Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 7: Virenschutz lässt sich nicht starten 91af09.msi gefunden (https://www.trojaner-board.de/147953-windows-7-virenschutz-laesst-starten-91af09-msi-gefunden.html)

Ryneld 14.01.2014 19:18
Windows 7: Virenschutz lässt sich nicht starten 91af09.msi gefunden
 
Guten Tag,
mein Antivirenprogramm hat, wie im Titel ersichtlich, folgenden Fund gemacht:
"C:/Windows/Installer/91af09.msi"
Bitdefender lässt nun auch keine Änderungen mehr zu, den Virenschutz bezüglich. D.h. ich kann auch das Suchverhalten der Zugriff-Scans bzw. der "Active Virus Control" nicht ändern.
Letzteres ist sogar vollständig ausgeschaltet und kann von mir nicht mehr aktiviert werden.
Der Virus lässt sich auch nicht durch Bitdefender entfernen.
Ich konnte bisher noch keine weiteren offensichtlichen Einschränkungen durch den Virus feststellen.

Die Log-Dateien:

Addition.txt
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-01-2014 01
Ran by Tarik at 2014-01-14 19:01:52
Running from C:\Users\Tarik\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Bitdefender Virenschutz (Disabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Disabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
FW: Bitdefender Firewall (Disabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.1.8 - Adobe Systems)
Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 1.0.1.1 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.002 - Adobe System Incorporated) Hidden
Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Help Center 2.0 (x32 Version: 2.0.0 - Adobe Systems) Hidden
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe Premiere Pro 2.0 (x32 Version: 2.000.000 - Adobe Systems, Inc.)
Adobe Premiere Pro 2.0 (x32 Version: 2.000.000 - Adobe Systems, Inc.) Hidden
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122 - Adobe Systems, Inc.)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe Stock Photos 1.0 (x32 Version: 1.0.2 - Adobe Systems) Hidden
Adobe Widget Browser (x32 Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden
ANNO 1404 - Venedig (x32 Version: 2.01.5010 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
ANNO 1404 (x32 Version: 1.02.0000 - Ubisoft)
ARMA 2 Operation Arrowhead Uninstall (x32 Version:  - )
ArmA 2 Uninstall (x32 Version:  - )
Assassin's Creed (x32 Version: 1.02 - Ubisoft)
ASUS Xonar DS Audio Driver (Version:  - )
Audacity 2.0.3 (x32 Version: 2.0.3 - Audacity Team)
Autodesk 3ds Max 2010 64-Bit Komponenten (Version: 12.0 - Autodesk)
Autodesk 3ds Max 2010 Lehrgangsdateien (x32 Version: 12.0 - Autodesk)
Autodesk 3ds Max 2011 64-Bit (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2011 64-Bit Komponenten (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2012 64-bit - German (Version: 14.0 - Autodesk)
Autodesk 3ds Max 2012 64-bit - German (Version: 14.0 - Autodesk) Hidden
Autodesk Backburner 2012.0.0 (x32 Version: 2012.0.0 - Autodesk, Inc.)
Autodesk FBX Plugin 2009.4 - 3ds Max 2010 64-bit (Version:  - Autodesk)
Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit (Version:  - Autodesk)
Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 64-bit (Version:  - Autodesk)
Autodesk Material Library 2011 (x32 Version: 2.0.0.100 - Autodesk)
Autodesk Material Library 2011 Base Image library (x32 Version: 2.0.0.49 - Autodesk)
Autodesk Material Library 2011 Medium Image library (x32 Version: 2.0.0.49 - Autodesk)
Autodesk Material Library 2012 (x32 Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (x32 Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2012 (x32 Version: 2.5.0.8 - Autodesk)
Battle.net (x32 Version:  - Blizzard Entertainment)
Battlefield 1942™ (x32 Version: 1.6.20.0 - Electronic Arts)
Battlefield 3™ (x32 Version: 1.4.0.0 - Electronic Arts)
Battlefield 4™ (x32 Version: 1.0.0.1 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 2.3.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (x32 Version:  - )
BattlEye Uninstall (x32 Version:  - )
Bitdefender Internet Security 2013 (Version: 16.20.0.1483 - Bitdefender)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Blitzkrieg Mod (x32 Version: 4.6.3.0 - Blitzkrieg Mod Team)
Call of Duty: Modern Warfare 3 - Multiplayer (x32 Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (x32 Version:  - Infinity Ward - Sledgehammer Games)
Camtasia Studio 7 (x32 Version: 7.1.0 - TechSmith Corporation)
Command & Conquer™: Generals and Zero Hour (x32 Version: 1.0.0.0 - Electronic Arts, Inc.)
Company of Heroes - FAKEMSI (x32 Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes (x32 Version: 2.602.0 - THQ Inc.)
Composite 2011 (64-bit) (Version: 6.0.0 - Autodesk)
Composite 2012 64-bit (Version: 7.0.0 - Autodesk)
CPUID HWMonitor 1.21 (Version:  - )
Creation Kit (x32 Version:  - bgs.bethsoft.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ Commander (x32 Version: 0.92.91 - Dotjosh Studios)
Dead Space™ (x32 Version: 1.0.222.0 - Electronic Arts)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
Diablo II (x32 Version:  - Blizzard Entertainment)
Die Sims™ 3 (x32 Version: 1.48.5 - Electronic Arts)
Die Sims™ 3 Late Night (x32 Version: 6.5.1 - Electronic Arts)
Dota 2 (x32 Version:  - Valve)
Dragon Age: Origins - Ultimate Edition (x32 Version:  - BioWare)
Drakensang (x32 Version:  - dtp)
Emperor - Schlacht um Dune (x32 Version:  - )
ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)
Far Cry 2 (x32 Version:  - Ubisoft)
FileZilla Client 3.7.1 (HKCU Version: 3.7.1 - FileZilla Project)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fraps (remove only) (x32 Version:  - )
Gameforge Live 1.2.1734 "Legend" (x32 Version: 1.2.1734 - Gameforge)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Gothic 3 (x32 Version: 1.0.0 - JoWood)
Grand Theft Auto IV (x32 Version:  - Rockstar North)
Half-Life 2 (x32 Version:  - Valve)
Hearthstone (x32 Version:  - Blizzard Entertainment)
Heroes of Might and Magic® III Complete (x32 Version:  - )
Hitman: Absolution (x32 Version:  - IO Interactive)
Intel® Matrix Storage Manager (Version:  - Intel Corporation)
Java 7 Update 15 (64-bit) (Version: 7.0.150 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Kerbal Space Program (x32 Version:  - Squad)
Left 4 Dead (x32 Version:  - Valve)
Left 4 Dead 2 (x32 Version:  - Valve)
LogMeIn Hamachi (x32 Version: 2.2.0.109 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.109 - LogMeIn, Inc.) Hidden
Mass Effect™ 2 (x32 Version: 1.2.1604.0 - Electronic Arts)
Metro 2033 (x32 Version:  - 4A Games)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.2.3.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 (64 Bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 RsFx Driver (Version: 10.51.2500.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 R2 Setup (English) (Version: 10.50.1617.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - DEU (Version: 8.0.50727.42 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Mumble 1.2.3 (x32 Version: 1.2.3 - Thorvald Natvig)
Natural Selection 2 (x32 Version:  - Unknown Worlds Entertainment)
Nexon Game Manager (x32 Version:  - )
Nexus Mod Manager (Version: 0.46.0 - Black Tree Gaming)
Notepad++ (x32 Version: 6.5.1 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.7 (Version: 1.7 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 9.3.16 (Version: 9.3.16 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
NVIDIA Update 9.3.16 (Version: 9.3.16 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9 - NVIDIA Corporation)
Oblivion - BTmod 2.20 (x32 Version: 2.20 - Beider & Tikigod)
Oblivion (x32 Version: 1.2.0416 - Bethesda Softworks)
OpenAL (x32 Version:  - )
Origin (x32 Version: 9.0.15.65 - Electronic Arts, Inc.)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Play withSIX (x32 Version: 1.30.0480 - SIX Networks)
Portal 2 (x32 Version:  - Valve)
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
RCRN (x32 Version: AE 2.1.4 - Flying Castle Entertainment)
Serious Sam 3: BFE (x32 Version:  - Croteam)
Service Pack 1 für SQL Server 2008 R2 (KB2528583) (64-bit) (Version: 10.51.2500.0 - Microsoft Corporation)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 1.6.34 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (x32 Version:  - 2K Games, Inc.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SP1-Zusatzdateien für Autodesk 3ds Max 2010 64-Bit (Version: 1 - Autodesk)
SQL Server 2008 R2 SP1 Common Files (Version: 10.51.2500.0 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP1 Database Engine Services (Version: 10.51.2500.0 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP1 Database Engine Shared (Version: 10.51.2500.0 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP1 Management Studio (Version: 10.51.2500.0 - Microsoft Corporation) Hidden
Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
StarCraft II (x32 Version:  - Blizzard Entertainment)
StarCraft II Art Tools (64-bit) (Version: 1.0.0 - Blizzard Entertainment)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 8 (x32 Version: 8.0.18051 - TeamViewer)
Terraria (x32 Version:  - Re-Logic)
The Elder Scrolls V Skyrim All in One DLC-Pack Deutsche Version Plus Update 11 (1.8.151.0.7) 1.8.151.0.7 (x32 Version: 1.8.151.0.7 - .x.X.RIDDICK.X.x.)
The Elder Scrolls V: Skyrim (x32 Version:  - Bethesda Game Studios)
The Walking Dead (x32 Version:  - )
The Witcher: Enhanced Edition (x32 Version:  - CD Projekt RED)
Trine 2 (x32 Version:  - )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (x32 Version: 4.0.8080.0 - Microsoft Corporation)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Speech Recognition Macros (x32 Version: 1.0.6862.19 - Microsoft Corporation)
Windows XP Mode (Version: 1.3.7600.16422 - Microsoft Corporation)

==================== Restore Points  =========================

03-01-2014 20:49:34 Geplanter Prüfpunkt
03-01-2014 21:12:01 DirectX wurde installiert
10-01-2014 15:23:24 Removed Battlefield: Bad Company™ 2
10-01-2014 15:25:06 Entfernt Fable - The Lost Chapters
10-01-2014 15:26:40 Removed Oracle VM VirtualBox 4.3.2

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-03-27 23:53 - 00000828 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {16B30E32-6B20-4078-835A-A85F4DB0C24B} - System32\Tasks\AdobeAAMUpdater-1.0-RENDERER2-Tarik => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {1B1F6F91-7026-40BB-B7FC-EE6FC77DDD84} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-26] (Google Inc.)
Task: {2529016C-EE51-4574-9167-98446C69F7D3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {2D517B75-CAB4-4561-899D-4852D9950CDA} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.00.95\AsLoader.exe
Task: {4BD5EE22-62D0-4D05-90D2-4E0961C03D5D} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe
Task: {5EBF0449-5608-4509-8AC4-39C4CA34A901} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-26] (Google Inc.)
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => C:\Windows\SysWOW64\BthUdTask.exe [2009-07-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-13 19:45 - 2013-11-11 16:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () D:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () D:\Program Files (x86)\Notepad++\NppShell_05.dll
2013-03-29 16:11 - 2013-10-24 17:17 - 00265080 _____ () D:\Program files\Bitdefender\Bitdefender 2013\txmlutil.dll
2013-09-13 19:45 - 2013-11-11 16:02 - 00092448 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2012-11-26 23:18 - 2011-04-19 14:56 - 00143360 ____N () C:\Program Files\ASUS Xonar DS Audio\Customapp\VmixP8.dll
2013-09-03 14:54 - 2013-09-03 14:54 - 00019968 _____ () C:\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu
2013-12-21 10:11 - 2013-12-21 10:11 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-11 18:54 - 2013-12-11 18:54 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Microsoft:4S2ZfovljlvCuv2DLjJ
AlternateDataStreams: C:\ProgramData\Microsoft:fSdlTgsnvU2txn64F80Qkrr
AlternateDataStreams: C:\Users\Tarik\Cookies:tro56nfyeYGKu90TNxsab7g
AlternateDataStreams: C:\Users\Tarik\AppData\Local\KK0EOHYM:qsMcH9Cwe4dVTvIhyT0ewL

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============

Name: WeOnlyDo Network Adapter 2.5
Description: WeOnlyDo Network Adapter 2.5
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: WeOnlyDo Network Provider
Service: wod0205
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: ASInsHelp
Description: ASInsHelp
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ASInsHelp
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/13/2014 11:19:52 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/13/2014 11:19:31 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/13/2014 10:55:26 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/13/2014 10:54:33 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/12/2014 03:30:52 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/12/2014 03:29:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/11/2014 01:37:53 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/11/2014 01:36:57 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (01/10/2014 04:31:58 PM) (Source: MsiInstaller) (User: RENDERER2)
Description: Product: ICA -- Error 1706.No valid source could be found for product ICA.  The Windows Installer cannot continue.

Error: (01/10/2014 04:31:53 PM) (Source: MsiInstaller) (User: RENDERER2)
Description: Product: IPM_PSP_COM64 -- Error 1706.No valid source could be found for product IPM_PSP_COM64.  The Windows Installer cannot continue.


System errors:
=============
Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 06:43:59 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 06:43:59 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.

Error: (01/14/2014 06:43:59 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.


Microsoft Office Sessions:
=========================
Error: (01/13/2014 11:19:52 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\Autodesk\Composite 2011\python\lib\distutils\command\wininst-8_d.exe

Error: (01/13/2014 11:19:31 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"D:\Program Files\Autodesk\Composite 2012\python\lib\distutils\command\wininst-8_d.exe

Error: (01/13/2014 10:55:26 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\Autodesk\Composite 2011\python\lib\distutils\command\wininst-8_d.exe

Error: (01/13/2014 10:54:33 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"D:\Program Files\Autodesk\Composite 2012\python\lib\distutils\command\wininst-8_d.exe

Error: (01/12/2014 03:30:52 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\Autodesk\Composite 2011\python\lib\distutils\command\wininst-8_d.exe

Error: (01/12/2014 03:29:55 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"D:\Program Files\Autodesk\Composite 2012\python\lib\distutils\command\wininst-8_d.exe

Error: (01/11/2014 01:37:53 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\Autodesk\Composite 2011\python\lib\distutils\command\wininst-8_d.exe

Error: (01/11/2014 01:36:57 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"D:\Program Files\Autodesk\Composite 2012\python\lib\distutils\command\wininst-8_d.exe

Error: (01/10/2014 04:31:58 PM) (Source: MsiInstaller)(User: RENDERER2)
Description: Product: ICA -- Error 1706.No valid source could be found for product ICA.  The Windows Installer cannot continue.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/10/2014 04:31:53 PM) (Source: MsiInstaller)(User: RENDERER2)
Description: Product: IPM_PSP_COM64 -- Error 1706.No valid source could be found for product IPM_PSP_COM64.  The Windows Installer cannot continue.(NULL)(NULL)(NULL)(NULL)(NULL)


CodeIntegrity Errors:
===================================
  Date: 2013-02-09 14:00:05.106
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 14:00:05.037
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 14:00:03.936
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 14:00:03.871
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 14:00:02.805
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 14:00:02.740
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 14:00:01.674
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 14:00:01.607
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 13:59:57.037
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-09 13:59:56.972
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 13%
Total physical RAM: 24566.08 MB
Available physical RAM: 21250.75 MB
Total Pagefile: 49130.34 MB
Available Pagefile: 45584.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:139.73 GB) (Free:16.45 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Volume) (Fixed) (Total:1117.82 GB) (Free:37.18 GB) NTFS
Drive e: (Anno 1404 Add-On) (CDROM) (Total:0.77 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1118 GB) (Disk ID: 3793C992)
Partition 1: (Not Active) - (Size=-998777028608) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 140 GB) (Disk ID: 513B080A)
Partition 1: (Active) - (Size=140 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST.txt
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-01-2014 01
Ran by Tarik (administrator) on RENDERER2 on 14-01-2014 19:01:33
Running from C:\Users\Tarik\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Maxtor) C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe
() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\KMService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe
() D:\Program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
() D:\Program files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\updatesrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Maxtor) C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(CMedia) C:\Program Files\ASUS Xonar DS Audio\Customapp\AsusAudioCenter.exe
(Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\bdagent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
() C:\Program Files\NVIDIA Corporation\Display\nvsmartmaxapp64.exe
() C:\Program Files\NVIDIA Corporation\Display\nvsmartmaxapp.exe
(Adobe Systems Inc.) C:\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe [136472 2008-06-27] (Maxtor)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [Maxtor Scheduler2 Service] - C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe [136472 2008-06-27] (Maxtor)
HKLM\...\Run: [Cmaudio8788] - C:\Windows\Syswow64\cmicnfgp.dll [8769536 2011-05-12] (C-Media Corporation)
HKLM\...\Run: [Cmaudio8788GX] - C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Bdagent] - D:\Program files\Bitdefender\Bitdefender 2013\bdagent.exe [1575192 2013-10-24] (Bitdefender)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1063200 2013-10-18] (NVIDIA Corporation)
HKLM-x32\...\Run: [BCSSync] - D:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2013-09-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [Steam] - D:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-14] (Valve Corporation)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [OfficeSyncProcess] - D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - "C:\Users\Tarik\AppData\Local\Akamai\netsession_win.exe"
MountPoints2: {72bdc079-89bb-11df-bfbc-806e6f6e6963} - E:\Autorun.exe
MountPoints2: {ab0ea488-7f32-11e2-810e-90e6ba153576} - F:\iLinker.exe
Startup: C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> D:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RCRN_Autoupdater.exe.lnk
ShortcutTarget: RCRN_Autoupdater.exe.lnk -> D:\Program Files (x86)\Steam\SteamApps\common\Skyrim\RCRN\Autoupdater\RCRN_Autoupdater.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=hp&installDate=26/10/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x77F9AA1A2E11CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9-x64 11 C:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File Not found ()
Winsock: Catalog9-x64 12 C:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{943E789C-5AB5-4979-8A03-1FC88F60C25E}: [NameServer]192.168.1.2
Tcpip\..\Interfaces\{F1ED2B56-7F14-479F-BB8A-0A7A94C8F708}: [NameServer]139.7.30.125 139.7.30.126

FireFox:
========
FF ProfilePath: C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default
FF user.js: detected! => C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\user.js
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Users\Tarik\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Wörterbuch Deutsch (de-DE), Hunspell-unterstützt - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\de_DE@dicts.j3e.de [2013-09-13]
FF Extension: British English Dictionary (Updated) - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\en-gb@flyingtophat.co.uk [2013-10-23]
FF Extension: FoxyProxy Standard - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\foxyproxy@eric.h.jung [2013-10-26]
FF Extension: YouTube Unblocker - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\youtubeunblocker@unblocker.yt [2013-11-01]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2013-10-18]
FF Extension: Video Resumer - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\videoresumer@jetpack.xpi [2013-06-25]
FF Extension: YouTube Cinema Mode . - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\youtube-cinemode@gmail.com.xpi [2013-09-06]
FF Extension: NoScript - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-23]
FF Extension: {748284c8-f147-4b29-8544-7a58fa23f520} - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{748284c8-f147-4b29-8544-7a58fa23f520}.xpi [2013-11-01]
FF Extension: Adblock Plus - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-01]
FF Extension: Skype Compiler Plus - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{fd16221d-b893-40f7-bc64-455e68e578ce}.xpi [2013-11-05]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext
FF Extension: bdToolbar - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext [2013-01-28]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-03-28]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext
FF Extension: bdToolbar - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext [2013-01-28]

Chrome:
=======
CHR HomePage: hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=hp&installDate=26/10/2013
CHR RestoreOnStartup: "hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=hp&installDate=26/10/2013"
CHR DefaultSearchKeyword: search.snapdo.com
CHR DefaultSearchProvider: Web
CHR DefaultSearchURL: hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013
CHR DefaultNewTabURL:
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Nexon Game Controller) - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
CHR Plugin: (Garena Talk Plugin) - C:\Users\Tarik\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.150.3) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Extension: (Snap.Do ) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0 [2013-10-26]
CHR Extension: (Google Docs) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 [2013-03-26]
CHR Extension: (Google Drive) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 [2013-03-26]
CHR Extension: (YouTube) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 [2013-04-13]
CHR Extension: (Google Search) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 [2013-03-28]
CHR Extension: (Proxy link for YouTube\u2122) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpccpcaielehgefaagocjkkgkafaabdp\1.2.3_0 [2013-05-12]
CHR Extension: (Google Wallet) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-25]
CHR Extension: (Gmail) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 [2013-03-26]

==================== Services (Whitelisted) =================

R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe [605976 2008-06-27] (Maxtor)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-02-17] (Adobe Systems)
S4 BdDesktopParental; D:\Program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [69392 2013-10-24] (Bitdefender)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-01] ()
S3 DAUpdaterSvc; D:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-13] (BioWare)
R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] ()
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S2 MaxSch2Svc; C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe [605976 2008-06-27] (Maxtor)
R2 mi-raysat_3dsmax2011_64; D:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [86016 2010-04-01] ()
R2 mi-raysat_3dsmax2012_64; D:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe [86016 2011-02-22] ()
S3 Microsoft SharePoint Workspace Audit Service; D:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [30798512 2013-03-09] (Microsoft Corporation)
S4 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-30] ()
S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation)
R2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [3574624 2013-04-23] (TeamViewer GmbH)
R2 UPDATESRV; D:\Program files\Bitdefender\Bitdefender 2013\updatesrv.exe [67320 2013-10-24] (Bitdefender)
R2 VSSERV; D:\Program files\Bitdefender\Bitdefender 2013\vsserv.exe [1645256 2013-10-24] (Bitdefender)
S3 WinHttpAutoProxySvc; C:\Windows\SysWOW64\winhttp.dll [351232 2010-11-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-05-07] ()
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-10-24] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-10-24] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-04-29] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-10-24] (BitDefender SRL)
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2725376 2011-03-10] (C-Media Inc)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-24] (BitDefender LLC)
S2 IOPort; C:\Windows\SysWOW64\DRIVERS\IOPORT.SYS [6144 2001-03-01] (Erik Salaj)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-05-07] ()
S3 mirrorv3; C:\Windows\System32\DRIVERS\rminiv3.sys [5632 2010-04-21] (Famatech International Corp.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
S3 phaudlwr; C:\Windows\System32\DRIVERS\phaudlwr.sys [114608 2009-10-20] (Philips Applied Technologies)
S3 RivaTuner64; D:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2013-02-09] ()
S1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 spc999; C:\Windows\System32\drivers\spc999.sys [584192 2009-12-14] (                                                            )
S3 spc999m; C:\Windows\System32\drivers\spc999m.sys [8192 2009-12-14] (                                                            )
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-24] (BitDefender S.R.L.)
S3 wod0205; C:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software)
S3 ALSysIO; \??\C:\Users\mklepper\AppData\Local\Temp\ALSysIO64.sys [x]
S2 ASInsHelp; \??\C:\Windows\SysWow64\drivers\AsInsHelp64.sys [x]
S3 cpuz136; \??\C:\Users\Tarik\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 GGSAFERDriver; \??\C:\Users\Tarik\Garena Plus\Room\safedrv.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]
U3 ufddipob; \??\C:\Users\Tarik\AppData\Local\Temp\ufddipob.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-14 18:59 - 2014-01-14 18:59 - 00037118 _____ C:\Users\Tarik\Downloads\GMER.log
2014-01-14 18:48 - 2014-01-14 18:48 - 00377856 _____ C:\Users\Tarik\Downloads\32xc18gq.exe
2014-01-14 18:47 - 2014-01-14 18:47 - 00000000 ____D C:\Users\Tarik\Downloads\FRST-OlderVersion
2014-01-10 19:44 - 2014-01-10 19:44 - 00000000 ____D C:\Users\Tarik\Documents\ANNO 1404 Venedig
2014-01-10 18:19 - 2014-01-10 18:20 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.technic
2014-01-10 18:19 - 2014-01-10 18:19 - 02314844 _____ () C:\Users\Tarik\Downloads\TechnicLauncher.exe
2014-01-10 18:16 - 2014-01-10 18:16 - 00375581 _____ C:\Users\Tarik\Downloads\Minecraft-Modder_v2.8.4_de.exe
2014-01-10 16:39 - 2014-01-10 16:39 - 00000000 ____D C:\Users\Tarik\Desktop\Crack
2014-01-10 16:39 - 2008-01-23 14:57 - 04500187 _____ C:\Users\Tarik\Desktop\iw3sp.exe
2014-01-05 14:30 - 2014-01-05 14:31 - 00232031 _____ C:\Users\Tarik\Downloads\Essay
2014-01-03 21:56 - 2014-01-03 22:11 - 553230663 _____ (Epic Games, Inc.) C:\Users\Tarik\Downloads\WDS.exe
2013-12-30 15:23 - 2014-01-14 19:01 - 00028793 _____ C:\Users\Tarik\Downloads\FRST.txt
2013-12-30 15:22 - 2014-01-14 18:47 - 00000000 ____D C:\FRST
2013-12-30 15:12 - 2014-01-14 18:46 - 00000472 _____ C:\Users\Tarik\Downloads\defogger_disable.log
2013-12-30 15:12 - 2013-12-30 15:12 - 00000000 _____ C:\Users\Tarik\defogger_reenable
2013-12-30 15:07 - 2014-01-14 18:47 - 02075648 _____ (Farbar) C:\Users\Tarik\Downloads\FRST64.exe
2013-12-30 15:04 - 2013-12-30 15:04 - 00377856 _____ C:\Users\Tarik\Downloads\1jn1ckw1.exe
2013-12-30 15:03 - 2013-12-30 15:03 - 00050477 _____ C:\Users\Tarik\Downloads\Defogger.exe
2013-12-27 13:13 - 2013-12-27 13:13 - 00000000 ____D C:\Users\Tarik\AppData\Local\Flying_Castle_Entertainme
2013-12-26 12:21 - 2013-12-26 12:44 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Natural Selection 2
2013-12-25 14:39 - 2013-12-25 14:39 - 00000199 _____ C:\Users\Tarik\Desktop\Natural Selection 2.url
2013-12-23 22:17 - 2013-12-23 22:17 - 08537832 _____ C:\Users\Tarik\Desktop\Entwurf1.psd
2013-12-23 22:01 - 2013-12-23 22:01 - 00000000 ____D C:\Users\Tarik\Downloads\__MACOSX
2013-12-23 22:01 - 2008-04-13 11:54 - 02483418 ____N C:\Users\Tarik\Downloads\benblogged_grunge.abr
2013-12-23 22:01 - 2008-04-10 10:20 - 01012590 ____N C:\Users\Tarik\Downloads\benblogged_splatter.abr
2013-12-23 21:54 - 2013-12-23 21:54 - 07444038 _____ C:\Users\Tarik\Downloads\Brush_Pack___Splashes_Of_Paint_by_MouritsaDA_Stock.abr
2013-12-23 21:53 - 2013-12-23 21:53 - 01467371 _____ C:\Users\Tarik\Downloads\benblogged_grungeabr.zip
2013-12-23 21:53 - 2013-12-23 21:53 - 00604249 _____ C:\Users\Tarik\Downloads\benblogged_splatterabr.zip
2013-12-22 17:13 - 2013-12-22 17:14 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (3)
2013-12-21 10:11 - 2013-12-25 01:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-16 17:49 - 2013-12-16 17:49 - 00000777 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2013-12-15 19:53 - 2013-12-15 19:53 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (2)
2013-12-15 17:16 - 2013-12-15 17:43 - 00000000 ____D C:\Users\Tarik\Desktop\Skyrim plugins
2013-12-15 11:59 - 2013-12-15 11:59 - 00001072 _____ C:\Users\Public\Desktop\RCRN Customizer.lnk
2013-12-15 11:56 - 2013-12-15 11:56 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner

==================== One Month Modified Files and Folders =======

2014-01-14 19:01 - 2013-12-30 15:23 - 00028793 _____ C:\Users\Tarik\Downloads\FRST.txt
2014-01-14 18:59 - 2014-01-14 18:59 - 00037118 _____ C:\Users\Tarik\Downloads\GMER.log
2014-01-14 18:54 - 2012-05-22 20:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-14 18:50 - 2012-11-26 20:24 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Skype
2014-01-14 18:48 - 2014-01-14 18:48 - 00377856 _____ C:\Users\Tarik\Downloads\32xc18gq.exe
2014-01-14 18:47 - 2014-01-14 18:47 - 00000000 ____D C:\Users\Tarik\Downloads\FRST-OlderVersion
2014-01-14 18:47 - 2013-12-30 15:22 - 00000000 ____D C:\FRST
2014-01-14 18:47 - 2013-12-30 15:07 - 02075648 _____ (Farbar) C:\Users\Tarik\Downloads\FRST64.exe
2014-01-14 18:46 - 2013-12-30 15:12 - 00000472 _____ C:\Users\Tarik\Downloads\defogger_disable.log
2014-01-14 18:21 - 2012-11-26 22:40 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-14 18:21 - 2012-11-26 22:40 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-14 18:05 - 2009-11-12 13:25 - 01390964 _____ C:\Windows\WindowsUpdate.log
2014-01-14 18:05 - 2009-07-14 05:45 - 00020160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-14 18:05 - 2009-07-14 05:45 - 00020160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-14 18:00 - 2013-03-02 15:30 - 00003934 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BE29C0D3-C322-4ABB-A5C8-377AE67DF550}
2014-01-14 17:58 - 2013-06-21 18:46 - 00000000 ____D C:\Users\Tarik\AppData\Local\LogMeIn Hamachi
2014-01-14 17:57 - 2013-11-05 06:38 - 00024615 _____ C:\Windows\setupact.log
2014-01-14 17:57 - 2011-04-19 12:32 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-14 17:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-14 16:48 - 2012-12-07 18:21 - 00000000 ____D C:\Users\Tarik\AppData\Local\ArmA 2 OA
2014-01-14 07:03 - 2012-12-09 10:53 - 00000000 ____D C:\Users\Tarik\AppData\Local\Adobe
2014-01-13 19:18 - 2013-02-23 18:34 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.minecraft
2014-01-13 17:54 - 2013-01-26 15:49 - 00000000 ____D C:\Users\Tarik\Documents\Outlook-Dateien
2014-01-13 16:26 - 2012-12-07 17:51 - 00000000 ____D C:\Users\Tarik\AppData\Local\Play withSIX
2014-01-13 16:26 - 2012-12-07 17:51 - 00000000 ____D C:\Users\Tarik\AppData\Local\Downloaded Installations
2014-01-12 20:34 - 2012-11-27 03:31 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-12 20:28 - 2012-11-27 03:31 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-12 18:42 - 2013-09-12 18:30 - 00000000 ____D C:\Users\Tarik\Studienarbeit
2014-01-12 18:42 - 2009-07-14 18:58 - 00771488 _____ C:\Windows\system32\perfh007.dat
2014-01-12 18:42 - 2009-07-14 18:58 - 00176068 _____ C:\Windows\system32\perfc007.dat
2014-01-12 18:42 - 2009-07-14 06:13 - 01817042 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-11 20:12 - 2013-10-17 20:38 - 00000000 ____D C:\Users\Tarik\AppData\Local\Battle.net
2014-01-11 09:58 - 2009-07-14 05:45 - 05055752 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-10 19:44 - 2014-01-10 19:44 - 00000000 ____D C:\Users\Tarik\Documents\ANNO 1404 Venedig
2014-01-10 19:32 - 2013-07-22 22:00 - 00000000 ____D C:\Users\Tarik\Desktop\Spiele
2014-01-10 19:25 - 2013-02-02 13:35 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Ubisoft
2014-01-10 19:24 - 2009-11-15 14:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-10 18:20 - 2014-01-10 18:19 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.technic
2014-01-10 18:19 - 2014-01-10 18:19 - 02314844 _____ () C:\Users\Tarik\Downloads\TechnicLauncher.exe
2014-01-10 18:16 - 2014-01-10 18:16 - 00375581 _____ C:\Users\Tarik\Downloads\Minecraft-Modder_v2.8.4_de.exe
2014-01-10 17:32 - 2012-11-27 14:06 - 00281768 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2014-01-10 17:13 - 2012-11-26 16:05 - 00114456 _____ C:\Users\Tarik\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-10 16:39 - 2014-01-10 16:39 - 00000000 ____D C:\Users\Tarik\Desktop\Crack
2014-01-10 16:35 - 2012-11-27 14:06 - 00000000 ____D C:\Users\Tarik\AppData\Local\PunkBuster
2014-01-10 16:32 - 2013-12-05 18:28 - 00000000 ____D C:\ProgramData\Corel
2014-01-10 16:25 - 2012-12-25 21:41 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JoWooD
2014-01-09 19:35 - 2013-12-06 16:40 - 00000000 ____D C:\Users\Tarik\AppData\Local\CrashDumps
2014-01-09 18:02 - 2013-03-24 20:30 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Mumble
2014-01-07 18:48 - 2009-11-16 18:05 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-05 14:32 - 2013-07-04 19:38 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\uTorrent
2014-01-05 14:31 - 2014-01-05 14:30 - 00232031 _____ C:\Users\Tarik\Downloads\Essay
2014-01-04 10:45 - 2013-09-13 19:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-03 22:12 - 2013-02-23 20:22 - 00737600 _____ C:\Windows\DirectX.log
2014-01-03 22:11 - 2014-01-03 21:56 - 553230663 _____ (Epic Games, Inc.) C:\Users\Tarik\Downloads\WDS.exe
2014-01-03 12:24 - 2013-07-02 20:43 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-03 12:24 - 2012-11-26 16:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-30 15:12 - 2013-12-30 15:12 - 00000000 _____ C:\Users\Tarik\defogger_reenable
2013-12-30 15:12 - 2012-11-26 16:05 - 00000000 ____D C:\Users\Tarik
2013-12-30 15:04 - 2013-12-30 15:04 - 00377856 _____ C:\Users\Tarik\Downloads\1jn1ckw1.exe
2013-12-30 15:03 - 2013-12-30 15:03 - 00050477 _____ C:\Users\Tarik\Downloads\Defogger.exe
2013-12-27 13:13 - 2013-12-27 13:13 - 00000000 ____D C:\Users\Tarik\AppData\Local\Flying_Castle_Entertainme
2013-12-26 12:44 - 2013-12-26 12:21 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Natural Selection 2
2013-12-25 14:39 - 2013-12-25 14:39 - 00000199 _____ C:\Users\Tarik\Desktop\Natural Selection 2.url
2013-12-25 01:44 - 2013-12-21 10:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-23 22:17 - 2013-12-23 22:17 - 08537832 _____ C:\Users\Tarik\Desktop\Entwurf1.psd
2013-12-23 22:01 - 2013-12-23 22:01 - 00000000 ____D C:\Users\Tarik\Downloads\__MACOSX
2013-12-23 21:54 - 2013-12-23 21:54 - 07444038 _____ C:\Users\Tarik\Downloads\Brush_Pack___Splashes_Of_Paint_by_MouritsaDA_Stock.abr
2013-12-23 21:53 - 2013-12-23 21:53 - 01467371 _____ C:\Users\Tarik\Downloads\benblogged_grungeabr.zip
2013-12-23 21:53 - 2013-12-23 21:53 - 00604249 _____ C:\Users\Tarik\Downloads\benblogged_splatterabr.zip
2013-12-22 17:14 - 2013-12-22 17:13 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (3)
2013-12-21 20:13 - 2012-07-04 20:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 20:49 - 2012-11-27 17:03 - 00000000 ____D C:\Users\Tarik\Websiten
2013-12-19 06:50 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-16 18:51 - 2012-11-27 15:53 - 00000000 ____D C:\Users\Tarik\AppData\Local\Skyrim
2013-12-16 17:49 - 2013-12-16 17:49 - 00000777 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2013-12-16 17:49 - 2013-06-05 15:45 - 00000000 ____D C:\Users\Tarik\AppData\Local\Black_Tree_Gaming
2013-12-15 19:53 - 2013-12-15 19:53 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (2)
2013-12-15 17:43 - 2013-12-15 17:16 - 00000000 ____D C:\Users\Tarik\Desktop\Skyrim plugins
2013-12-15 11:59 - 2013-12-15 11:59 - 00001072 _____ C:\Users\Public\Desktop\RCRN Customizer.lnk
2013-12-15 11:59 - 2012-11-26 16:05 - 00000000 ___RD C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-15 11:56 - 2013-12-15 11:56 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner
2013-12-15 03:03 - 2013-08-14 21:50 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 03:00 - 2009-11-13 07:19 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Tarik\AppData\Local\Temp\iv_uninstall.exe
C:\Users\Tarik\AppData\Local\Temp\NGM.exe
C:\Users\Tarik\AppData\Local\Temp\NGMDll.dll
C:\Users\Tarik\AppData\Local\Temp\NGMResource.dll
C:\Users\Tarik\AppData\Local\Temp\ubi6858.tmp.exe
C:\Users\Tarik\AppData\Local\Temp\ubiD03E.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-11 13:36

==================== End Of Log ============================
Ich musste leider die GMER.log in den Anhang hängen, da sonst der Beitrag zu lang gewesen wäre.

Ich hoffe mir kann hier geholfen werden. Schon einmal vielen Dank für eure Mühen.
Liebe Grüße
Ryneld / Tarik

schrauber 14.01.2014 21:45
hi,
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Ryneld 15.01.2014 18:03
Hallo,

vielen Dank schon mal :)


Ich habe den Scan durchgeführt:

Code:
ComboFix 14-01-14.02 - Tarik 15.01.2014  17:46:13.1.8 - x64
Microsoft Windows 7 Professional  6.1.7601.1.1252.49.1031.18.24566.20416 [GMT 1:00]
ausgeführt von:: c:\users\Tarik\Downloads\ComboFix.exe
AV: Bitdefender Virenschutz *Enabled/Updated* {9B5F5313-CAF9-DD97-C460-E778420237B4}
FW: Bitdefender Firewall *Disabled* {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}
SP: Bitdefender Spyware-Schutz *Enabled/Updated* {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1359378903.bdinstall.bin
c:\programdata\MPK
c:\programdata\MPK\1\D0000
c:\programdata\MPK\1\I41464_0796695602
c:\programdata\MPK\1\I41464_0831418403
c:\programdata\MPK\1\I41464_0866141551
c:\programdata\MPK\1\I41464_5807192130
c:\programdata\MPK\1\I41464_5841915509
c:\programdata\MPK\1\I41464_5876637847
c:\programdata\MPK\1\I41464_5911360648
c:\programdata\MPK\1\I41464_5946083565
c:\programdata\MPK\1\I41464_5980806944
c:\programdata\MPK\1\I41464_6015529282
c:\programdata\MPK\1\I41464_6050252199
c:\programdata\MPK\1\I41464_6084975000
c:\programdata\MPK\1\I41464_6119698380
c:\programdata\MPK\1\I41464_6154420718
c:\programdata\MPK\1\I41464_6189143518
c:\programdata\MPK\1\I41464_6223866898
c:\programdata\MPK\1\I41464_6258589468
c:\programdata\MPK\1\I41464_6328035532
c:\programdata\MPK\1\I41464_6362757870
c:\programdata\MPK\1\I41464_6397480787
c:\programdata\MPK\1\I41464_6432204167
c:\programdata\MPK\1\I41464_6466926505
c:\programdata\MPK\1\I41464_6501649537
c:\programdata\MPK\1\I41464_6536372222
c:\programdata\MPK\1\I41464_6571095023
c:\programdata\MPK\1\I41464_6605818287
c:\programdata\MPK\1\I41464_6675263773
c:\programdata\MPK\1\I41464_6709987153
c:\programdata\MPK\1\I41464_6814155093
c:\programdata\MPK\1\I41464_6848878009
c:\programdata\MPK\1\I41464_6883601389
c:\programdata\MPK\1\I41464_6918323727
c:\programdata\MPK\1\I41464_6953046991
c:\programdata\MPK\1\I41464_6987770370
c:\programdata\MPK\1\I41464_7022492245
c:\programdata\MPK\1\I41464_7057215046
c:\programdata\MPK\1\I41464_7091938426
c:\programdata\MPK\1\I41464_7126661458
c:\programdata\MPK\1\I41464_7161383912
c:\programdata\MPK\1\I41464_7196106944
c:\programdata\MPK\1\I41464_7230829745
c:\programdata\MPK\1\I41464_7265552778
c:\programdata\MPK\1\I41464_7300275116
c:\programdata\MPK\1\I41464_7334998611
c:\programdata\MPK\1\I41464_7369720949
c:\programdata\MPK\1\I41464_7404444213
c:\programdata\MPK\1\I41464_7439166551
c:\programdata\MPK\1\I41464_7473890509
c:\programdata\MPK\1\I41464_7508612963
c:\programdata\MPK\1\I41464_7543335301
c:\programdata\MPK\1\I41464_8029455787
c:\programdata\MPK\1\I41464_8064179167
c:\programdata\MPK\1\I41464_8098900926
c:\programdata\MPK\1\I41464_8133624421
c:\programdata\MPK\1\I41464_8168347106
c:\programdata\MPK\1\I41464_8203070255
c:\programdata\MPK\1\I41464_8237792708
c:\programdata\MPK\1\I41464_8272515857
c:\programdata\MPK\1\I41464_8307238426
c:\programdata\MPK\1\I41464_8341961227
c:\programdata\MPK\1\I41464_8376684375
c:\programdata\MPK\1\I41464_8411407639
c:\programdata\MPK\1\I41464_8446129977
c:\programdata\MPK\1\I41464_8480853472
c:\programdata\MPK\1\I41464_8515575347
c:\programdata\MPK\1\I41464_8550298727
c:\programdata\MPK\1\I41464_8585021065
c:\programdata\MPK\1\I41464_8619743981
c:\programdata\MPK\1\I41464_8654466782
c:\programdata\MPK\1\I41464_8689190393
c:\programdata\MPK\1\I41464_8723913426
c:\programdata\MPK\1\I41464_8758635301
c:\programdata\MPK\1\I41464_8793359028
c:\programdata\MPK\1\I41464_8828081713
c:\programdata\MPK\1\I41464_8862804398
c:\programdata\MPK\1\I41464_8897526852
c:\programdata\MPK\1\I41464_8932250231
c:\programdata\MPK\1\I41464_8966972917
c:\programdata\MPK\1\I41464_9001695370
c:\programdata\MPK\1\I41464_9036418634
c:\programdata\MPK\1\I41464_9071141204
c:\programdata\MPK\1\I41464_9105864005
c:\programdata\MPK\1\I41464_9140587153
c:\programdata\MPK\1\I41464_9175310069
c:\programdata\MPK\1\I41464_9210032523
c:\programdata\MPK\1\I41464_9244755903
c:\programdata\MPK\1\I41464_9279479167
c:\programdata\MPK\1\I41464_9314201736
c:\programdata\MPK\1\I41464_9348924653
c:\programdata\MPK\1\I41464_9383646991
c:\programdata\MPK\1\I41464_9418370139
c:\programdata\MPK\1\I41464_9453093171
c:\programdata\MPK\1\I41464_9487816088
c:\programdata\MPK\1\I41464_9522538889
c:\programdata\MPK\1\I41464_9557261227
c:\programdata\MPK\1\I41464_9591984028
c:\programdata\MPK\1\I41464_9626707407
c:\programdata\MPK\1\I41465_3532753125
c:\programdata\MPK\1\I41465_3567475463
c:\programdata\MPK\1\I41465_3602198843
c:\programdata\MPK\1\I41465_3636921991
c:\programdata\MPK\1\I41465_3671644676
c:\programdata\MPK\1\I41465_3706366898
c:\programdata\MPK\1\I41465_3741089815
c:\programdata\MPK\1\I41465_3775813657
c:\programdata\MPK\1\I41465_3810535532
c:\programdata\MPK\1\I41465_3845259375
c:\programdata\MPK\1\I41465_3879981250
c:\programdata\MPK\1\I41465_3914704398
c:\programdata\MPK\1\I41465_3949426968
c:\programdata\MPK\1\I41465_3984150347
c:\programdata\MPK\1\I41465_4018872685
c:\programdata\MPK\1\I41465_4053595833
c:\programdata\MPK\1\I41465_4088318403
c:\programdata\MPK\1\I41465_4123041782
c:\programdata\MPK\1\I41465_4157764120
c:\programdata\MPK\1\I41465_4192487500
c:\programdata\MPK\1\I41465_4227209838
c:\programdata\MPK\1\I41465_4261932986
c:\programdata\MPK\1\I41465_4296655556
c:\programdata\MPK\1\I41465_4331378935
c:\programdata\MPK\1\I41465_4366102315
c:\programdata\MPK\1\I41465_4400824653
c:\programdata\MPK\1\I41465_4435548032
c:\programdata\MPK\1\I41465_4470269792
c:\programdata\MPK\1\I41465_4504992824
c:\programdata\MPK\1\I41465_4539715625
c:\programdata\MPK\1\I41465_4574439005
c:\programdata\MPK\1\I41465_4609161343
c:\programdata\MPK\1\I41465_4643884144
c:\programdata\MPK\1\I41465_4678607060
c:\programdata\MPK\1\I41465_4713329861
c:\programdata\MPK\1\I41465_4886944213
c:\programdata\MPK\1\I41465_4921667593
c:\programdata\MPK\1\I41465_4956390046
c:\programdata\MPK\1\I41465_4991112847
c:\programdata\MPK\1\I41465_5025835648
c:\programdata\MPK\1\I41465_5060558565
c:\programdata\MPK\1\I41465_5095281366
c:\programdata\MPK\1\I41465_5130004745
c:\programdata\MPK\1\I41465_5164727662
c:\programdata\MPK\1\I41465_5199450694
c:\programdata\MPK\1\I41465_5234172801
c:\programdata\MPK\1\I41465_5268895718
c:\programdata\MPK\1\I41465_5303619329
c:\programdata\MPK\1\I41465_5338341435
c:\programdata\MPK\1\I41465_5373064699
c:\programdata\MPK\1\I41465_5407787153
c:\programdata\MPK\1\I41465_5442510532
c:\programdata\MPK\1\I41465_5477232870
c:\programdata\MPK\1\I41465_5511956250
c:\programdata\MPK\1\I41465_5546678588
c:\programdata\MPK\1\I41465_5581401736
c:\programdata\MPK\1\I41465_5616124306
c:\programdata\MPK\1\I41465_5650847685
c:\programdata\MPK\1\I41465_5685570023
c:\programdata\MPK\1\I41465_5720293403
c:\programdata\MPK\1\I41465_5755015741
c:\programdata\MPK\1\I41465_5789738542
c:\programdata\MPK\1\I41465_5824461574
c:\programdata\MPK\1\I41465_5859184838
c:\programdata\MPK\1\I41465_5893907986
c:\programdata\MPK\1\I41465_5928630324
c:\programdata\MPK\1\I41465_5963352894
c:\programdata\MPK\1\I41465_5998076273
c:\programdata\MPK\1\I41465_6032799190
c:\programdata\MPK\1\I41465_6067521528
c:\programdata\MPK\1\I41465_6102244907
c:\programdata\MPK\1\I41465_6136967245
c:\programdata\MPK\1\I41465_6171690162
c:\programdata\MPK\1\I41465_6206412963
c:\programdata\MPK\1\I41465_6241135764
c:\programdata\MPK\1\I41465_6275858681
c:\programdata\MPK\1\I41465_6310581829
c:\programdata\MPK\1\I41465_6345304398
c:\programdata\MPK\1\I41465_6380027778
c:\programdata\MPK\1\I41465_6414750116
c:\programdata\MPK\1\I41465_6449473264
c:\programdata\MPK\1\I41465_6484195949
c:\programdata\MPK\1\I41465_6518919213
c:\programdata\MPK\1\I41465_6553641551
c:\programdata\MPK\1\I41465_6588364931
c:\programdata\MPK\1\I41465_6623087269
c:\programdata\MPK\1\I41465_6657810069
c:\programdata\MPK\1\I41465_6692533796
c:\programdata\MPK\1\I41465_6727256481
c:\programdata\MPK\1\I41465_6761979282
c:\programdata\MPK\1\I41465_6796701620
c:\programdata\MPK\1\I41465_6831424537
c:\programdata\MPK\1\I41465_6866147338
c:\programdata\MPK\1\I41465_6900871181
c:\programdata\MPK\1\I41465_6935593056
c:\programdata\MPK\1\I41465_6970315972
c:\programdata\MPK\1\I41465_7005048495
c:\programdata\MPK\1\I41465_7039761690
c:\programdata\MPK\1\I41465_7074484491
c:\programdata\MPK\1\I41465_7109207870
c:\programdata\MPK\1\I41465_7143930324
c:\programdata\MPK\1\I41465_7178653588
c:\programdata\MPK\1\I41465_7213375926
c:\programdata\MPK\1\I41465_7248099074
c:\programdata\MPK\1\I41465_7282821644
c:\programdata\MPK\1\I41465_7317544560
c:\programdata\MPK\1\I41465_7352267477
c:\programdata\MPK\1\I41465_7386990856
c:\programdata\MPK\1\I41465_7421713079
c:\programdata\MPK\1\I41465_7456436458
c:\programdata\MPK\1\I41465_7491159607
c:\programdata\MPK\1\I41465_7525881944
c:\programdata\MPK\1\I41465_7560605556
c:\programdata\MPK\1\I41465_7595327431
c:\programdata\MPK\1\I41465_7630051157
c:\programdata\MPK\1\I41465_7664773148
c:\programdata\MPK\1\I41465_7699496759
c:\programdata\MPK\1\I41465_7734218866
c:\programdata\MPK\1\I41465_7768941898
c:\programdata\MPK\1\I41465_7803664583
c:\programdata\MPK\1\I41465_7838387963
c:\programdata\MPK\1\I41465_7873110301
c:\programdata\MPK\1\I41465_7907833681
c:\programdata\MPK\1\I41465_7942556019
c:\programdata\MPK\1\I41465_7977278819
c:\programdata\MPK\1\I41465_8012001852
c:\programdata\MPK\1\I41465_8046725116
c:\programdata\MPK\1\I41465_8081447454
c:\programdata\MPK\1\I41465_8116170370
c:\programdata\MPK\1\I41465_8150893171
c:\programdata\MPK\1\I41465_8185616551
c:\programdata\MPK\1\I41465_8220339005
c:\programdata\MPK\1\I41465_8255062153
c:\programdata\MPK\1\I41465_8289785417
c:\programdata\MPK\1\I41465_8324507523
c:\programdata\MPK\1\I41465_8359230903
c:\programdata\MPK\1\I41465_8393953241
c:\programdata\MPK\1\I41465_8428676852
c:\programdata\MPK\1\I41465_8463398958
c:\programdata\MPK\1\I41465_8498122338
c:\programdata\MPK\1\I41465_8532844676
c:\programdata\MPK\1\I41465_8567568171
c:\programdata\MPK\1\I41465_8602290394
c:\programdata\MPK\1\I41465_8637013194
c:\programdata\MPK\1\I41465_8671736227
c:\programdata\MPK\1\I41465_8706459491
c:\programdata\MPK\1\I41465_8741181829
c:\programdata\MPK\1\I41465_8775905208
c:\programdata\MPK\1\I41465_8810627546
c:\programdata\MPK\1\I41465_8845350926
c:\programdata\MPK\1\I41465_8880073380
c:\programdata\MPK\1\I41465_8914796412
c:\programdata\MPK\1\I41465_8949520023
c:\programdata\MPK\1\I41465_8984242130
c:\programdata\MPK\1\I41465_9018964815
c:\programdata\MPK\1\I41465_9053688079
c:\programdata\MPK\1\I41465_9088410995
c:\programdata\MPK\1\I41465_9123133333
c:\programdata\MPK\1\I41465_9157856250
c:\programdata\MPK\1\I41465_9192579051
c:\programdata\MPK\1\I41465_9227302893
c:\programdata\MPK\1\I41465_9262024769
c:\programdata\MPK\1\I41465_9296748032
c:\programdata\MPK\1\I41465_9331470486
c:\programdata\MPK\1\I41465_9366193403
c:\programdata\MPK\1\I41465_9400916204
c:\programdata\MPK\1\I41465_9435639583
c:\programdata\MPK\1\I41465_9470361921
c:\programdata\MPK\1\I41465_9505085301
c:\programdata\MPK\1\I41465_9539807755
c:\programdata\MPK\1\I41465_9574531019
c:\programdata\MPK\1\I41465_9609253356
c:\programdata\MPK\1\I41465_9643976505
c:\programdata\MPK\1\I41465_9678699074
c:\programdata\MPK\1\I41465_9713422454
c:\programdata\MPK\1\I41465_9748145255
c:\programdata\MPK\1\I41465_9782867824
c:\programdata\MPK\1\I41465_9817591551
c:\programdata\MPK\1\I41465_9852313426
c:\programdata\MPK\1\I41465_9887036574
c:\programdata\MPK\1\I41465_9921759144
c:\programdata\MPK\1\I41465_9956482060
c:\programdata\MPK\1\I41466_3326016551
c:\programdata\MPK\1\I41466_3360739468
c:\programdata\MPK\1\I41466_3395462269
c:\programdata\MPK\1\I41466_3430185648
c:\programdata\MPK\1\I41466_3464908565
c:\programdata\MPK\1\I41466_3499631366
c:\programdata\MPK\1\I41466_3534353819
c:\programdata\MPK\1\I41466_3569076620
c:\programdata\MPK\1\I41466_3603799653
c:\programdata\MPK\1\I41466_3638522222
c:\programdata\MPK\1\I41466_3673245602
c:\programdata\MPK\1\I41466_3707968056
c:\programdata\MPK\1\I41466_3742690972
c:\programdata\MPK\1\I41466_3777413773
c:\programdata\MPK\1\I41466_3812137153
c:\programdata\MPK\1\I41466_3846859491
c:\programdata\MPK\1\I41466_3881582292
c:\programdata\MPK\1\I41466_3916305208
c:\programdata\MPK\1\I41466_3951028125
c:\programdata\MPK\1\I41466_3985750926
c:\programdata\MPK\1\I41466_4020474306
c:\programdata\MPK\1\I41466_4055196644
c:\programdata\MPK\1\I41466_4089919907
c:\programdata\MPK\1\I41466_4124642361
c:\programdata\MPK\1\I41466_4159365741
c:\programdata\MPK\1\I41466_4194089120
c:\programdata\MPK\1\I41466_4228811458
c:\programdata\MPK\1\I41466_4263534259
c:\programdata\MPK\1\I41466_4298256597
c:\programdata\MPK\1\I41466_4332979630
c:\programdata\MPK\1\I41466_4367702431
c:\programdata\MPK\1\I41466_4402425463
c:\programdata\MPK\1\I41466_4437148148
c:\programdata\MPK\1\I41466_4471870949
c:\programdata\MPK\1\I41466_4506593750
c:\programdata\MPK\1\I41466_4541316667
c:\programdata\MPK\1\I41466_4576039583
c:\programdata\MPK\1\I41466_4610762963
c:\programdata\MPK\1\I41466_4645485301
c:\programdata\MPK\1\I41466_4680208796
c:\programdata\MPK\1\I41466_4714931019
c:\programdata\MPK\1\I41466_4749654282
c:\programdata\MPK\1\I41466_4784376736
c:\programdata\MPK\1\I41466_4819099653
c:\programdata\MPK\1\I41466_4853822454
c:\programdata\MPK\1\I41466_4888545370
c:\programdata\MPK\1\I41466_4923268982
c:\programdata\MPK\1\I41466_4957991551
c:\programdata\MPK\1\I41466_4992714005
c:\programdata\MPK\1\I41466_5027437037
c:\programdata\MPK\1\I41466_5062159954
c:\programdata\MPK\1\I41466_5096882523
c:\programdata\MPK\1\I41466_5131605671
c:\programdata\MPK\1\I41466_5166328125
c:\programdata\MPK\1\I41466_5201051157
c:\programdata\MPK\1\I41466_5235773958
c:\programdata\MPK\1\I41466_5270496759
c:\programdata\MPK\1\I41466_5305219676
c:\programdata\MPK\1\I41466_5339943056
c:\programdata\MPK\1\I41466_5374665394
c:\programdata\MPK\1\I41466_5409388657
c:\programdata\MPK\1\I41466_5444111111
c:\programdata\MPK\1\I41466_5478834491
c:\programdata\MPK\1\I41466_5513556829
c:\programdata\MPK\1\I41466_5548279745
c:\programdata\MPK\1\I41466_5583002546
c:\programdata\MPK\1\I41466_5617725579
c:\programdata\MPK\1\I41466_5652448264
c:\programdata\MPK\1\I41466_5687171644
c:\programdata\MPK\1\I41466_5721894560
c:\programdata\MPK\1\I41466_5756616898
c:\programdata\MPK\1\I41466_5791340278
c:\programdata\MPK\1\I41466_5826062500
c:\programdata\MPK\1\I41466_5860785764
c:\programdata\MPK\1\I41466_5895508333
c:\programdata\MPK\1\I41466_5930231134
c:\programdata\MPK\1\I41466_5964954051
c:\programdata\MPK\1\I41466_5999677315
c:\programdata\MPK\1\I41466_6034399653
c:\programdata\MPK\1\I41466_6069123032
c:\programdata\MPK\1\I41466_6126993171
c:\programdata\MPK\1\I41466_6161715972
c:\programdata\MPK\1\I41466_6196438310
c:\programdata\MPK\1\I41466_6231161111
c:\programdata\MPK\1\I41466_6265884606
c:\programdata\MPK\1\I41466_6300606944
c:\programdata\MPK\1\I41466_6335329745
c:\programdata\MPK\1\I41466_6370052662
c:\programdata\MPK\1\I41466_6404775463
c:\programdata\MPK\1\I41466_6439498380
c:\programdata\MPK\1\I41466_6474221528
c:\programdata\MPK\1\I41466_6508944097
c:\programdata\MPK\1\I41466_6543667014
c:\programdata\MPK\1\I41466_6578389815
c:\programdata\MPK\1\I41466_6613112616
c:\programdata\MPK\1\I41466_6647835532
c:\programdata\MPK\1\I41466_6682558681
c:\programdata\MPK\1\I41466_6717281250
c:\programdata\MPK\1\I41466_6752004630
c:\programdata\MPK\1\I41466_6786726968
c:\programdata\MPK\1\I41466_6821450347
c:\programdata\MPK\1\I41466_6856172685
c:\programdata\MPK\1\I41466_6890895718
c:\programdata\MPK\1\I41466_6925618750
c:\programdata\MPK\1\I41466_6960341667
c:\programdata\MPK\1\I41466_6995064120
c:\programdata\MPK\1\I41466_7029787037
c:\programdata\MPK\1\I41466_7064509838
c:\programdata\MPK\1\I41466_7099232639
c:\programdata\MPK\1\I41466_7133956134
c:\programdata\MPK\1\I41466_7168678472
c:\programdata\MPK\1\I41466_7203401620
c:\programdata\MPK\1\I41466_7238124190
c:\programdata\MPK\1\I41466_7272847338
c:\programdata\MPK\1\I41466_7307569907
c:\programdata\MPK\1\I41466_7342292824
c:\programdata\MPK\1\I41466_7377015625
c:\programdata\MPK\1\I41466_7411739005
c:\programdata\MPK\1\I41466_7446461343
c:\programdata\MPK\1\I41466_7481184259
c:\programdata\MPK\1\I41466_7515907060
c:\programdata\MPK\1\I41466_7550630093
c:\programdata\MPK\1\I41466_7585353356
c:\programdata\MPK\1\I41466_7620075694
c:\programdata\MPK\1\I41466_7654798495
c:\programdata\MPK\1\I41466_7689521644
c:\programdata\MPK\1\I41466_7724244560
c:\programdata\MPK\1\I41466_7758967130
c:\programdata\MPK\1\I41466_7793690046
c:\programdata\MPK\1\I41466_7828412847
c:\programdata\MPK\1\I41466_7863135648
c:\programdata\MPK\1\I41466_7897858565
c:\programdata\MPK\1\I41466_7932581366
c:\programdata\MPK\1\I41466_7967304282
c:\programdata\MPK\1\I41466_8002027199
c:\programdata\MPK\1\I41466_8036750000
c:\programdata\MPK\1\I41466_8071473380
c:\programdata\MPK\1\I41466_8106195718
c:\programdata\MPK\1\I41466_8140918519
c:\programdata\MPK\1\I41466_8175641435
c:\programdata\MPK\1\I41466_8210364815
c:\programdata\MPK\1\I41466_8245087153
c:\programdata\MPK\1\I41466_8573695023
c:\programdata\MPK\1\I41466_8608417824
c:\programdata\MPK\1\I41466_8643140625
c:\programdata\MPK\1\I41466_8677863542
c:\programdata\MPK\1\I41466_8712586921
c:\programdata\MPK\1\I41466_8747309259
c:\programdata\MPK\1\I41466_8782032639
c:\programdata\MPK\1\I41466_8816754977
c:\programdata\MPK\1\I41466_8851477778
c:\programdata\MPK\1\I41466_8886201736
c:\programdata\MPK\1\I41466_8920923958
c:\programdata\MPK\1\I41466_8955646991
c:\programdata\MPK\1\I41466_8990369329
c:\programdata\MPK\1\I41466_9025092824
c:\programdata\MPK\1\I41466_9059815046
c:\programdata\MPK\1\I41466_9094538194
c:\programdata\MPK\1\I41466_9129260764
c:\programdata\MPK\1\I41466_9163983681
c:\programdata\MPK\1\I41466_9198706481
c:\programdata\MPK\1\I41466_9233429282
c:\programdata\MPK\1\I41466_9268152199
c:\programdata\MPK\1\I41466_9302875000
c:\programdata\MPK\1\I41466_9337597917
c:\programdata\MPK\1\I41466_9372321296
c:\programdata\MPK\1\I41466_9407043634
c:\programdata\MPK\1\I41466_9441766551
c:\programdata\MPK\1\I41466_9476489352
c:\programdata\MPK\1\I41466_9511212731
c:\programdata\MPK\1\I41466_9545935069
c:\programdata\MPK\1\I41466_9580658333
c:\programdata\MPK\1\I41466_9615380787
c:\programdata\MPK\1\I41466_9650103935
c:\programdata\MPK\1\I41466_9684827083
c:\programdata\MPK\1\I41466_9719549884
c:\programdata\MPK\1\I41466_9754272801
c:\programdata\MPK\1\I41466_9788995139
c:\programdata\MPK\1\I41466_9823718287
c:\programdata\MPK\1\I41466_9858440856
c:\programdata\MPK\1\I41466_9893163657
c:\programdata\MPK\1\I41466_9927886574
c:\programdata\MPK\1\I41466_9962609375
c:\programdata\MPK\1\I41466_9997332292
c:\programdata\MPK\1\I41467_0032055440
c:\programdata\MPK\1\I41467_0066778009
c:\programdata\MPK\1\I41467_0101501389
c:\programdata\MPK\1\I41467_0136223727
c:\programdata\MPK\1\I41467_0170946875
c:\programdata\MPK\1\I41467_0205669444
c:\programdata\MPK\1\I41467_0240401968
c:\programdata\MPK\1\I41467_0275115162
c:\programdata\MPK\1\I41467_0309838542
c:\programdata\MPK\1\I41467_0344560880
c:\programdata\MPK\1\I41467_0379283796
c:\programdata\MPK\1\I41467_0414006597
c:\programdata\MPK\1\I41467_0448729514
c:\programdata\MPK\1\I41467_0483452431
c:\programdata\MPK\1\I41467_0518175231
c:\programdata\MPK\1\I41467_0552898032
c:\programdata\MPK\1\I41467_0587620949
c:\programdata\MPK\1\I41467_0622343750
c:\programdata\MPK\1\I41467_0657066667
c:\programdata\MPK\1\I41467_0691790046
c:\programdata\MPK\1\I41467_0726512384
c:\programdata\MPK\1\I41467_0761235532
c:\programdata\MPK\1\I41467_0795958102
c:\programdata\MPK\1\I41467_0830681250
c:\programdata\MPK\1\I41467_0865403935
c:\programdata\MPK\1\I41467_0900127199
c:\programdata\MPK\1\I41467_0934849537
c:\programdata\MPK\1\I41467_0969572685
c:\programdata\MPK\1\I41467_1004295255
c:\programdata\MPK\1\I41467_1039018171
c:\programdata\MPK\1\I41467_1073740972
c:\programdata\MPK\1\I41467_1108464005
c:\programdata\MPK\1\I41467_1143186690
c:\programdata\MPK\1\I41467_1177909606
c:\programdata\MPK\1\I41467_4304633681
c:\programdata\MPK\1\I41467_4339356250
c:\programdata\MPK\1\I41467_4374079630
c:\programdata\MPK\1\I41467_4408801968
c:\programdata\MPK\1\I41467_4443524884
c:\programdata\MPK\1\I41467_4478247685
c:\programdata\MPK\1\I41467_4512970486
c:\programdata\MPK\1\I41467_4547693403
c:\programdata\MPK\1\I41467_4582416551
c:\programdata\MPK\1\I41467_4617139120
c:\programdata\MPK\1\I41467_4651862269
c:\programdata\MPK\1\I41467_4686584838
c:\programdata\MPK\1\I41467_4721308218
c:\programdata\MPK\1\I41467_4756030671
c:\programdata\MPK\1\I41467_4790753588
c:\programdata\MPK\1\I41467_4825476273
c:\programdata\MPK\1\I41467_4860199190
c:\programdata\MPK\1\I41467_4894921991
c:\programdata\MPK\1\I41467_4929645370
c:\programdata\MPK\1\I41467_4964367824
c:\programdata\MPK\1\I41467_4999091088
c:\programdata\MPK\1\I41467_5033813542
c:\programdata\MPK\1\I41467_5068536343
c:\programdata\MPK\1\I41467_5103260185
c:\programdata\MPK\1\I41467_5137982060
c:\programdata\MPK\1\I41467_5172705556
c:\programdata\MPK\1\I41467_5207427778
c:\programdata\MPK\1\I41467_5242151157
c:\programdata\MPK\1\I41467_5276873495
c:\programdata\MPK\1\I41467_5311596412
c:\programdata\MPK\1\I41467_5346319213
c:\programdata\MPK\1\I41467_5381042014
c:\programdata\MPK\1\I41467_5415764931
c:\programdata\MPK\1\I41467_5450487963
c:\programdata\MPK\1\I41467_5485210648
c:\programdata\MPK\1\I41467_5519934028
c:\programdata\MPK\1\I41467_5554656366
c:\programdata\MPK\1\I41467_5589379745
c:\programdata\MPK\1\I41467_5624102083
c:\programdata\MPK\1\I41467_5658825232
c:\programdata\MPK\1\I41467_5693548380
c:\programdata\MPK\1\I41467_5728271181
c:\programdata\MPK\1\I41467_5762994444
c:\programdata\MPK\1\I41467_5797716898
c:\programdata\MPK\1\I41467_5832439352
c:\programdata\MPK\1\I41467_5867162037
c:\programdata\MPK\1\I41467_5901886111
c:\programdata\MPK\1\I41467_5936607870
c:\programdata\MPK\1\I41467_6040776505
c:\programdata\MPK\1\I41467_6075499306
c:\programdata\MPK\1\I41467_6110222338
c:\programdata\MPK\1\I41467_6144945023
c:\programdata\MPK\1\I41467_6179668403
c:\programdata\MPK\1\I41467_6214390741
c:\programdata\MPK\1\I41467_6249113657
c:\programdata\MPK\1\I41467_6283836458
c:\programdata\MPK\1\I41467_6318559722
c:\programdata\MPK\1\I41467_6353282292
c:\programdata\MPK\1\I41467_6388005556
c:\programdata\MPK\1\I41467_6422728009
c:\programdata\MPK\1\I41467_6457450810
c:\programdata\MPK\1\I41467_6492174653
c:\programdata\MPK\1\I41467_6526896991
c:\programdata\MPK\1\I41467_6561619444
c:\programdata\MPK\1\I41467_6596342245
c:\programdata\MPK\1\I41467_6631065625
c:\programdata\MPK\1\I41467_6665787963
c:\programdata\MPK\1\I41467_6700511111
c:\programdata\MPK\1\I41467_6735233681
c:\programdata\MPK\1\I41467_6769957060
c:\programdata\MPK\1\I41467_6804679398
c:\programdata\MPK\1\I41467_6839402778
c:\programdata\MPK\1\I41467_6874125116
c:\programdata\MPK\1\I41467_6908848495
c:\programdata\MPK\1\I41467_6943570833
c:\programdata\MPK\1\I41467_6978294213
c:\programdata\MPK\1\I41467_7013016551
c:\programdata\MPK\1\I41467_7047739931
c:\programdata\MPK\1\I41467_7082462269
c:\programdata\MPK\1\I41467_7117185648
c:\programdata\MPK\1\I41467_7151907986
c:\programdata\MPK\1\I41467_7186630903
c:\programdata\MPK\1\I41467_7221354051
c:\programdata\MPK\1\I41467_7256076620
c:\programdata\MPK\1\I41467_7290799537
c:\programdata\MPK\1\I41467_7325522338
c:\programdata\MPK\1\I41467_7360246181
c:\programdata\MPK\1\I41467_7394967940
c:\programdata\MPK\1\I41467_7429690972
c:\programdata\MPK\1\I41467_7464413773
c:\programdata\MPK\1\I41467_7499136690
c:\programdata\MPK\1\I41467_7533859491
c:\programdata\MPK\1\I41467_7568582292
c:\programdata\MPK\1\I41467_7603305208
c:\programdata\MPK\1\I41467_7638028356
c:\programdata\MPK\1\I41467_7672750926
c:\programdata\MPK\1\I41467_7707474306
c:\programdata\MPK\1\I41467_7742196644
c:\programdata\MPK\1\I41467_7776920023
c:\programdata\MPK\1\I41467_7811642361
c:\programdata\MPK\1\I41467_7846365278
c:\programdata\MPK\1\I41467_7881088194
c:\programdata\MPK\1\I41467_7915810995
c:\programdata\MPK\1\I41467_7950533912
c:\programdata\MPK\1\I41467_7985257176
c:\programdata\MPK\1\I41467_7986948611
c:\programdata\MPK\1\I41467_8019979514
c:\programdata\MPK\1\I41467_8054702315
c:\programdata\MPK\1\I41467_8089425347
c:\programdata\MPK\1\I41467_8124148148
c:\programdata\MPK\1\I41467_8158871528
c:\programdata\MPK\1\I41467_8193593866
c:\programdata\MPK\1\I41467_8228317245
c:\programdata\MPK\1\I41467_8263039583
c:\programdata\MPK\1\I41467_8297762500
c:\programdata\MPK\1\I41467_8332042130
c:\programdata\MPK\1\I41467_8332194560
c:\programdata\MPK\1\I41467_8332354514
c:\programdata\MPK\1\I41467_8332485301
c:\programdata\MPK\1\I41467_8367208218
c:\programdata\MPK\1\I41467_8401931019
c:\programdata\MPK\1\I41467_8436654167
c:\programdata\MPK\1\I41467_8471376736
c:\programdata\MPK\1\I41467_8506100116
c:\programdata\MPK\1\I41467_8540822454
c:\programdata\MPK\1\I41467_8575545370
c:\programdata\MPK\1\I41467_8610268171
c:\programdata\MPK\1\I41467_8644991088
c:\programdata\MPK\1\I41467_8679713889
c:\programdata\MPK\1\I41467_8714437384
c:\programdata\MPK\1\I41467_8749160185
c:\programdata\MPK\1\I41467_8783882986
c:\programdata\MPK\1\I41467_8818605787
c:\programdata\MPK\1\I41467_8853328472
c:\programdata\MPK\1\I41467_8888052083
c:\programdata\MPK\1\I41467_8922773843
c:\programdata\MPK\1\I41467_8957497685
c:\programdata\MPK\1\I41467_8992219676
c:\programdata\MPK\1\I41467_9026942593
c:\programdata\MPK\1\I41467_9061665394
c:\programdata\MPK\1\I41467_9096388194
c:\programdata\MPK\1\I41467_9131111111
c:\programdata\MPK\1\I41467_9165834143
c:\programdata\MPK\1\I41467_9200556829
c:\programdata\MPK\1\I41467_9235279745
c:\programdata\MPK\1\I41467_9270002546
c:\programdata\MPK\1\I41467_9304725694
c:\programdata\MPK\1\I41467_9339448264
c:\programdata\MPK\1\I41467_9374171528
c:\programdata\MPK\1\I41467_9408893981
c:\programdata\MPK\1\I41467_9443617361
c:\programdata\MPK\1\I41467_9478339699
c:\programdata\MPK\1\I41467_9513063079
c:\programdata\MPK\1\I41467_9547785995
c:\programdata\MPK\1\I41467_9582508449
c:\programdata\MPK\1\I41467_9617231481
c:\programdata\MPK\1\I41467_9651954051
c:\programdata\MPK\1\I41467_9686676852
c:\programdata\MPK\1\I41467_9721399769
c:\programdata\MPK\1\I41467_9756123148
c:\programdata\MPK\1\I41467_9790845370
c:\programdata\MPK\1\I41467_9825568519
c:\programdata\MPK\1\I41467_9860291204
c:\programdata\MPK\1\I41467_9895014005
c:\programdata\MPK\1\I41467_9929736921
c:\programdata\MPK\1\I41467_9999182639
c:\programdata\MPK\1\I41468_0033906019
c:\programdata\MPK\1\I41468_0068628356
c:\programdata\MPK\1\I41468_0103351505
c:\programdata\MPK\1\I41468_0138074190
c:\programdata\MPK\1\I41468_0276965509
c:\programdata\MPK\1\I41468_0311688889
c:\programdata\MPK\1\I41468_0589471296
c:\programdata\MPK\1\I41468_0624194792
c:\programdata\MPK\1\I41468_0693639815
c:\programdata\MPK\1\I41468_0728362731
c:\programdata\MPK\1\I41468_0867254282
c:\programdata\MPK\1\I41468_0901977546
c:\programdata\MPK\1\I41468_1006145833
c:\programdata\MPK\1\I41468_1040868519
c:\programdata\MPK\1\I41468_1075591898
c:\programdata\MPK\1\I41468_1249205671
c:\programdata\MPK\1\I41468_1283929051
c:\programdata\MPK\1\I41468_1318651389
c:\programdata\MPK\1\I41468_1353374769
c:\programdata\MPK\1\I41468_1422820023
c:\programdata\MPK\1\I41468_4615144097
c:\programdata\MPK\1\I41468_4649866435
c:\programdata\MPK\1\I41468_4684589815
c:\programdata\MPK\1\I41468_4719312153
c:\programdata\MPK\1\I41468_4754035069
c:\programdata\MPK\1\I41468_4788757870
c:\programdata\MPK\1\I41468_4823481250
c:\programdata\MPK\1\I41468_4858203588
c:\programdata\MPK\1\I41468_4892926968
c:\programdata\MPK\1\I41468_4927649306
c:\programdata\MPK\1\I41468_4962372685
c:\programdata\MPK\1\I41468_4997095023
c:\programdata\MPK\1\I41468_5031818403
c:\programdata\MPK\1\I41468_5066540741
c:\programdata\MPK\1\I41468_5101264120
c:\programdata\MPK\1\I41468_5135986458
c:\programdata\MPK\1\I41468_5170709838
c:\programdata\MPK\1\I41468_5205432870
c:\programdata\MPK\1\I41468_5240155556
c:\programdata\MPK\1\I41468_5274877894
c:\programdata\MPK\1\I41468_5309601273
c:\programdata\MPK\1\I41468_5344323611
c:\programdata\MPK\1\I41468_5379046412
c:\programdata\MPK\1\I41468_5413770486
c:\programdata\MPK\1\I41468_5448492245
c:\programdata\MPK\1\I41468_5483215162
c:\programdata\MPK\1\I41468_5517937963
c:\programdata\MPK\1\I41468_5552661343
c:\programdata\MPK\1\I41468_5587383681
c:\programdata\MPK\1\I41468_5622107060
c:\programdata\MPK\1\I41468_5656829398
c:\programdata\MPK\1\I41468_5691552315
c:\programdata\MPK\1\I41468_5726275116
c:\programdata\MPK\1\I41468_5760998495
c:\programdata\MPK\1\I41468_5795720833
c:\programdata\MPK\1\I41468_5830443981
c:\programdata\MPK\1\I41468_5865166667
c:\programdata\MPK\1\I41468_5899889931
c:\programdata\MPK\1\I41468_5934613310
c:\programdata\MPK\1\I41468_5969335648
c:\programdata\MPK\1\I41468_6004058333
c:\programdata\MPK\1\I41468_6038780787
c:\programdata\MPK\1\I41468_6073504861
c:\programdata\MPK\1\I41468_6108226620
c:\programdata\MPK\1\I41468_6142950463
c:\programdata\MPK\1\I41468_6177672338
c:\programdata\MPK\1\I41468_6212395255
c:\programdata\MPK\1\I41468_6247118056
c:\programdata\MPK\1\I41468_6281841435
c:\programdata\MPK\1\I41468_6316563773
c:\programdata\MPK\1\I41468_6351287153
c:\programdata\MPK\1\I41468_6524900926
c:\programdata\MPK\1\I41468_6559623843
c:\programdata\MPK\1\I41468_6594346644
c:\programdata\MPK\1\I41468_6629070023
c:\programdata\MPK\1\I41468_6663792361
c:\programdata\MPK\1\I41468_6698515741
c:\programdata\MPK\1\I41468_6733238657
c:\programdata\MPK\1\I41468_6767961458
c:\programdata\MPK\1\I41468_6802684606
c:\programdata\MPK\1\I41468_6837406713
c:\programdata\MPK\1\I41468_6872129861
c:\programdata\MPK\1\I41468_6906852315
c:\programdata\MPK\1\I41468_6941575694
c:\programdata\MPK\1\I41468_6976298148
c:\programdata\MPK\1\I41468_7011021065
c:\programdata\MPK\1\I41468_7045743866
c:\programdata\MPK\1\I41468_7080467014
c:\programdata\MPK\1\I41468_7115189583
c:\programdata\MPK\1\I41468_7149912847
c:\programdata\MPK\1\I41468_7184635301
c:\programdata\MPK\1\I41468_7219358218
c:\programdata\MPK\1\I41468_7254081019
c:\programdata\MPK\1\I41468_7288804398
c:\programdata\MPK\1\I41468_7323526736
c:\programdata\MPK\1\I41468_7358249537
c:\programdata\MPK\1\I41468_7392972569
c:\programdata\MPK\1\I41468_7427695833
c:\programdata\MPK\1\I41468_7462418519
c:\programdata\MPK\1\I41468_7497141319
c:\programdata\MPK\1\I41468_7531863889
c:\programdata\MPK\1\I41468_7566587269
c:\programdata\MPK\1\I41468_7601309838
c:\programdata\MPK\1\I41468_7636032523
c:\programdata\MPK\1\I41468_7670755440
c:\programdata\MPK\1\I41468_7705478241
c:\programdata\MPK\1\I41468_7740201042
c:\programdata\MPK\1\I41468_7774923958
c:\programdata\MPK\1\I41468_7809647338
c:\programdata\MPK\1\I41468_7844369676
c:\programdata\MPK\1\I41468_7879092593
c:\programdata\MPK\1\I41468_7913815394
c:\programdata\MPK\1\I41468_7948538194
c:\programdata\MPK\1\I41468_7983261111
c:\programdata\MPK\1\I41468_8017983912
c:\programdata\MPK\1\I41468_8052706829
c:\programdata\MPK\1\I41468_8087429977
c:\programdata\MPK\1\I41468_8122152546
c:\programdata\MPK\1\I41468_8156875926
c:\programdata\MPK\1\I41468_8191598264
c:\programdata\MPK\1\I41468_8226321065
c:\programdata\MPK\1\I41468_8261044329
c:\programdata\MPK\1\I41468_8295766898
c:\programdata\MPK\1\I41468_8330490509
c:\programdata\MPK\1\I41468_8365213079
c:\programdata\MPK\1\I41468_8399935764
c:\programdata\MPK\1\I41468_8434658218
c:\programdata\MPK\1\I41468_8469381366
c:\programdata\MPK\1\I41468_8504104051
c:\programdata\MPK\1\I41468_8538827199
c:\programdata\MPK\1\I41468_8573549769
c:\programdata\MPK\1\I41468_8608272569
c:\programdata\MPK\1\I41468_8642995486
c:\programdata\MPK\1\I41468_8677718866
c:\programdata\MPK\1\I41468_8712441204
c:\programdata\MPK\1\I41468_8747164583
c:\programdata\MPK\1\I41468_8781886921
c:\programdata\MPK\1\I41468_8816610301
c:\programdata\MPK\1\I41468_8851332639
c:\programdata\MPK\1\I41468_8886055556
c:\programdata\MPK\1\I41468_8920778472
c:\programdata\MPK\1\I41468_8955501505
c:\programdata\MPK\1\I41468_8990224653
c:\programdata\MPK\1\I41468_9024947222
c:\programdata\MPK\1\I41468_9059669907
c:\programdata\MPK\1\I41468_9094392708
c:\programdata\MPK\1\I41468_9129115741
c:\programdata\MPK\1\I41468_9163838426
c:\programdata\MPK\1\I41468_9198561806
c:\programdata\MPK\1\I41468_9233284143
c:\programdata\MPK\1\I41468_9268006944
c:\programdata\MPK\1\I41468_9302729861
c:\programdata\MPK\1\I41468_9337453009
c:\programdata\MPK\1\I41468_9372175579
c:\programdata\MPK\1\I41468_9406898958
c:\programdata\MPK\1\I41468_9441621296
c:\programdata\MPK\1\I41468_9476344213
c:\programdata\MPK\1\I41468_9511067014
c:\programdata\MPK\1\I41468_9545790394
c:\programdata\MPK\1\I41468_9580512731
c:\programdata\MPK\1\I41468_9615235880
c:\programdata\MPK\1\I41468_9649958449
c:\programdata\MPK\1\I41468_9684681829
c:\programdata\MPK\1\I41468_9719404167
c:\programdata\MPK\1\I41468_9754127546
c:\programdata\MPK\1\I41468_9788850000
c:\programdata\MPK\1\I41468_9823572801
c:\programdata\MPK\1\I41468_9858295718
c:\programdata\MPK\1\I41468_9893018981
c:\programdata\MPK\1\I41468_9927741435
c:\programdata\MPK\1\I41468_9962464120
c:\programdata\MPK\1\I41468_9997187153
c:\programdata\MPK\1\I41469_0031909954
c:\programdata\MPK\1\I41469_0066633333
c:\programdata\MPK\1\I41469_0101355671
c:\programdata\MPK\1\I41469_0136079051
c:\programdata\MPK\1\I41469_0170801389
c:\programdata\MPK\1\I41469_0205524306
c:\programdata\MPK\1\I41469_0240247106
c:\programdata\MPK\1\I41469_0274970486
c:\programdata\MPK\1\I41469_0309692824
c:\programdata\MPK\1\I41469_0344415972
c:\programdata\MPK\1\I41469_0379138542
c:\programdata\MPK\1\I41469_0413861690
c:\programdata\MPK\1\I41469_0448584375
c:\programdata\MPK\1\I41469_0483307639
c:\programdata\MPK\1\I41469_0518030093
c:\programdata\MPK\1\I41469_0552753125
c:\programdata\MPK\1\I41469_0587475810
c:\programdata\MPK\1\I41469_0622198843
c:\programdata\MPK\1\I41469_0656922338
c:\programdata\MPK\1\I41469_0691644329
c:\programdata\MPK\1\I41469_0726367130
c:\programdata\MPK\1\I41469_0761090046
c:\programdata\MPK\1\I41469_0795813426
c:\programdata\MPK\1\I41469_0830535764
c:\programdata\MPK\1\I41469_0865259144
c:\programdata\MPK\1\I41469_0899981481
c:\programdata\MPK\1\I41469_0934704630
c:\programdata\MPK\1\I41469_0969427199
c:\programdata\MPK\1\I41469_1004150000
c:\programdata\MPK\1\I41469_1038872917
c:\programdata\MPK\1\I41469_1073595833
c:\programdata\MPK\1\I41469_1108318634
c:\programdata\MPK\1\I41469_1143041782
c:\programdata\MPK\1\I41469_1177764352
c:\programdata\MPK\1\I41469_1212487731
c:\programdata\MPK\1\I41469_1247210880
c:\programdata\MPK\1\S0000
c:\programdata\MPK\CPDM\cpfm.bin
c:\programdata\MPK\M0000
c:\programdata\MPK\REFOG Keylogger.lnk
c:\programdata\MPK\REFOG Keylogger\Jetzt bestellen!.lnk
c:\programdata\MPK\REFOG Keylogger\REFOG Keylogger im Internet.lnk
c:\programdata\MPK\REFOG Keylogger\REFOG Keylogger.lnk
c:\programdata\MPK\S0000
c:\users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RCRN_Autoupdater.exe.lnk
c:\windows\SysWow64\frapsvid.dll
c:\windows\SysWow64\MPK
c:\windows\SysWow64\MPK\cinfo.bin
c:\windows\SysWow64\MPK\Help\English\alarms.htm
c:\windows\SysWow64\MPK\Help\English\clipboard.htm
c:\windows\SysWow64\MPK\Help\English\computer.htm
c:\windows\SysWow64\MPK\Help\English\delivery.htm
c:\windows\SysWow64\MPK\Help\English\file.htm
c:\windows\SysWow64\MPK\Help\English\filters.htm
c:\windows\SysWow64\MPK\Help\English\imhelp.htm
c:\windows\SysWow64\MPK\Help\English\internet.htm
c:\windows\SysWow64\MPK\Help\English\invisible.htm
c:\windows\SysWow64\MPK\Help\English\keyboard.htm
c:\windows\SysWow64\MPK\Help\English\log_size.htm
c:\windows\SysWow64\MPK\Help\English\logging.htm
c:\windows\SysWow64\MPK\Help\English\need_update_net.htm
c:\windows\SysWow64\MPK\Help\English\password.htm
c:\windows\SysWow64\MPK\Help\English\programs.htm
c:\windows\SysWow64\MPK\Help\English\screenshot.htm
c:\windows\SysWow64\MPK\Help\English\settings_node.htm
c:\windows\SysWow64\MPK\Help\English\update.htm
c:\windows\SysWow64\MPK\Help\English\users_node.htm
c:\windows\SysWow64\MPK\Help\German\alarms.htm
c:\windows\SysWow64\MPK\Help\German\clipboard.htm
c:\windows\SysWow64\MPK\Help\German\computer.htm
c:\windows\SysWow64\MPK\Help\German\delivery.htm
c:\windows\SysWow64\MPK\Help\German\file.htm
c:\windows\SysWow64\MPK\Help\German\filters.htm
c:\windows\SysWow64\MPK\Help\German\imhelp.htm
c:\windows\SysWow64\MPK\Help\German\internet.htm
c:\windows\SysWow64\MPK\Help\German\invisible.htm
c:\windows\SysWow64\MPK\Help\German\keyboard.htm
c:\windows\SysWow64\MPK\Help\German\log_size.htm
c:\windows\SysWow64\MPK\Help\German\logging.htm
c:\windows\SysWow64\MPK\Help\German\need_update_net.htm
c:\windows\SysWow64\MPK\Help\German\password.htm
c:\windows\SysWow64\MPK\Help\German\programs.htm
c:\windows\SysWow64\MPK\Help\German\screenshot.htm
c:\windows\SysWow64\MPK\Help\German\settings_node.htm
c:\windows\SysWow64\MPK\Help\German\users_node.htm
c:\windows\SysWow64\MPK\Help\Spanish\alarms.htm
c:\windows\SysWow64\MPK\Help\Spanish\clipboard.htm
c:\windows\SysWow64\MPK\Help\Spanish\computer.htm
c:\windows\SysWow64\MPK\Help\Spanish\delivery.htm
c:\windows\SysWow64\MPK\Help\Spanish\filters.htm
c:\windows\SysWow64\MPK\Help\Spanish\internet.htm
c:\windows\SysWow64\MPK\Help\Spanish\invisible.htm
c:\windows\SysWow64\MPK\Help\Spanish\keyboard.htm
c:\windows\SysWow64\MPK\Help\Spanish\log_size.htm
c:\windows\SysWow64\MPK\Help\Spanish\logging.htm
c:\windows\SysWow64\MPK\Help\Spanish\password.htm
c:\windows\SysWow64\MPK\Help\Spanish\programs.htm
c:\windows\SysWow64\MPK\Help\Spanish\screenshot.htm
c:\windows\SysWow64\MPK\Help\Spanish\settings_node.htm
c:\windows\SysWow64\MPK\Help\Spanish\users_node.htm
c:\windows\SysWow64\MPK\icon_1.ico
c:\windows\SysWow64\MPK\Images\banner_em_english.gif
c:\windows\SysWow64\MPK\Images\banner_em_english.swf
c:\windows\SysWow64\MPK\Images\banner_em_german.gif
c:\windows\SysWow64\MPK\Images\banner_em_german.swf
c:\windows\SysWow64\MPK\Images\banner_em_spanish.gif
c:\windows\SysWow64\MPK\Images\banner_em_spanish.swf
c:\windows\SysWow64\MPK\Images\banner_english.gif
c:\windows\SysWow64\MPK\Images\banner_english.swf
c:\windows\SysWow64\MPK\Images\banner_german.gif
c:\windows\SysWow64\MPK\Images\banner_german.swf
c:\windows\SysWow64\MPK\Images\banner_pm_english.gif
c:\windows\SysWow64\MPK\Images\banner_pm_english.swf
c:\windows\SysWow64\MPK\Images\banner_pm_german.gif
c:\windows\SysWow64\MPK\Images\banner_pm_german.swf
c:\windows\SysWow64\MPK\Images\banner_pm_spanish.gif
c:\windows\SysWow64\MPK\Images\banner_pm_spanish.swf
c:\windows\SysWow64\MPK\Images\banner_russian.gif
c:\windows\SysWow64\MPK\Images\banner_spanish.gif
c:\windows\SysWow64\MPK\Images\banner_spanish.swf
c:\windows\SysWow64\MPK\Images\english.gif
c:\windows\SysWow64\MPK\Images\german.gif
c:\windows\SysWow64\MPK\Images\upgrade_aeu.png
c:\windows\SysWow64\MPK\Images\upgrade_aus.png
c:\windows\SysWow64\MPK\Images\upgrade_eu.png
c:\windows\SysWow64\MPK\Images\upgrade_faeu.png
c:\windows\SysWow64\MPK\Images\upgrade_faus.png
c:\windows\SysWow64\MPK\Images\upgrade_feu.png
c:\windows\SysWow64\MPK\Images\upgrade_fus.png
c:\windows\SysWow64\MPK\Images\upgrade_us.png
c:\windows\SysWow64\MPK\Images\vista_hide.bmp
c:\windows\SysWow64\MPK\Images\xp_hide.bmp
c:\windows\SysWow64\MPK\key.bin
c:\windows\SysWow64\MPK\Lang\Brazilian.frc
c:\windows\SysWow64\MPK\Lang\Brazilian.lng
c:\windows\SysWow64\MPK\Lang\English.frc
c:\windows\SysWow64\MPK\Lang\French.frc
c:\windows\SysWow64\MPK\Lang\French.lng
c:\windows\SysWow64\MPK\Lang\German.frc
c:\windows\SysWow64\MPK\Lang\German.lng
c:\windows\SysWow64\MPK\Lang\Italian.frc
c:\windows\SysWow64\MPK\Lang\Italian.lng
c:\windows\SysWow64\MPK\Lang\Japanese.frc
c:\windows\SysWow64\MPK\Lang\Japanese.lng
c:\windows\SysWow64\MPK\Lang\Polish.frc
c:\windows\SysWow64\MPK\Lang\Polish.lng
c:\windows\SysWow64\MPK\Lang\Portuguese.frc
c:\windows\SysWow64\MPK\Lang\Portuguese.lng
c:\windows\SysWow64\MPK\Lang\Romanian.frc
c:\windows\SysWow64\MPK\Lang\Romanian.lng
c:\windows\SysWow64\MPK\Lang\Russian.frc
c:\windows\SysWow64\MPK\Lang\Spanish.frc
c:\windows\SysWow64\MPK\Lang\Spanish.lng
c:\windows\SysWow64\MPK\Lang\Turkish.frc
c:\windows\SysWow64\MPK\Lang\Turkish.lng
c:\windows\SysWow64\MPK\libeay32.dll
c:\windows\SysWow64\MPK\lnkmst.exe
c:\windows\SysWow64\MPK\logstart.vbs
c:\windows\SysWow64\MPK\loguninstall.vbs
c:\windows\SysWow64\MPK\Mpk.dll
c:\windows\SysWow64\MPK\MPK.exe
c:\windows\SysWow64\MPK\Mpk64.dll
c:\windows\SysWow64\MPK\MPK64.exe
c:\windows\SysWow64\MPK\MpkNetInstall.exe
c:\windows\SysWow64\MPK\MPKView.exe
c:\windows\SysWow64\MPK\sqlite3.dll
c:\windows\SysWow64\MPK\ssleay32.dll
c:\windows\SysWow64\MPK\trial_standart.ini
c:\windows\SysWow64\MPK\unins000.dat
c:\windows\SysWow64\MPK\unins000.exe
c:\windows\SysWow64\MPK\unins000.msg
c:\windows\SysWow64\MPK\update_info.bin
c:\windows\SysWow64\MPK\zlib1.dll
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-12-15 bis 2014-01-15  ))))))))))))))))))))))))))))))
.
.
2014-01-15 16:52 . 2014-01-15 16:52        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2014-01-15 16:52 . 2014-01-15 16:52        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-01-10 17:19 . 2014-01-10 17:20        --------        d-----w-        c:\users\Tarik\AppData\Roaming\.technic
2014-01-10 17:16 . 2014-01-10 17:16        --------        d-----w-        c:\users\Tarik\AppData\Roaming\Modinstaller
2013-12-30 14:22 . 2014-01-14 17:47        --------        d-----w-        C:\FRST
2013-12-27 12:13 . 2013-12-27 12:13        --------        d-----w-        c:\users\Tarik\AppData\Local\Flying_Castle_Entertainme
2013-12-26 11:21 . 2013-12-26 11:44        --------        d-----w-        c:\users\Tarik\AppData\Roaming\Natural Selection 2
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-12 19:34 . 2012-11-27 02:31        214392        ----a-w-        c:\windows\SysWow64\PnkBstrB.exe
2014-01-12 19:28 . 2012-11-27 02:31        214392        ----a-w-        c:\windows\SysWow64\PnkBstrB.ex0
2014-01-10 16:32 . 2012-11-27 13:06        281768        ----a-w-        c:\windows\SysWow64\PnkBstrB.xtr
2013-12-15 02:00 . 2009-11-13 06:19        90708896        ----a-w-        c:\windows\system32\MRT.exe
2013-12-11 17:54 . 2012-05-22 19:02        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-11 17:54 . 2011-06-07 08:44        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-11 17:54 . 2013-06-11 19:54        9293192        ----a-w-        c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-11-26 11:54 . 2013-12-11 21:19        23183360        ----a-w-        c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-11 21:19        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-11 21:19        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-11 21:19        66048        ----a-w-        c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-11 21:19        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-11 21:19        2764288        ----a-w-        c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-11 21:19        53760        ----a-w-        c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-11 21:19        33792        ----a-w-        c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-11 21:19        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-11 21:19        574976        ----a-w-        c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-11 21:19        139264        ----a-w-        c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-11 21:19        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-11 21:19        708608        ----a-w-        c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-11 21:19        218624        ----a-w-        c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-11 21:19        5769216        ----a-w-        c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-11 21:19        553472        ----a-w-        c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-11 21:19        4243968        ----a-w-        c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-11 21:19        1995264        ----a-w-        c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-11 21:19        12996608        ----a-w-        c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-11 21:19        1928192        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-11 21:19        2334208        ----a-w-        c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-11 21:19        1395200        ----a-w-        c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-11 21:19        817664        ----a-w-        c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-11 21:19        1820160        ----a-w-        c:\windows\SysWow64\wininet.dll
2013-11-24 00:19 . 2013-11-24 00:19        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-24 00:19 . 2013-11-24 00:19        194048        ----a-w-        c:\windows\SysWow64\elshyph.dll
2013-11-24 00:19 . 2013-11-24 00:19        942592        ----a-w-        c:\windows\system32\jsIntl.dll
2013-11-24 00:19 . 2013-11-24 00:19        90112        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2013-11-24 00:19 . 2013-11-24 00:19        86016        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2013-11-24 00:19 . 2013-11-24 00:19        86016        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
2013-11-24 00:19 . 2013-11-24 00:19        84992        ----a-w-        c:\windows\system32\mshtmled.dll
2013-11-24 00:19 . 2013-11-24 00:19        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll
2013-11-24 00:19 . 2013-11-24 00:19        81408        ----a-w-        c:\windows\system32\icardie.dll
2013-11-24 00:19 . 2013-11-24 00:19        774144        ----a-w-        c:\windows\system32\jscript.dll
2013-11-24 00:19 . 2013-11-24 00:19        77312        ----a-w-        c:\windows\system32\tdc.ocx
2013-11-24 00:19 . 2013-11-24 00:19        74240        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-24 00:19 . 2013-11-24 00:19        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-24 00:19 . 2013-11-24 00:19        645120        ----a-w-        c:\windows\SysWow64\jsIntl.dll
2013-11-24 00:19 . 2013-11-24 00:19        626176        ----a-w-        c:\windows\system32\msfeeds.dll
2013-11-24 00:19 . 2013-11-24 00:19        62464        ----a-w-        c:\windows\SysWow64\tdc.ocx
2013-11-24 00:19 . 2013-11-24 00:19        62464        ----a-w-        c:\windows\system32\pngfilt.dll
2013-11-24 00:19 . 2013-11-24 00:19        61952        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll
2013-11-24 00:19 . 2013-11-24 00:19        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll
2013-11-24 00:19 . 2013-11-24 00:19        616104        ----a-w-        c:\windows\system32\ieapfltr.dat
2013-11-24 00:19 . 2013-11-24 00:19        548352        ----a-w-        c:\windows\system32\vbscript.dll
2013-11-24 00:19 . 2013-11-24 00:19        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll
2013-11-24 00:19 . 2013-11-24 00:19        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll
2013-11-24 00:19 . 2013-11-24 00:19        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll
2013-11-24 00:19 . 2013-11-24 00:19        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2013-11-24 00:19 . 2013-11-24 00:19        48128        ----a-w-        c:\windows\system32\imgutil.dll
2013-11-24 00:19 . 2013-11-24 00:19        454656        ----a-w-        c:\windows\SysWow64\vbscript.dll
2013-11-24 00:19 . 2013-11-24 00:19        453120        ----a-w-        c:\windows\system32\dxtmsft.dll
2013-11-24 00:19 . 2013-11-24 00:19        413696        ----a-w-        c:\windows\system32\html.iec
2013-11-24 00:19 . 2013-11-24 00:19        40448        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-24 00:19 . 2013-11-24 00:19        36352        ----a-w-        c:\windows\SysWow64\imgutil.dll
2013-11-24 00:19 . 2013-11-24 00:19        34816        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-24 00:19 . 2013-11-24 00:19        337408        ----a-w-        c:\windows\SysWow64\html.iec
2013-11-24 00:19 . 2013-11-24 00:19        30208        ----a-w-        c:\windows\system32\licmgr10.dll
2013-11-24 00:19 . 2013-11-24 00:19        296960        ----a-w-        c:\windows\system32\dxtrans.dll
2013-11-24 00:19 . 2013-11-24 00:19        263376        ----a-w-        c:\windows\system32\iedkcs32.dll
2013-11-24 00:19 . 2013-11-24 00:19        247808        ----a-w-        c:\windows\system32\msls31.dll
2013-11-24 00:19 . 2013-11-24 00:19        24576        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2013-11-24 00:19 . 2013-11-24 00:19        243200        ----a-w-        c:\windows\system32\webcheck.dll
2013-11-24 00:19 . 2013-11-24 00:19        235520        ----a-w-        c:\windows\system32\url.dll
2013-11-24 00:19 . 2013-11-24 00:19        235008        ----a-w-        c:\windows\system32\elshyph.dll
2013-11-24 00:19 . 2013-11-24 00:19        195584        ----a-w-        c:\windows\system32\msrating.dll
2013-11-24 00:19 . 2013-11-24 00:19        182272        ----a-w-        c:\windows\SysWow64\msls31.dll
2013-11-24 00:19 . 2013-11-24 00:19        167424        ----a-w-        c:\windows\system32\iexpress.exe
2013-11-24 00:19 . 2013-11-24 00:19        151552        ----a-w-        c:\windows\SysWow64\iexpress.exe
2013-11-24 00:19 . 2013-11-24 00:19        147968        ----a-w-        c:\windows\system32\occache.dll
2013-11-24 00:19 . 2013-11-24 00:19        143872        ----a-w-        c:\windows\system32\wextract.exe
2013-11-24 00:19 . 2013-11-24 00:19        139264        ----a-w-        c:\windows\SysWow64\wextract.exe
2013-11-24 00:19 . 2013-11-24 00:19        13824        ----a-w-        c:\windows\system32\mshta.exe
2013-11-24 00:19 . 2013-11-24 00:19        135680        ----a-w-        c:\windows\system32\iepeers.dll
2013-11-24 00:19 . 2013-11-24 00:19        13312        ----a-w-        c:\windows\SysWow64\mshta.exe
2013-11-24 00:19 . 2013-11-24 00:19        13312        ----a-w-        c:\windows\system32\msfeedssync.exe
2013-11-24 00:19 . 2013-11-24 00:19        131072        ----a-w-        c:\windows\system32\IEAdvpack.dll
2013-11-24 00:19 . 2013-11-24 00:19        1228800        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2013-11-24 00:19 . 2013-11-24 00:19        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2013-11-24 00:19 . 2013-11-24 00:19        111616        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll
2013-11-24 00:19 . 2013-11-24 00:19        105984        ----a-w-        c:\windows\system32\iesysprep.dll
2013-11-24 00:19 . 2013-11-24 00:19        1051136        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll
2013-11-24 00:19 . 2013-11-24 00:19        101376        ----a-w-        c:\windows\system32\inseng.dll
2013-11-23 18:26 . 2013-12-11 17:02        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-11 17:02        465920        ----a-w-        c:\windows\system32\WMPhoto.dll
2013-11-14 11:56 . 2013-09-28 20:38        18293608        ----a-w-        c:\windows\system32\nvwgf2umx.dll
2013-11-14 11:56 . 2013-09-28 20:38        15862272        ----a-w-        c:\windows\SysWow64\nvwgf2um.dll
2013-11-14 11:56 . 2013-11-25 18:53        9619872        ----a-w-        c:\windows\SysWow64\nvopencl.dll
2013-11-14 11:56 . 2013-11-25 18:53        11514624        ----a-w-        c:\windows\system32\nvopencl.dll
2013-11-14 11:56 . 2013-11-25 18:53        30361888        ----a-w-        c:\windows\system32\nvoglv64.dll
2013-11-14 11:56 . 2013-11-25 18:53        22951200        ----a-w-        c:\windows\SysWow64\nvoglv32.dll
2013-11-14 11:56 . 2013-11-25 18:53        12613408        ----a-w-        c:\windows\system32\drivers\nvlddmkm.sys
2013-11-14 11:56 . 2013-11-25 18:53        707360        ----a-w-        c:\windows\system32\NvFBC64.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="d:\program files (x86)\Steam\steam.exe" [2014-01-14 1815976]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-11-14 20584608]
"OfficeSyncProcess"="d:\program files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" [2013-04-22 720064]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="d:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"Adobe Acrobat Speed Launcher"="c:\adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2013-09-03 41336]
"Acrobat Assistant 8.0"="c:\adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2013-09-03 840568]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-11-29 3806544]
.
c:\users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - d:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux8"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
R2 IOPort;IOPort;c:\windows\system32\DRIVERS\IOPORT.SYS;c:\windows\SYSNATIVE\DRIVERS\IOPORT.SYS [x]
R2 MaxSch2Svc;Maxtor Scheduler2 Service;c:\program files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe;c:\program files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 ALSysIO;ALSysIO;c:\users\mklepper\AppData\Local\Temp\ALSysIO64.sys;c:\users\mklepper\AppData\Local\Temp\ALSysIO64.sys [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys;c:\windows\SYSNATIVE\DRIVERS\avckf.sys [x]
R3 BDSandBox;BDSandBox;c:\windows\system32\drivers\bdsandbox.sys;c:\windows\SYSNATIVE\drivers\bdsandbox.sys [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 cpuz136;cpuz136;c:\users\Tarik\AppData\Local\Temp\cpuz136\cpuz136_x64.sys;c:\users\Tarik\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
R3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;d:\program files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe;d:\program files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 GGSAFERDriver;GGSAFER Driver;c:\users\Tarik\Garena Plus\Room\safedrv.sys;c:\users\Tarik\Garena Plus\Room\safedrv.sys [x]
R3 ha20x22k;Creative 20X2 HAL Driver;c:\windows\system32\drivers\ha20x22k.sys;c:\windows\SYSNATIVE\drivers\ha20x22k.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x]
R3 phaudlwr;Philips Audio Filter;c:\windows\system32\DRIVERS\phaudlwr.sys;c:\windows\SYSNATIVE\DRIVERS\phaudlwr.sys [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RivaTuner64;RivaTuner64;d:\program files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys;d:\program files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [x]
R3 spc999;Philips SPZ3000/SPC640 Webcam;c:\windows\system32\drivers\spc999.sys;c:\windows\SYSNATIVE\drivers\spc999.sys [x]
R3 spc999m;Philips SPZ3000/SPC640 Webcam filter;c:\windows\system32\drivers\spc999m.sys;c:\windows\SYSNATIVE\drivers\spc999m.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
R3 vpcuxd;USB-Virtualisierungsstubdienst;c:\windows\system32\DRIVERS\vpcuxd.sys;c:\windows\SYSNATIVE\DRIVERS\vpcuxd.sys [x]
R3 wod0205;WeOnlyDo Network Adapter 2.5;c:\windows\system32\DRIVERS\wod0205.sys;c:\windows\SYSNATIVE\DRIVERS\wod0205.sys [x]
R4 BdDesktopParental;Bitdefender Desktop Parental Control;d:\program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe;d:\program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [x]
R4 MSSQLServerADHelper100;SQL Server Hilfsdienst für Active Directory;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0151;RsFx0151 Driver;c:\windows\system32\DRIVERS\RsFx0151.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0151.sys [x]
S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys;c:\windows\SYSNATIVE\DRIVERS\avc3.sys [x]
S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys;c:\windows\SYSNATIVE\DRIVERS\gzflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [x]
S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 KMService;KMService;c:\windows\system32\srvany.exe;c:\windows\SYSNATIVE\srvany.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 mi-raysat_3dsmax2011_64;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit;d:\program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe;d:\program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [x]
S2 mi-raysat_3dsmax2012_64;mental ray 3.9 Satellite for Autodesk 3ds Max 2012 64-bit - German 64-bit;d:\program files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe;d:\program files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer8;TeamViewer 8;d:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;d:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 UPDATESRV;Bitdefender Desktop Update Service;d:\program files\Bitdefender\Bitdefender 2013\updatesrv.exe;d:\program files\Bitdefender\Bitdefender 2013\updatesrv.exe [x]
S3 avchv;avchv Function Driver;c:\windows\system32\DRIVERS\avchv.sys;c:\windows\SYSNATIVE\DRIVERS\avchv.sys [x]
S3 cmudaxp;ASUS Xonar DS Audio Interface;c:\windows\system32\drivers\cmudaxp.sys;c:\windows\SYSNATIVE\drivers\cmudaxp.sys [x]
S3 netr7364;RT73 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr7364.sys;c:\windows\SYSNATIVE\DRIVERS\netr7364.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-05 14:22        1210320        ----a-w-        c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-22 17:54]
.
2014-01-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-26 21:40]
.
2014-01-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-26 21:40]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 14:47        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 14:47        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 14:47        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 14:47        778704        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe" [2008-06-27 136472]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]
"Maxtor Scheduler2 Service"="c:\program files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe" [2008-06-27 136472]
"Cmaudio8788"="c:\windows\Syswow64\cmicnfgp.dll" [2011-05-12 8769536]
"Cmaudio8788GX"="c:\windows\syswow64\HsMgr.exe" [2008-07-11 200704]
"Cmaudio8788GX64"="c:\windows\system\HsMgr64.exe" [2008-07-11 282112]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
"Bdagent"="d:\program files\Bitdefender\Bitdefender 2013\bdagent.exe" [2013-10-24 1575192]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-10-18 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-10-18 1063200]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=hp&installDate=26/10/2013
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013
IE: An OneNote s&enden - d:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - d:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.178.1
TCP: Interfaces\{943E789C-5AB5-4979-8A03-1FC88F60C25E}: NameServer = 192.168.1.2
TCP: Interfaces\{F1ED2B56-7F14-479F-BB8A-0A7A94C8F708}: NameServer = 139.7.30.125 139.7.30.126
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKCU-Run-Akamai NetSession Interface - c:\users\Tarik\AppData\Local\Akamai\netsession_win.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-RCRN AE 2.1.4 - d:\program files (x86)\Steam\SteamApps\common\Skyrim\RCRN\Uninstall RCRN.exe
AddRemove-The Elder Scrolls V Skyrim All in One DLC-Pack Deutsche Version Plus Update 11 (1.8.151.0.7) 1.8.151.0.7 - d:\program files (x86)\Steam\SteamApps\common\Skyrim\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3909757569-3429299898-4027655702-1017\Software\SecuROM\License information*]
"datasecu"=hex:6a,d9,88,1a,81,0b,05,33,b5,bd,f9,76,56,9e,ba,43,8a,28,f6,f5,b6,
  05,dc,ff,9f,53,e7,81,37,e3,3c,8d,37,6a,24,5a,01,8f,91,fd,56,79,3f,63,71,fd,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BEB3C0C7-B648-4257-96D9-B5D024816E27}\Version*Version]
"Version"=hex:3c,cf,34,d7,23,7d,31,69,e7,04,ff,35,6f,b9,d5,d5,22,82,c6,4d,2a,
  3b,92,54,9e,0e,dc,29,6d,30,cb,a6,bf,de,6f,a3,02,b5,78,9e,af,db,52,5c,bd,a4,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Minnetonka Audio Software\SurCode Dolby Digital Premiere\Version*Version]
"Version"=hex:3c,cf,34,d7,23,7d,31,69,e7,04,ff,35,6f,b9,d5,d5,22,82,c6,4d,2a,
  3b,92,54,9e,0e,dc,29,6d,30,cb,a6,8c,9f,16,e1,89,21,7b,02,af,db,52,5c,bd,a4,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\srvany.exe
c:\program files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\windows\KMService.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files\ASUS Xonar DS Audio\Customapp\ASUSAUDIOCENTER.EXE
c:\program files\NVIDIA Corporation\Display\nvSmartMaxApp.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-01-15  17:59:12 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-01-15 16:59
.
Vor Suchlauf: 19 Verzeichnis(se), 16.905.814.016 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 17.663.614.976 Bytes frei
.
- - End Of File - - C9F6AD27B77A6364D64860E2777E314F
A36C5E4F47E84449FF07ED3517B43A31

Mein Antivirensystem reagiert wieder. Keine Ahnung woran es lag. Ich weiß nicht ob das was ändert, wollte es nur mal bemerkt haben.


Viele Grüße

schrauber 16.01.2014 09:17
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Ryneld 20.01.2014 17:46
Tut mir Leid, hat ein wenig gedauert.


AdwCleaner
Code:
# AdwCleaner v3.017 - Bericht erstellt am 20/01/2014 um 17:20:00
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Tarik - RENDERER2
# Gestartet von : C:\Users\Tarik\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\StarApp
Ordner Gelöscht : C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Datei Gelöscht : C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\user.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_aida32_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_aida32_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\Software\SP Global
Schlüssel Gelöscht : HKLM\Software\SProtector

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\prefs.js ]

Zeile gelöscht : user_pref("CT2589078_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1371453155796,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelöscht : user_pref("aol_toolbar.default.homepage.check", false);
Zeile gelöscht : user_pref("aol_toolbar.default.search.check", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Zeile gelöscht : user_pref("extensions.crossrider.bic", "141f425285e411820590785609d0b853");
Zeile gelöscht : user_pref("smartbar.machineId", "Z+R7BWGMFAZHY79ZWZAPRTIPGLMSRTXVU3MDDO3TVZMYI4/LIB8L/O1XROODHRVCNVY9CTSCHN4PESBKF5VGFW");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Zeile gelöscht : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Zeile gelöscht : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Zeile gelöscht : user_pref("sweetim.toolbar.searchguard.enable", "");

-\\ Google Chrome v32.0.1700.76

[ Datei : C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : homepage
Gelöscht : icon_url
Gelöscht : search_url
Gelöscht : keyword

*************************

AdwCleaner[R0].txt - [6233 octets] - [20/01/2014 17:18:33]
AdwCleaner[S0].txt - [5213 octets] - [20/01/2014 17:20:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5273 octets] ##########

MBAM
Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.20.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Tarik :: RENDERER2 [Administrator]

20.01.2014 17:11:38
MBAM-log-2014-01-20 (17-17-09).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 287706
Laufzeit: 5 Minute(n), 6 Sekunde(n)

Infizierte Speicherprozesse: 1
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> 2604 -> Keine Aktion durchgeführt.

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 3
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=hp&installDate=26/10/2013) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> Keine Aktion durchgeführt.

(Ende)


JRT
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Professional x64
Ran by Tarik on 20.01.2014 at 17:36:29,54
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Tarik\AppData\Roaming\mozilla\firefox\profiles\jkhwge7z.default\minidumps [365 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Tarik\appdata\local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.01.2014 at 17:38:28,21
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014 04
Ran by Tarik (administrator) on RENDERER2 on 20-01-2014 17:41:09
Running from C:\Users\Tarik\Downloads\FRST-OlderVersion
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\vsserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Maxtor) C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe
() C:\Windows\SysWOW64\srvany.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe
() C:\Windows\KMService.exe
() D:\Program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
() D:\Program files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\updatesrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Maxtor) C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(CMedia) C:\Program Files\ASUS Xonar DS Audio\Customapp\AsusAudioCenter.exe
(Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\bdagent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files\NVIDIA Corporation\Display\nvsmartmaxapp64.exe
() C:\Program Files\NVIDIA Corporation\Display\nvsmartmaxapp.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Adobe Systems Inc.) C:\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe [136472 2008-06-27] (Maxtor)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [Maxtor Scheduler2 Service] - C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe [136472 2008-06-27] (Maxtor)
HKLM\...\Run: [Cmaudio8788] - C:\Windows\Syswow64\cmicnfgp.dll [8769536 2011-05-12] (C-Media Corporation)
HKLM\...\Run: [Cmaudio8788GX] - C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Bdagent] - D:\Program files\Bitdefender\Bitdefender 2013\bdagent.exe [1575192 2013-10-24] (Bitdefender)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1063200 2013-10-18] (NVIDIA Corporation)
HKLM-x32\...\Run: [BCSSync] - D:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2013-09-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [Steam] - D:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-16] (Valve Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [OfficeSyncProcess] - D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
Startup: C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> D:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x77F9AA1A2E11CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{943E789C-5AB5-4979-8A03-1FC88F60C25E}: [NameServer]192.168.1.2
Tcpip\..\Interfaces\{F1ED2B56-7F14-479F-BB8A-0A7A94C8F708}: [NameServer]139.7.30.125 139.7.30.126

FireFox:
========
FF ProfilePath: C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Users\Tarik\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Wörterbuch Deutsch (de-DE), Hunspell-unterstützt - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\de_DE@dicts.j3e.de [2013-09-13]
FF Extension: British English Dictionary (Updated) - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\en-gb@flyingtophat.co.uk [2013-10-23]
FF Extension: FoxyProxy Standard - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\foxyproxy@eric.h.jung [2013-10-26]
FF Extension: YouTube Unblocker - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\youtubeunblocker@unblocker.yt [2013-11-01]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2013-10-18]
FF Extension: Video Resumer - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\videoresumer@jetpack.xpi [2013-06-25]
FF Extension: YouTube Cinema Mode . - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\youtube-cinemode@gmail.com.xpi [2013-09-06]
FF Extension: NoScript - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-23]
FF Extension: {748284c8-f147-4b29-8544-7a58fa23f520} - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{748284c8-f147-4b29-8544-7a58fa23f520}.xpi [2013-11-01]
FF Extension: Adblock Plus - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-01]
FF Extension: Skype Compiler Plus - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{fd16221d-b893-40f7-bc64-455e68e578ce}.xpi [2013-11-05]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext
FF Extension: bdToolbar - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext [2013-01-28]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-03-28]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext
FF Extension: bdToolbar - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext [2013-01-28]

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR DefaultSearchProvider: Web
CHR DefaultSearchURL: hxxp://www.google.com
CHR DefaultNewTabURL:
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Nexon Game Controller) - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
CHR Plugin: (Garena Talk Plugin) - C:\Users\Tarik\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.150.3) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-26]
CHR Extension: (Google Drive) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-26]
CHR Extension: (YouTube) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-26]
CHR Extension: (Google-Suche) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-26]
CHR Extension: (Proxy link for YouTube\u2122) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpccpcaielehgefaagocjkkgkafaabdp [2013-05-01]
CHR Extension: (Google Wallet) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-04]
CHR Extension: (Google Mail) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-26]

==================== Services (Whitelisted) =================

R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe [605976 2008-06-27] (Maxtor)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-02-17] (Adobe Systems)
S4 BdDesktopParental; D:\Program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [69392 2013-10-24] (Bitdefender)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-01] ()
S3 DAUpdaterSvc; D:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-13] (BioWare)
R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] ()
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S2 MaxSch2Svc; C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe [605976 2008-06-27] (Maxtor)
R2 mi-raysat_3dsmax2011_64; D:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [86016 2010-04-01] ()
R2 mi-raysat_3dsmax2012_64; D:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe [86016 2011-02-22] ()
S3 Microsoft SharePoint Workspace Audit Service; D:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [30798512 2013-03-09] (Microsoft Corporation)
S4 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-30] ()
S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation)
R2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [3574624 2013-04-23] (TeamViewer GmbH)
R2 UPDATESRV; D:\Program files\Bitdefender\Bitdefender 2013\updatesrv.exe [67320 2013-10-24] (Bitdefender)
R2 VSSERV; D:\Program files\Bitdefender\Bitdefender 2013\vsserv.exe [1645256 2013-10-24] (Bitdefender)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-05-07] ()
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-10-24] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-10-24] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-04-29] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-10-24] (BitDefender SRL)
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2725376 2011-03-10] (C-Media Inc)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-24] (BitDefender LLC)
S2 IOPort; C:\Windows\SysWOW64\DRIVERS\IOPORT.SYS [6144 2001-03-01] (Erik Salaj)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-05-07] ()
S3 mirrorv3; C:\Windows\System32\DRIVERS\rminiv3.sys [5632 2010-04-21] (Famatech International Corp.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
S3 phaudlwr; C:\Windows\System32\DRIVERS\phaudlwr.sys [114608 2009-10-20] (Philips Applied Technologies)
S3 RivaTuner64; D:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2013-02-09] ()
S1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 spc999; C:\Windows\System32\drivers\spc999.sys [584192 2009-12-14] (                                                            )
S3 spc999m; C:\Windows\System32\drivers\spc999m.sys [8192 2009-12-14] (                                                            )
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-24] (BitDefender S.R.L.)
S3 wod0205; C:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software)
S3 ALSysIO; \??\C:\Users\mklepper\AppData\Local\Temp\ALSysIO64.sys [x]
S2 ASInsHelp; \??\C:\Windows\SysWow64\drivers\AsInsHelp64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz136; \??\C:\Users\Tarik\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 GGSAFERDriver; \??\C:\Users\Tarik\Garena Plus\Room\safedrv.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-20 17:38 - 2014-01-20 17:38 - 00000940 _____ C:\Users\Tarik\Desktop\JRT.txt
2014-01-20 17:32 - 2014-01-20 17:32 - 01037068 _____ (Thisisu) C:\Users\Tarik\Downloads\JRT.exe
2014-01-20 17:32 - 2014-01-20 17:32 - 00000000 ____D C:\Windows\ERUNT
2014-01-20 17:23 - 2014-01-20 17:23 - 00005361 _____ C:\Users\Tarik\Desktop\AdwCleaner[S0].txt
2014-01-20 17:18 - 2014-01-20 17:20 - 00000000 ____D C:\AdwCleaner
2014-01-20 17:08 - 2014-01-20 17:08 - 00001073 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-20 17:08 - 2014-01-20 17:08 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Malwarebytes
2014-01-20 17:08 - 2014-01-20 17:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 17:08 - 2014-01-20 17:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 17:08 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-20 17:07 - 2014-01-20 17:07 - 01236282 _____ C:\Users\Tarik\Downloads\adwcleaner.exe
2014-01-20 17:06 - 2014-01-20 17:06 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tarik\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-19 16:43 - 2014-01-19 16:44 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (4)
2014-01-15 21:17 - 2014-01-15 21:17 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Tarik\Downloads\BlueStacks-SplitInstaller_native.exe
2014-01-15 17:59 - 2014-01-15 17:59 - 00075643 _____ C:\ComboFix.txt
2014-01-15 17:43 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-15 17:43 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-15 17:43 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-15 17:43 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-15 17:43 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-15 17:43 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-15 17:43 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-15 17:42 - 2014-01-15 17:59 - 00000000 ____D C:\Qoobox
2014-01-15 17:42 - 2014-01-15 17:57 - 00000000 ____D C:\Windows\erdnt
2014-01-15 17:41 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 17:41 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 17:41 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 17:41 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 17:41 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 17:41 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 17:41 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 17:41 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 17:41 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 23:09 - 2014-01-15 17:40 - 05165717 ____R (Swearware) C:\Users\Tarik\Downloads\ComboFix.exe
2014-01-14 19:01 - 2014-01-14 19:02 - 00044490 _____ C:\Users\Tarik\Downloads\Addition.txt
2014-01-14 18:59 - 2014-01-14 18:59 - 00037118 _____ C:\Users\Tarik\Downloads\GMER.log
2014-01-14 18:48 - 2014-01-14 18:48 - 00377856 _____ C:\Users\Tarik\Downloads\32xc18gq.exe
2014-01-14 18:47 - 2014-01-20 17:41 - 00000000 ____D C:\Users\Tarik\Downloads\FRST-OlderVersion
2014-01-10 19:44 - 2014-01-10 19:44 - 00000000 ____D C:\Users\Tarik\Documents\ANNO 1404 Venedig
2014-01-10 18:19 - 2014-01-10 18:20 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.technic
2014-01-10 18:19 - 2014-01-10 18:19 - 02314844 _____ () C:\Users\Tarik\Downloads\TechnicLauncher.exe
2014-01-10 18:16 - 2014-01-10 18:16 - 00375581 _____ C:\Users\Tarik\Downloads\Minecraft-Modder_v2.8.4_de.exe
2014-01-10 16:39 - 2014-01-10 16:39 - 00000000 ____D C:\Users\Tarik\Desktop\Crack
2014-01-10 16:39 - 2008-01-23 14:57 - 04500187 _____ C:\Users\Tarik\Desktop\iw3sp.exe
2014-01-05 14:30 - 2014-01-05 14:31 - 00232031 _____ C:\Users\Tarik\Downloads\Essay
2014-01-03 21:56 - 2014-01-03 22:11 - 553230663 _____ (Epic Games, Inc.) C:\Users\Tarik\Downloads\WDS.exe
2013-12-30 15:23 - 2014-01-14 19:02 - 00041452 _____ C:\Users\Tarik\Downloads\FRST.txt
2013-12-30 15:22 - 2014-01-20 17:40 - 00000000 ____D C:\FRST
2013-12-30 15:12 - 2014-01-14 18:46 - 00000472 _____ C:\Users\Tarik\Downloads\defogger_disable.log
2013-12-30 15:12 - 2013-12-30 15:12 - 00000000 _____ C:\Users\Tarik\defogger_reenable
2013-12-30 15:07 - 2014-01-14 18:47 - 02075648 _____ (Farbar) C:\Users\Tarik\Downloads\FRST64.exe
2013-12-30 15:04 - 2013-12-30 15:04 - 00377856 _____ C:\Users\Tarik\Downloads\1jn1ckw1.exe
2013-12-30 15:03 - 2013-12-30 15:03 - 00050477 _____ C:\Users\Tarik\Downloads\Defogger.exe
2013-12-27 13:13 - 2013-12-27 13:13 - 00000000 ____D C:\Users\Tarik\AppData\Local\Flying_Castle_Entertainme
2013-12-26 12:21 - 2013-12-26 12:44 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Natural Selection 2
2013-12-25 14:39 - 2013-12-25 14:39 - 00000199 _____ C:\Users\Tarik\Desktop\Natural Selection 2.url
2013-12-23 22:17 - 2013-12-23 22:17 - 08537832 _____ C:\Users\Tarik\Desktop\Entwurf1.psd
2013-12-23 22:01 - 2013-12-23 22:01 - 00000000 ____D C:\Users\Tarik\Downloads\__MACOSX
2013-12-23 22:01 - 2008-04-13 11:54 - 02483418 ____N C:\Users\Tarik\Downloads\benblogged_grunge.abr
2013-12-23 22:01 - 2008-04-10 10:20 - 01012590 ____N C:\Users\Tarik\Downloads\benblogged_splatter.abr
2013-12-23 21:54 - 2013-12-23 21:54 - 07444038 _____ C:\Users\Tarik\Downloads\Brush_Pack___Splashes_Of_Paint_by_MouritsaDA_Stock.abr
2013-12-23 21:53 - 2013-12-23 21:53 - 01467371 _____ C:\Users\Tarik\Downloads\benblogged_grungeabr.zip
2013-12-23 21:53 - 2013-12-23 21:53 - 00604249 _____ C:\Users\Tarik\Downloads\benblogged_splatterabr.zip
2013-12-22 17:13 - 2013-12-22 17:14 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (3)
2013-12-21 10:11 - 2013-12-25 01:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-01-20 17:41 - 2014-01-14 18:47 - 00000000 ____D C:\Users\Tarik\Downloads\FRST-OlderVersion
2014-01-20 17:40 - 2013-12-30 15:22 - 00000000 ____D C:\FRST
2014-01-20 17:38 - 2014-01-20 17:38 - 00000940 _____ C:\Users\Tarik\Desktop\JRT.txt
2014-01-20 17:37 - 2013-07-22 22:00 - 00000000 ____D C:\Users\Tarik\Desktop\Spiele
2014-01-20 17:37 - 2013-06-21 18:46 - 00000000 ____D C:\Users\Tarik\AppData\Local\LogMeIn Hamachi
2014-01-20 17:37 - 2012-11-26 20:24 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Skype
2014-01-20 17:36 - 2013-11-05 06:38 - 00027975 _____ C:\Windows\setupact.log
2014-01-20 17:36 - 2012-11-26 22:40 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-20 17:36 - 2011-04-19 12:32 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-20 17:36 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-20 17:34 - 2009-11-12 13:25 - 01788311 _____ C:\Windows\WindowsUpdate.log
2014-01-20 17:32 - 2014-01-20 17:32 - 01037068 _____ (Thisisu) C:\Users\Tarik\Downloads\JRT.exe
2014-01-20 17:32 - 2014-01-20 17:32 - 00000000 ____D C:\Windows\ERUNT
2014-01-20 17:29 - 2009-07-14 05:45 - 00020160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-20 17:29 - 2009-07-14 05:45 - 00020160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-20 17:23 - 2014-01-20 17:23 - 00005361 _____ C:\Users\Tarik\Desktop\AdwCleaner[S0].txt
2014-01-20 17:20 - 2014-01-20 17:18 - 00000000 ____D C:\AdwCleaner
2014-01-20 17:08 - 2014-01-20 17:08 - 00001073 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-20 17:08 - 2014-01-20 17:08 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Malwarebytes
2014-01-20 17:08 - 2014-01-20 17:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-20 17:08 - 2014-01-20 17:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-20 17:07 - 2014-01-20 17:07 - 01236282 _____ C:\Users\Tarik\Downloads\adwcleaner.exe
2014-01-20 17:06 - 2014-01-20 17:06 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tarik\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-20 07:09 - 2012-12-09 10:53 - 00000000 ____D C:\Users\Tarik\AppData\Local\Adobe
2014-01-19 22:54 - 2012-05-22 20:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-19 22:45 - 2013-03-02 15:30 - 00003934 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BE29C0D3-C322-4ABB-A5C8-377AE67DF550}
2014-01-19 22:21 - 2012-11-26 22:40 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-19 20:47 - 2012-12-07 18:21 - 00000000 ____D C:\Users\Tarik\AppData\Local\ArmA 2 OA
2014-01-19 16:44 - 2014-01-19 16:43 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (4)
2014-01-19 16:35 - 2013-03-24 20:30 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Mumble
2014-01-19 15:44 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-18 12:58 - 2012-12-07 17:51 - 00000000 ____D C:\Users\Tarik\AppData\Local\Play withSIX
2014-01-17 20:06 - 2012-11-27 03:31 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-17 19:57 - 2012-11-27 03:31 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-16 06:52 - 2009-07-14 18:58 - 00771488 _____ C:\Windows\system32\perfh007.dat
2014-01-16 06:52 - 2009-07-14 18:58 - 00176068 _____ C:\Windows\system32\perfc007.dat
2014-01-16 06:52 - 2009-07-14 06:13 - 01817042 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-16 06:48 - 2009-07-14 05:45 - 05055752 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 23:28 - 2013-08-14 21:50 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 23:28 - 2009-11-13 07:19 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 21:18 - 2013-10-03 12:44 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2014-01-15 21:17 - 2014-01-15 21:17 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Tarik\Downloads\BlueStacks-SplitInstaller_native.exe
2014-01-15 20:01 - 2013-01-28 14:20 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\FileZilla
2014-01-15 17:59 - 2014-01-15 17:59 - 00075643 _____ C:\ComboFix.txt
2014-01-15 17:59 - 2014-01-15 17:42 - 00000000 ____D C:\Qoobox
2014-01-15 17:59 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-15 17:57 - 2014-01-15 17:42 - 00000000 ____D C:\Windows\erdnt
2014-01-15 17:54 - 2013-02-22 23:22 - 00444726 _____ C:\Windows\PFRO.log
2014-01-15 17:54 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-15 17:52 - 2012-11-26 16:05 - 00000000 ___RD C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-15 17:40 - 2014-01-14 23:09 - 05165717 ____R (Swearware) C:\Users\Tarik\Downloads\ComboFix.exe
2014-01-14 19:02 - 2014-01-14 19:01 - 00044490 _____ C:\Users\Tarik\Downloads\Addition.txt
2014-01-14 19:02 - 2013-12-30 15:23 - 00041452 _____ C:\Users\Tarik\Downloads\FRST.txt
2014-01-14 18:59 - 2014-01-14 18:59 - 00037118 _____ C:\Users\Tarik\Downloads\GMER.log
2014-01-14 18:48 - 2014-01-14 18:48 - 00377856 _____ C:\Users\Tarik\Downloads\32xc18gq.exe
2014-01-14 18:47 - 2013-12-30 15:07 - 02075648 _____ (Farbar) C:\Users\Tarik\Downloads\FRST64.exe
2014-01-14 18:46 - 2013-12-30 15:12 - 00000472 _____ C:\Users\Tarik\Downloads\defogger_disable.log
2014-01-13 19:18 - 2013-02-23 18:34 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.minecraft
2014-01-13 17:54 - 2013-01-26 15:49 - 00000000 ____D C:\Users\Tarik\Documents\Outlook-Dateien
2014-01-13 16:26 - 2012-12-07 17:51 - 00000000 ____D C:\Users\Tarik\AppData\Local\Downloaded Installations
2014-01-12 18:42 - 2013-09-12 18:30 - 00000000 ____D C:\Users\Tarik\Studienarbeit
2014-01-11 20:12 - 2013-10-17 20:38 - 00000000 ____D C:\Users\Tarik\AppData\Local\Battle.net
2014-01-10 19:44 - 2014-01-10 19:44 - 00000000 ____D C:\Users\Tarik\Documents\ANNO 1404 Venedig
2014-01-10 19:25 - 2013-02-02 13:35 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Ubisoft
2014-01-10 19:24 - 2009-11-15 14:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-10 18:20 - 2014-01-10 18:19 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.technic
2014-01-10 18:19 - 2014-01-10 18:19 - 02314844 _____ () C:\Users\Tarik\Downloads\TechnicLauncher.exe
2014-01-10 18:16 - 2014-01-10 18:16 - 00375581 _____ C:\Users\Tarik\Downloads\Minecraft-Modder_v2.8.4_de.exe
2014-01-10 17:32 - 2012-11-27 14:06 - 00281768 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2014-01-10 17:13 - 2012-11-26 16:05 - 00114456 _____ C:\Users\Tarik\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-10 16:39 - 2014-01-10 16:39 - 00000000 ____D C:\Users\Tarik\Desktop\Crack
2014-01-10 16:35 - 2012-11-27 14:06 - 00000000 ____D C:\Users\Tarik\AppData\Local\PunkBuster
2014-01-10 16:32 - 2013-12-05 18:28 - 00000000 ____D C:\ProgramData\Corel
2014-01-10 16:25 - 2012-12-25 21:41 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JoWooD
2014-01-09 19:35 - 2013-12-06 16:40 - 00000000 ____D C:\Users\Tarik\AppData\Local\CrashDumps
2014-01-07 18:48 - 2009-11-16 18:05 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-05 14:32 - 2013-07-04 19:38 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\uTorrent
2014-01-05 14:31 - 2014-01-05 14:30 - 00232031 _____ C:\Users\Tarik\Downloads\Essay
2014-01-04 10:45 - 2013-09-13 19:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-03 22:12 - 2013-02-23 20:22 - 00737600 _____ C:\Windows\DirectX.log
2014-01-03 22:11 - 2014-01-03 21:56 - 553230663 _____ (Epic Games, Inc.) C:\Users\Tarik\Downloads\WDS.exe
2014-01-03 12:24 - 2013-07-02 20:43 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-03 12:24 - 2012-11-26 16:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-30 15:12 - 2013-12-30 15:12 - 00000000 _____ C:\Users\Tarik\defogger_reenable
2013-12-30 15:12 - 2012-11-26 16:05 - 00000000 ____D C:\Users\Tarik
2013-12-30 15:04 - 2013-12-30 15:04 - 00377856 _____ C:\Users\Tarik\Downloads\1jn1ckw1.exe
2013-12-30 15:03 - 2013-12-30 15:03 - 00050477 _____ C:\Users\Tarik\Downloads\Defogger.exe
2013-12-27 13:13 - 2013-12-27 13:13 - 00000000 ____D C:\Users\Tarik\AppData\Local\Flying_Castle_Entertainme
2013-12-26 12:44 - 2013-12-26 12:21 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Natural Selection 2
2013-12-25 14:39 - 2013-12-25 14:39 - 00000199 _____ C:\Users\Tarik\Desktop\Natural Selection 2.url
2013-12-25 01:44 - 2013-12-21 10:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-23 22:17 - 2013-12-23 22:17 - 08537832 _____ C:\Users\Tarik\Desktop\Entwurf1.psd
2013-12-23 22:01 - 2013-12-23 22:01 - 00000000 ____D C:\Users\Tarik\Downloads\__MACOSX
2013-12-23 21:54 - 2013-12-23 21:54 - 07444038 _____ C:\Users\Tarik\Downloads\Brush_Pack___Splashes_Of_Paint_by_MouritsaDA_Stock.abr
2013-12-23 21:53 - 2013-12-23 21:53 - 01467371 _____ C:\Users\Tarik\Downloads\benblogged_grungeabr.zip
2013-12-23 21:53 - 2013-12-23 21:53 - 00604249 _____ C:\Users\Tarik\Downloads\benblogged_splatterabr.zip
2013-12-22 17:14 - 2013-12-22 17:13 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (3)
2013-12-21 20:13 - 2012-07-04 20:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

Some content of TEMP:
====================
C:\Users\Tarik\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 02:34

==================== End Of Log ============================
--- --- ---




Viele Grüße
Ryneld / Tarik

schrauber 21.01.2014 10:51

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:35 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131