03 23:15 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-09-03 23:14 - 2014-09-03 23:14 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2014-09-03 23:14 - 2014-09-03 23:14 - 00000786 _____ () C:\Windows\LkmdfCoInst.log 2014-09-03 23:14 - 2014-09-03 23:14 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-09-03 23:13 - 2014-09-03 23:13 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Logitech 2014-09-03 23:13 - 2014-09-03 23:13 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Logishrd 2014-09-03 23:07 - 2014-09-03 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3 2014-08-31 06:25 - 2014-09-01 23:18 - 00013952 _____ () C:\Users\freddykrueger\Desktop\clickerHeroSave.txt 2014-08-30 04:42 - 2014-08-30 04:42 - 00000000 ____D () C:\Users\freddykrueger\Documents\EVE 2014-08-30 03:32 - 2014-08-30 03:32 - 00000656 _____ () C:\Users\freddykrueger\Desktop\EVE.lnk 2014-08-30 03:32 - 2014-08-30 03:32 - 00000049 _____ () C:\Windows\6620594 2014-08-30 03:32 - 2014-08-30 03:32 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE 2014-08-30 02:02 - 2014-08-30 02:02 - 00000362 _____ () C:\Users\Public\Desktop\Heroes & Generals spielen.lnk 2014-08-30 01:42 - 2014-08-30 01:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes & Generals 2014-08-30 01:42 - 2014-08-30 01:42 - 00000000 ____D () C:\Program Files (x86)\HeroesAndGenerals 2014-08-30 01:38 - 2014-08-30 01:38 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\CCP 2014-08-30 01:37 - 2014-08-30 01:37 - 00007227 _____ () C:\Users\freddykrueger\Documents\Uninstall STAR WARS The Old Republic.log 2014-08-28 15:01 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-28 15:01 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-28 15:01 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-28 05:00 - 2014-08-28 05:00 - 00003192 _____ () C:\Windows\System32\Tasks\{2FB19E7F-03F8-4F30-A1EE-72F6B6D0884A} 2014-08-28 04:17 - 2014-08-30 01:36 - 00000000 ____D () C:\ProgramData\BitRaider 2014-08-28 04:17 - 2014-08-28 04:17 - 00000000 ____D () C:\Users\Public\Documents\BitRaider 2014-08-28 04:17 - 2014-08-28 04:17 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\SWTORPerf 2014-08-28 04:10 - 2014-08-28 04:16 - 00017567 _____ () C:\Users\freddykrueger\Documents\Install STAR WARS The Old Republic.log 2014-08-28 04:06 - 2014-08-28 04:06 - 29720272 _____ () C:\Users\freddykrueger\Downloads\SWTOR_setup.exe 2014-08-27 02:51 - 2014-08-27 02:51 - 00000000 ____D () C:\Users\freddykrueger\Documents\PVZ Garden Warfare 2014-08-25 04:36 - 2014-08-25 04:38 - 00000000 ____D () C:\Users\freddykrueger\.LocalCooling ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-24 22:53 - 2014-09-24 22:53 - 00028844 _____ () C:\Users\freddykrueger\Desktop\FRST.txt 2014-09-24 22:53 - 2014-09-24 16:44 - 00000000 ____D () C:\FRST 2014-09-24 22:52 - 2014-09-24 22:52 - 02106880 _____ (Farbar) C:\Users\freddykrueger\Desktop\FRST64 (1).exe 2014-09-24 22:52 - 2013-08-26 18:02 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-24 22:52 - 2009-07-14 06:45 - 00022448 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-24 22:52 - 2009-07-14 06:45 - 00022448 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-24 22:51 - 2014-09-24 22:51 - 00001569 _____ () C:\Users\freddykrueger\Desktop\JRT.txt 2014-09-24 22:51 - 2014-09-24 22:47 - 00000000 ____D () C:\Users\freddykrueger\Desktop\24092014 2014-09-24 22:50 - 2009-07-14 19:58 - 00700244 _____ () C:\Windows\system32\perfh007.dat 2014-09-24 22:50 - 2009-07-14 19:58 - 00149882 _____ () C:\Windows\system32\perfc007.dat 2014-09-24 22:50 - 2009-07-14 07:13 - 01623194 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-24 22:48 - 2014-09-24 22:48 - 01024790 _____ (Thisisu) C:\Users\freddykrueger\Desktop\JRT.exe 2014-09-24 22:48 - 2014-09-24 22:48 - 00000000 ____D () C:\Windows\ERUNT 2014-09-24 22:46 - 2013-09-15 01:30 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\Purplizer 2014-09-24 22:46 - 2013-09-09 21:19 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\Overwolf 2014-09-24 22:46 - 2013-08-11 05:13 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\TS3Client 2014-09-24 22:46 - 2013-08-11 01:02 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-24 22:46 - 2013-08-11 00:37 - 01052225 _____ () C:\Windows\WindowsUpdate.log 2014-09-24 22:45 - 2013-09-04 00:03 - 00000000 ____D () C:\Users\freddykrueger\.rainlendar2 2014-09-24 22:44 - 2013-12-02 14:03 - 00140928 _____ () C:\Windows\PFRO.log 2014-09-24 22:44 - 2013-12-01 02:00 - 00066677 _____ () C:\Windows\setupact.log 2014-09-24 22:44 - 2013-08-11 01:07 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-09-24 22:44 - 2013-08-11 01:02 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-24 22:44 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-24 22:43 - 2013-10-21 21:52 - 00000000 ____D () C:\AdwCleaner 2014-09-24 22:37 - 2014-09-24 22:37 - 01373475 _____ () C:\Users\freddykrueger\Desktop\AdwCleaner_3.310 (1).exe 2014-09-24 22:30 - 2014-09-24 22:30 - 00032333 _____ () C:\ComboFix.txt 2014-09-24 22:30 - 2014-09-24 22:22 - 00000000 ____D () C:\ComboFix 2014-09-24 22:30 - 2014-09-24 22:21 - 00000000 ____D () C:\Qoobox 2014-09-24 22:30 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-09-24 22:29 - 2014-09-24 22:21 - 00000000 ____D () C:\Windows\erdnt 2014-09-24 22:29 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-09-24 22:11 - 2014-09-24 22:11 - 05579290 ____R (Swearware) C:\Users\freddykrueger\Desktop\ComboFix.exe 2014-09-24 20:05 - 2014-09-24 20:05 - 00064096 _____ () C:\Users\freddykrueger\Documents\ts3_clientui-win64-1407159763-2014-09-24 20_05_47.761008.dmp 2014-09-24 19:51 - 2014-09-24 19:51 - 00000680 _____ () C:\Users\freddykrueger\Desktop\EVEREST Ultimate Edition.lnk 2014-09-24 19:51 - 2014-09-24 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2014-09-24 19:51 - 2014-09-24 19:50 - 10255080 _____ (Lavalys, Inc. ) C:\Users\freddykrueger\Desktop\everestultimate550.exe 2014-09-24 19:49 - 2014-09-24 19:49 - 04179293 _____ (Lavalys, Inc. ) C:\Users\freddykrueger\Downloads\everesthome220.exe 2014-09-24 19:49 - 2014-09-24 19:49 - 00367800 _____ () C:\Users\freddykrueger\Downloads\SoftonicDownloader_for_everest-ultimate-edition.exe 2014-09-24 17:27 - 2014-09-24 17:27 - 00014283 _____ () C:\Users\freddykrueger\Desktop\avastlog.rar 2014-09-24 17:03 - 2014-09-24 17:03 - 00032866 _____ () C:\Users\freddykrueger\Downloads\Logs.zip 2014-09-24 17:01 - 2014-09-24 16:44 - 00093453 _____ () C:\Users\freddykrueger\Downloads\Addition.txt 2014-09-24 16:45 - 2014-09-24 16:44 - 00065999 _____ () C:\Users\freddykrueger\Downloads\FRST.txt 2014-09-24 16:43 - 2014-09-24 16:43 - 02106880 _____ (Farbar) C:\Users\freddykrueger\Downloads\FRST64.exe 2014-09-24 16:30 - 2014-09-24 16:30 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-09-24 16:30 - 2014-09-24 16:30 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-09-24 16:30 - 2014-09-24 16:30 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-09-24 16:30 - 2014-09-24 16:30 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-09-24 16:30 - 2014-05-20 03:38 - 00000000 ____D () C:\ProgramData\Oracle 2014-09-24 16:29 - 2014-09-24 16:29 - 00918440 _____ (Oracle Corporation) C:\Users\freddykrueger\Downloads\chromeinstall-7u67.exe 2014-09-24 14:09 - 2013-08-11 14:51 - 00004144 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-09-24 14:09 - 2013-08-11 01:02 - 00701328 _____ () C:\Users\freddykrueger\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-24 14:08 - 2009-07-14 06:45 - 06198912 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-24 05:22 - 2013-12-22 00:26 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\AIMP3 2014-09-24 05:18 - 2014-09-24 05:18 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk 2014-09-24 05:18 - 2014-09-24 05:18 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 2014-09-24 05:18 - 2014-09-24 05:15 - 00006563 _____ () C:\Windows\SecuniaPackage.log 2014-09-24 05:18 - 2013-09-02 14:55 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-09-24 05:16 - 2014-09-24 05:16 - 00000000 ____D () C:\Program Files\Java 2014-09-24 05:12 - 2014-09-24 05:12 - 05329480 _____ (Secunia) C:\Users\freddykrueger\Downloads\PSISetup_3.0.0.9016.exe 2014-09-24 05:12 - 2014-09-24 05:12 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2014-09-24 05:12 - 2014-09-24 05:12 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\Secunia PSI 2014-09-24 05:12 - 2014-09-24 05:12 - 00000000 ____D () C:\Program Files (x86)\Secunia 2014-09-24 05:11 - 2014-09-24 05:11 - 00000816 _____ () C:\Users\freddykrueger\Desktop\checkup.txt 2014-09-24 05:06 - 2014-09-24 05:06 - 00854417 _____ () C:\Users\freddykrueger\Downloads\SecurityCheck.exe 2014-09-24 01:52 - 2013-08-26 18:02 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-24 01:52 - 2013-08-26 18:02 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 01:52 - 2013-08-23 18:32 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-24 00:21 - 2013-08-14 02:23 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\vlc 2014-09-23 23:06 - 2014-09-23 23:06 - 02347384 _____ (ESET) C:\Users\freddykrueger\Downloads\esetsmartinstaller_deu.exe 2014-09-23 22:55 - 2014-09-23 22:55 - 01373475 _____ () C:\Users\freddykrueger\Downloads\AdwCleaner_3.310.exe 2014-09-23 22:51 - 2014-09-24 22:00 - 00562599 _____ () C:\Users\freddykrueger\Desktop\wrcBrokerx32.log 2014-09-23 22:51 - 2014-09-24 22:00 - 00084668 _____ () C:\Users\freddykrueger\Desktop\webRepx32.log 2014-09-23 16:53 - 2014-04-14 14:27 - 00010715 _____ () C:\Users\freddykrueger\Desktop\Serienstand.ods 2014-09-23 15:38 - 2013-11-18 12:50 - 00000000 ____D () C:\Users\freddykrueger\Desktop\Spiele 2014-09-23 00:52 - 2014-09-23 00:52 - 00025593 _____ () C:\Users\freddykrueger\Downloads\full.ics 2014-09-22 14:59 - 2014-08-08 02:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-22 05:20 - 2014-09-22 05:20 - 00000000 ____D () C:\Users\freddykrueger\Downloads\zbot_cs16 2014-09-22 05:12 - 2013-11-09 09:21 - 00000000 ____D () C:\Users\freddykrueger\Documents\My Games 2014-09-22 04:34 - 2014-09-22 04:34 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed 2014-09-22 02:55 - 2014-09-16 15:46 - 00000000 ____D () C:\Users\freddykrueger\Downloads\Faun - Luna (Deluxe Edition) - 2014 2014-09-22 01:45 - 2014-09-22 01:45 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\.mono 2014-09-21 16:08 - 2014-09-21 16:07 - 06057862 _____ (Tim Kosse) C:\Users\freddykrueger\Downloads\FileZilla_3.9.0.5_win32-setup.exe 2014-09-21 16:08 - 2013-08-12 05:13 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\FileZilla 2014-09-21 16:07 - 2014-09-21 16:07 - 04996210 _____ (Tim Kosse) C:\Users\freddykrueger\Downloads\FileZilla_3.8.1_win32-setup.exe 2014-09-21 13:48 - 2013-08-12 16:20 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\mIRC 2014-09-21 13:48 - 2013-08-11 14:37 - 00000000 ____D () C:\Users\freddykrueger\Desktop\Porgramme 2014-09-20 05:22 - 2014-09-20 05:22 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gamers.IRC 2014-09-20 04:58 - 2014-09-20 04:58 - 03907097 _____ () C:\Users\freddykrueger\Downloads\girc607.exe 2014-09-19 04:11 - 2014-09-19 04:11 - 00000000 _____ () C:\Users\freddykrueger\Desktop\Neues Textdokument (2).txt 2014-09-19 02:42 - 2014-09-19 02:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-18 19:50 - 2013-08-11 15:01 - 00000000 ____D () C:\ProgramData\Origin 2014-09-18 17:03 - 2013-08-14 15:18 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Adobe 2014-09-18 03:34 - 2014-09-17 22:49 - 00000000 ____D () C:\Users\freddykrueger\Downloads\EFT2.23.3 2014-09-18 00:05 - 2014-09-18 00:05 - 04021536 _____ (Marx Software ) C:\Users\freddykrueger\Downloads\IDMSetup.exe 2014-09-18 00:05 - 2014-09-18 00:05 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\IsolatedStorage 2014-09-18 00:05 - 2014-09-18 00:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iDevice Manager 2014-09-17 20:51 - 2014-09-17 20:51 - 01306272 _____ (pendrivelinux.com) C:\Users\freddykrueger\Downloads\YUMI-2.0.0.9.exe 2014-09-17 20:16 - 2014-09-17 20:15 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\Apps\Windows 7 USB DVD Download Tool 2014-09-17 20:15 - 2014-09-17 20:15 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool 2014-09-17 20:14 - 2014-07-25 08:56 - 00000000 ____D () C:\Users\freddykrueger\Desktop\Tagebuch 2014-09-16 15:43 - 2014-09-16 15:36 - 190624500 _____ () C:\Users\freddykrueger\Downloads\Kor98.rar 2014-09-16 15:42 - 2014-09-16 15:37 - 135114620 _____ () C:\Users\freddykrueger\Downloads\Kor99.rar 2014-09-16 15:42 - 2014-09-16 15:37 - 118191336 _____ () C:\Users\freddykrueger\Downloads\Kropardel2013.rar 2014-09-16 15:37 - 2014-09-16 15:35 - 115887598 _____ () C:\Users\freddykrueger\Downloads\Kor96.rar 2014-09-16 15:35 - 2014-09-16 15:25 - 172490739 _____ () C:\Users\freddykrueger\Downloads\Kor2010.rar 2014-09-16 15:35 - 2014-09-16 15:25 - 158888579 _____ () C:\Users\freddykrueger\Downloads\Kor94.rar 2014-09-16 15:35 - 2014-09-16 15:24 - 177313514 _____ () C:\Users\freddykrueger\Downloads\Kor2005.rar 2014-09-16 15:33 - 2014-09-16 15:25 - 107122218 _____ () C:\Users\freddykrueger\Downloads\Kor2011.rar 2014-09-16 15:32 - 2014-09-16 15:24 - 127887235 _____ () C:\Users\freddykrueger\Downloads\Kor2007.rar 2014-09-16 15:30 - 2014-09-16 15:23 - 156501661 _____ () C:\Users\freddykrueger\Downloads\Kor2002.rar 2014-09-15 09:06 - 2013-08-11 01:36 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-09-14 15:20 - 2013-09-29 20:02 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\.ACEStream 2014-09-13 03:40 - 2014-08-16 14:13 - 00000000 ____D () C:\Windows\rescache 2014-09-13 02:03 - 2014-09-05 01:17 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\EVEMon 2014-09-12 03:06 - 2013-10-18 13:57 - 01596538 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-09-12 03:05 - 2013-08-14 03:28 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-12 03:00 - 2014-04-30 06:22 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-12 03:00 - 2013-08-14 03:28 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-12 01:14 - 2014-09-12 01:14 - 00039012 _____ () C:\Users\freddykrueger\Downloads\H1_marine_helmet_GARLAND.pdo 2014-09-09 04:39 - 2014-09-09 04:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA 2014-09-07 23:51 - 2013-12-02 14:05 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\Adobe 2014-09-05 18:08 - 2014-09-04 13:56 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\EveHQ 2014-09-05 04:10 - 2014-09-12 01:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-05 04:05 - 2014-09-12 01:10 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-05 01:17 - 2014-09-05 01:17 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVEMon 2014-09-05 01:08 - 2014-09-05 01:08 - 00000000 ____D () C:\Users\freddykrueger\Downloads\EVE Mentat 1.2.26.1238 2014-09-05 01:08 - 2014-09-05 01:07 - 21926389 _____ () C:\Users\freddykrueger\Downloads\EVE Mentat 1.2.26.1238.zip 2014-09-04 13:56 - 2014-09-04 13:56 - 00000000 ____D () C:\Users\freddykrueger\Documents\EveHQ 2014-09-04 04:57 - 2014-09-04 04:57 - 00000649 _____ () C:\Users\freddykrueger\Desktop\EveHQ.lnk 2014-09-04 04:57 - 2014-09-04 04:57 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EveHQ 2014-09-03 23:15 - 2014-09-03 23:15 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-09-03 23:15 - 2013-09-11 22:47 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\Logitech 2014-09-03 23:14 - 2014-09-03 23:14 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2014-09-03 23:14 - 2014-09-03 23:14 - 00000786 _____ () C:\Windows\LkmdfCoInst.log 2014-09-03 23:14 - 2014-09-03 23:14 - 00000000 ____D () C:\Program Files\Logitech Gaming Software 2014-09-03 23:14 - 2013-09-29 22:01 - 00000000 ____D () C:\ProgramData\Package Cache 2014-09-03 23:14 - 2013-09-11 22:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2014-09-03 23:13 - 2014-09-03 23:13 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Logitech 2014-09-03 23:13 - 2014-09-03 23:13 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Logishrd 2014-09-03 23:07 - 2014-09-03 23:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3 2014-09-01 23:18 - 2014-08-31 06:25 - 00013952 _____ () C:\Users\freddykrueger\Desktop\clickerHeroSave.txt 2014-08-30 04:42 - 2014-08-30 04:42 - 00000000 ____D () C:\Users\freddykrueger\Documents\EVE 2014-08-30 03:32 - 2014-08-30 03:32 - 00000656 _____ () C:\Users\freddykrueger\Desktop\EVE.lnk 2014-08-30 03:32 - 2014-08-30 03:32 - 00000049 _____ () C:\Windows\6620594 2014-08-30 03:32 - 2014-08-30 03:32 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE 2014-08-30 03:32 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-08-30 02:19 - 2013-08-11 16:21 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\NVIDIA 2014-08-30 02:02 - 2014-08-30 02:02 - 00000362 _____ () C:\Users\Public\Desktop\Heroes & Generals spielen.lnk 2014-08-30 01:42 - 2014-08-30 01:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes & Generals 2014-08-30 01:42 - 2014-08-30 01:42 - 00000000 ____D () C:\Program Files (x86)\HeroesAndGenerals 2014-08-30 01:38 - 2014-08-30 01:38 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\CCP 2014-08-30 01:37 - 2014-08-30 01:37 - 00007227 _____ () C:\Users\freddykrueger\Documents\Uninstall STAR WARS The Old Republic.log 2014-08-30 01:36 - 2014-08-28 04:17 - 00000000 ____D () C:\ProgramData\BitRaider 2014-08-30 00:56 - 2013-08-11 05:13 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\.minecraft 2014-08-28 23:54 - 2013-10-29 04:04 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Mozilla 2014-08-28 05:02 - 2014-07-13 00:07 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\FTPRush 2014-08-28 05:02 - 2014-06-22 12:28 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Steganos 2014-08-28 05:02 - 2013-12-21 00:28 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Xfire 2014-08-28 05:02 - 2013-11-10 22:25 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\dvdcss 2014-08-28 05:02 - 2013-10-23 17:31 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Apple Computer 2014-08-28 05:02 - 2013-10-22 03:32 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Audacity 2014-08-28 05:02 - 2013-10-22 03:09 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\REAPER 2014-08-28 05:02 - 2013-10-20 00:25 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\XBMC 2014-08-28 05:02 - 2013-09-24 22:29 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Mumble 2014-08-28 05:02 - 2013-09-03 21:55 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Guitar Pro 6 2014-08-28 05:02 - 2013-08-25 22:59 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\OBS 2014-08-28 05:02 - 2013-08-13 18:12 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Foxit Software 2014-08-28 05:02 - 2013-08-11 16:37 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\foobar2000 2014-08-28 05:02 - 2013-08-11 15:02 - 00000000 ____D () C:\Users\freddykrueger\AppData\Roaming\Origin 2014-08-28 05:01 - 2014-08-08 02:45 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-08-28 05:01 - 2013-08-11 00:37 - 00001433 _____ () C:\Users\freddykrueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-28 05:00 - 2014-08-28 05:00 - 00003192 _____ () C:\Windows\System32\Tasks\{2FB19E7F-03F8-4F30-A1EE-72F6B6D0884A} 2014-08-28 04:17 - 2014-08-28 04:17 - 00000000 ____D () C:\Users\Public\Documents\BitRaider 2014-08-28 04:17 - 2014-08-28 04:17 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\SWTORPerf 2014-08-28 04:16 - 2014-08-28 04:10 - 00017567 _____ () C:\Users\freddykrueger\Documents\Install STAR WARS The Old Republic.log 2014-08-28 04:13 - 2014-04-18 23:26 - 00000000 ____D () C:\Users\freddykrueger\Documents\NCSOFT 2014-08-28 04:13 - 2014-04-17 16:10 - 00000000 ____D () C:\Users\freddykrueger\AppData\Local\NCSOFT 2014-08-28 04:06 - 2014-08-28 04:06 - 29720272 _____ () C:\Users\freddykrueger\Downloads\SWTOR_setup.exe 2014-08-27 05:12 - 2013-08-11 16:24 - 00000600 _____ () C:\Users\freddykrueger\AppData\Local\PUTTY.RND 2014-08-27 02:51 - 2014-08-27 02:51 - 00000000 ____D () C:\Users\freddykrueger\Documents\PVZ Garden Warfare 2014-08-27 00:06 - 2013-12-05 15:25 - 00316776 _____ () C:\Windows\DirectX.log 2014-08-25 04:38 - 2014-08-25 04:36 - 00000000 ____D () C:\Users\freddykrueger\.LocalCooling 2014-08-25 04:36 - 2013-08-11 00:37 - 00000000 ____D () C:\Users\freddykrueger Some content of TEMP: ==================== C:\Users\freddykrueger\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-16 17:48 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- €.: Problem mit Avast hat sich Behoben Nach dem ich ComboFix Ausprobiert habe und Russische Banner sehe ich bis hierhin auch nicht mehr ![]() €2.: zu früh gefreut ^^ avast meldet sich doch noch ![]() |