Trojaner-Board
Seite 3 von 3 12 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Trojan:Win32/Necurs.A unter Windows 7 - Bitte um Hilfe zur Entfernung (https://www.trojaner-board.de/153177-trojan-win32-necurs-a-windows-7-bitte-um-hilfe-entfernung.html)

3Mücken 14.05.2014 13:35
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-05-2014 01
Ran by kaisermuecke at 2014-05-14 14:18:01 Run:3
Running from C:\Users\kaisermuecke\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\kaisermuecke\Marlene\HP_2013_Wellemoebel.zip
SearchScopes: HKCU - URL hxxp://search.conduit.com/Results.aspx?ctid=CT3321037&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP8118B7E3-3057-4B07-ABA4-F0DCB45F937D&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
2014-04-28 17:18 - 2014-04-28 17:18 - 00001675 _____ () C:\Users\Public\Desktop\iMesh-Installation fortsetzen.lnk

*****************

C:\Users\kaisermuecke\Marlene\HP_2013_Wellemoebel.zip => Moved successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\URL => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SuggestionsURL_JSON => Value deleted successfully.
C:\Users\Public\Desktop\iMesh-Installation fortsetzen.lnk => Moved successfully.

==== End of Fixlog ====


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01
Ran by kaisermuecke (administrator) on VAIO on 14-05-2014 14:19:11
Running from C:\Users\kaisermuecke\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSpt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
() C:\Program Files (x86)\Sony\SonicStage\SSAAD.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Sony Corporation) C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(AVEO) C:\Program Files (x86)\AVEO USB2.0 PC Camera\CamAppSTI.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(1und1 Mail und Media GmbH) C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_13_0_0_206_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-06-21] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-06-21] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [212480 2010-05-14] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)
HKLM-x32\...\Run: [ContentTransferWMDetector.exe] => C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [583016 2009-11-19] (Sony Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM-x32\...\Run: [CamAppSTI.exe] => C:\Program Files (x86)\AVEO USB2.0 PC Camera\CamAppSTI.exe [28672 2009-01-04] (AVEO)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-02] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-06-04] (Geek Software GmbH)
HKLM-x32\...\Run: [MailCheck IE Broker] => C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe [1810496 2014-04-24] (1und1 Mail und Media GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-3801510222-125144055-1401985464-1000\...\Run: [SsAAD.exe] => C:\Program Files (x86)\Sony\SonicStage\SSAAD.exe [476728 2007-02-05] ()
HKU\S-1-5-21-3801510222-125144055-1401985464-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1088424 2012-10-13] (Nokia)
HKU\S-1-5-21-3801510222-125144055-1401985464-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-3801510222-125144055-1401985464-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-12-04] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: WEB.DE MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: WEB.DE MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-25]

Chrome:
=======
CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-04-15&ent=hp&u=7D54D724A51E68AFE99F44534D6FA371
CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-04-15&ent=hp&u=7D54D724A51E68AFE99F44534D6FA371"
CHR DefaultSearchKeyword: securesearch
CHR DefaultSearchProvider: SecureSearch
CHR DefaultSearchURL: hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-04-15&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
CHR DefaultNewTabURL:
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll ()
CHR Plugin: (Google Gears 0.5.33.0) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\gears.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.2.183.23\npGoogleOneClick8.dll No File
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Google Wallet) - C:\Users\kaisermuecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-06]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [252416 2010-05-25] (Sony Corporation)
S3 SonicStage Back-End Service; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe [112184 2007-02-05] (Sony Corporation)
S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
S3 SSScsiSV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe [75320 2007-02-05] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)
U3 AppMgmt; %SystemRoot%\System32\appmgmts.dll [X]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S3 AVEO; C:\Windows\System32\DRIVERS\AVEOdcnt.sys [307072 2010-04-01] (AVEO Corp)
R0 mbamchameleon; C:\Windows\System32\drivers\mbamchameleon.sys [88280 2014-04-03] (Malwarebytes Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-14 14:12 - 2014-05-14 14:12 - 00005044 _____ () C:\Users\kaisermuecke\Desktop\AppMgmt.reg
2014-05-13 21:47 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-13 21:47 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-13 21:47 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-13 21:47 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-13 19:38 - 2014-05-14 14:19 - 00016052 _____ () C:\Users\kaisermuecke\Desktop\FRST.txt
2014-05-13 19:37 - 2014-05-13 19:37 - 02066944 _____ (Farbar) C:\Users\kaisermuecke\Desktop\FRST64.exe
2014-05-13 15:55 - 2014-05-13 15:55 - 02347384 _____ (ESET) C:\Users\kaisermuecke\Desktop\esetsmartinstaller_deu.exe
2014-05-13 15:36 - 2014-05-13 15:36 - 00001279 _____ () C:\Users\kaisermuecke\Desktop\mbam.txt
2014-05-13 14:31 - 2014-05-13 14:31 - 00000701 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:31 - 2014-05-13 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:31 - 2014-05-13 14:31 - 00000000 ____D () C:\Malwarebytes Anti-Malware
2014-05-13 14:31 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-13 14:31 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-13 14:27 - 2014-05-13 14:28 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\kaisermuecke\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 14:26 - 2014-05-13 14:26 - 00000000 __SHD () C:\Users\kaisermuecke\AppData\Local\EmieUserList
2014-05-13 14:26 - 2014-05-13 14:26 - 00000000 __SHD () C:\Users\kaisermuecke\AppData\Local\EmieSiteList
2014-05-12 21:35 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-12 21:35 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-12 21:35 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-12 21:35 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-12 21:35 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-12 21:35 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-12 21:35 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-12 21:35 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-12 21:35 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-12 21:35 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-12 21:35 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-12 21:35 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-12 21:35 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-12 21:35 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-12 21:35 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-12 21:35 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-12 21:35 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-12 21:35 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-12 21:35 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-12 21:35 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-12 21:35 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-12 21:35 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-12 21:35 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-12 21:35 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-12 21:35 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-12 21:35 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-12 21:35 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-12 21:35 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-12 21:35 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-12 21:35 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-12 21:35 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-12 21:35 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-12 21:35 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-12 21:35 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-12 21:35 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-12 21:35 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-12 21:35 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-12 21:35 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-12 21:35 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-12 21:35 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-12 21:35 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-12 21:35 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-12 21:35 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-12 21:35 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-12 21:34 - 2014-05-12 21:34 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-12 17:28 - 2014-05-12 17:28 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-12 17:26 - 2014-05-12 17:26 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-12 17:26 - 2014-05-12 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-12 17:17 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-12 17:17 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-12 16:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-12 16:54 - 2014-05-12 16:54 - 01325827 _____ () C:\Users\kaisermuecke\Desktop\adwcleaner.exe
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\Program Files\WEB.DE MailCheck
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2014-05-07 21:29 - 2014-05-12 16:58 - 00000000 ____D () C:\AdwCleaner
2014-05-07 20:06 - 2014-05-07 20:06 - 00019630 _____ () C:\ComboFix.txt
2014-05-07 14:58 - 2014-05-07 14:58 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\TDSSKiller.2.8.16.0_29.04.2014_22.04.00_log
2014-05-07 14:39 - 2014-05-07 14:39 - 00000000 ____D () C:\ProgramData\UUdb
2014-04-29 22:29 - 2014-04-29 22:29 - 00063551 _____ () C:\Users\kaisermuecke\Desktop\TDSSKiller.2.8.16.0_29.04.2014_22.04.00_log.zip
2014-04-29 22:06 - 2014-04-29 22:06 - 00000000 ____D () C:\Users\kaisermuecke\Downloads\tdsskiller (1)
2014-04-29 22:05 - 2014-04-29 22:05 - 04143738 _____ () C:\Users\kaisermuecke\Downloads\tdsskiller (1).zip
2014-04-29 22:04 - 2014-04-29 22:04 - 04143738 _____ () C:\Users\kaisermuecke\Downloads\tdsskiller.zip
2014-04-29 22:03 - 2014-04-29 22:05 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\kaisermuecke\Desktop\tdsskiller.exe
2014-04-29 21:17 - 2014-04-29 21:17 - 00001267 _____ () C:\Users\kaisermuecke\Desktop\mbar-1.07.0.1009.lnk
2014-04-29 19:40 - 2014-05-13 15:32 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-04-29 19:40 - 2014-05-13 14:31 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-29 19:36 - 2014-05-13 15:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-29 19:35 - 2014-04-29 21:18 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\mbar
2014-04-29 19:35 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-29 19:34 - 2014-04-29 19:35 - 12589848 _____ (Malwarebytes Corp.) C:\Users\kaisermuecke\Downloads\mbar-1.07.0.1009.exe
2014-04-28 20:48 - 2014-05-07 23:18 - 00000000 ____D () C:\Qoobox
2014-04-28 20:48 - 2014-04-28 20:48 - 00000741 _____ () C:\Users\kaisermuecke\Desktop\ComboFix.lnk
2014-04-28 20:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-28 20:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-28 20:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-28 20:47 - 2014-05-07 23:19 - 00000000 ____D () C:\Windows\erdnt
2014-04-28 20:47 - 2014-04-28 20:47 - 05196309 ____R (Swearware) C:\Users\kaisermuecke\Downloads\ComboFix.exe
2014-04-28 18:03 - 2014-04-28 18:03 - 00380416 _____ () C:\Users\kaisermuecke\Downloads\misblmly.exe
2014-04-28 17:56 - 2014-05-14 14:19 - 00000000 ____D () C:\FRST
2014-04-28 17:20 - 2014-04-28 17:23 - 00000486 _____ () C:\Users\kaisermuecke\Desktop\defogger_disable.log
2014-04-28 17:20 - 2014-04-28 17:20 - 00000000 _____ () C:\Users\kaisermuecke\defogger_reenable
2014-04-21 11:38 - 2014-04-21 11:39 - 13849784 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\mseinstall.exe
2014-04-21 11:25 - 2014-04-21 11:26 - 26747104 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\Windows-KB890830-x64-V5.11 (1).exe
2014-04-21 10:23 - 2014-04-21 10:23 - 00001173 _____ () C:\Users\kaisermuecke\Downloads\Crombie_Die-stillen-Wasser-des-Todes.acsm
2014-04-21 10:17 - 2014-04-21 10:32 - 256314176 _____ () C:\Users\kaisermuecke\Downloads\kis14.0.0.4651abDE_5169 (1).exe
2014-04-20 22:02 - 2014-04-20 22:02 - 00000000 ____D () C:\ProgramData\Licenses
2014-04-20 22:01 - 2014-04-20 22:01 - 00000000 ____D () C:\ProgramData\Simply Super Software
2014-04-20 21:56 - 2014-04-20 21:56 - 18058688 _____ (Simply Super Software ) C:\Users\kaisermuecke\Downloads\trjsetup691.exe
2014-04-20 21:12 - 2014-04-20 21:13 - 26747104 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\Windows-KB890830-x64-V5.11.exe
2014-04-20 20:44 - 2014-04-20 21:01 - 256314176 _____ () C:\Users\kaisermuecke\Downloads\kis14.0.0.4651abDE_5169.exe
2014-04-20 13:48 - 2014-04-20 13:48 - 00000000 ____D () C:\Users\kaisermuecke\Documents\Criterion Games
2014-04-20 12:34 - 2014-04-20 12:34 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-04-20 12:34 - 2014-04-20 12:34 - 00000000 ____D () C:\ProgramData\EA Core
2014-04-20 11:39 - 2014-04-20 12:00 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-04-20 11:39 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-04-20 11:39 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-04-20 11:39 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-04-20 11:39 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-04-20 11:39 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-04-20 11:39 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-04-20 11:39 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-04-20 11:39 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-04-20 11:39 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-04-20 11:39 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-04-20 11:39 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-04-20 11:39 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-04-20 11:39 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-04-20 11:39 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-04-20 11:39 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-04-20 11:39 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-04-20 11:39 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-04-20 11:39 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-04-20 11:39 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-04-20 11:39 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-04-20 11:39 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-04-20 11:39 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-04-20 11:39 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-04-20 11:39 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-04-20 11:39 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-04-20 11:39 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-04-20 11:39 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-04-20 11:39 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-04-20 11:39 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-04-20 11:39 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-04-20 11:39 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-04-20 11:39 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-04-20 11:39 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-04-20 11:39 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-04-20 11:39 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-04-20 11:39 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-04-20 11:39 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-04-20 11:39 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-04-20 11:39 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-04-20 11:39 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-04-20 11:39 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-04-20 11:39 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-04-20 11:39 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-04-20 11:39 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-04-20 11:39 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-04-20 11:39 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-04-20 11:39 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-04-20 11:39 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-04-20 11:39 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-04-20 11:39 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-04-20 11:39 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-04-20 11:39 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-04-20 11:39 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-04-20 11:39 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-04-20 11:39 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-04-20 11:39 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-04-20 11:39 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-04-20 11:39 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-04-20 11:39 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-04-20 11:39 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-04-20 11:39 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-04-20 11:39 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-04-20 11:39 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-04-20 11:39 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-04-20 11:39 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-04-20 11:39 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-04-20 11:39 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-04-20 11:39 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-04-20 11:39 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-04-20 11:39 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-04-20 11:39 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-04-20 11:39 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-04-20 11:39 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-04-20 11:39 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-04-20 11:39 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-04-20 11:39 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-04-20 11:39 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-04-20 11:39 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-04-20 11:38 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-04-20 11:38 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-04-20 11:38 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-04-20 11:38 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-04-20 11:38 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-04-20 11:38 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-04-20 11:38 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-04-20 11:38 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-04-20 11:38 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-04-20 11:38 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-04-20 11:38 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-04-20 11:38 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-04-20 11:38 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-04-20 11:38 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-04-20 11:38 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-04-20 11:38 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-04-20 11:32 - 2014-04-20 11:35 - 00000000 ____D () C:\ProgramData\Solidshield
2014-04-15 20:13 - 2014-04-15 20:13 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\LavasoftStatistics
2014-04-15 20:04 - 2014-04-15 20:04 - 00000000 ____D () C:\ProgramData\BitDefender
2014-04-15 19:43 - 2014-04-20 20:41 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-04-15 19:43 - 2014-04-15 19:43 - 00000000 ____D () C:\Program Files\Lavasoft
2014-04-15 19:40 - 2014-04-15 19:40 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-04-15 18:40 - 2014-04-15 18:46 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-04-15 17:36 - 2014-04-15 17:36 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\TuneUp Software
2014-04-15 17:24 - 2014-04-15 19:10 - 00000000 ____D () C:\ProgramData\MFAData
2014-04-15 17:24 - 2014-04-15 17:24 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Local\MFAData
2014-04-15 14:42 - 2014-04-15 14:42 - 00185944 _____ (Лаборатория Касперского) C:\Users\kaisermuecke\Downloads\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5623.exe
2014-04-15 13:51 - 2014-04-16 14:27 - 00000000 ____D () C:\Windows\SysWOW64\140415-135137
2014-04-14 20:04 - 2014-04-16 14:27 - 00000000 ____D () C:\Windows\SysWOW64\140414-200411
2014-04-14 15:33 - 2014-04-16 14:27 - 00000000 ____D () C:\Windows\SysWOW64\140414-153355
2014-04-14 15:30 - 2014-04-14 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-04-14 15:30 - 2014-04-14 15:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-14 15:30 - 2014-04-14 15:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-04-14 14:46 - 2014-04-16 14:27 - 00000000 ____D () C:\Windows\SysWOW64\140414-144609
2014-04-14 14:30 - 2014-04-16 14:27 - 00000000 ____D () C:\Windows\SysWOW64\140414-143036
2014-04-14 14:09 - 2014-04-16 14:27 - 00000000 ____D () C:\Windows\SysWOW64\140414-140952
2014-04-14 13:55 - 2014-04-16 14:27 - 00000000 ____D () C:\Windows\SysWOW64\140414-135557

==================== One Month Modified Files and Folders =======

2014-05-14 14:23 - 2014-05-13 19:38 - 00016052 _____ () C:\Users\kaisermuecke\Desktop\FRST.txt
2014-05-14 14:19 - 2014-04-28 17:56 - 00000000 ____D () C:\FRST
2014-05-14 14:18 - 2011-05-25 17:12 - 00000000 ____D () C:\Users\kaisermuecke\Marlene
2014-05-14 14:12 - 2014-05-14 14:12 - 00005044 _____ () C:\Users\kaisermuecke\Desktop\AppMgmt.reg
2014-05-14 14:09 - 2011-02-13 11:51 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B773CA8F-B2ED-4BFB-8A77-50CDB650C6F5}
2014-05-14 14:07 - 2010-12-04 18:10 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-05-14 14:07 - 2010-12-04 18:10 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-05-14 14:07 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-14 14:06 - 2011-02-13 11:43 - 02012880 _____ () C:\Windows\WindowsUpdate.log
2014-05-14 14:06 - 2010-12-04 09:32 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-14 14:04 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-14 14:04 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-14 13:57 - 2014-02-22 16:56 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-05-14 13:57 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-14 13:57 - 2009-07-14 06:51 - 00221647 _____ () C:\Windows\setupact.log
2014-05-14 13:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-05-14 13:56 - 2010-10-11 22:06 - 00153786 _____ () C:\Windows\PFRO.log
2014-05-13 21:28 - 2010-12-04 09:32 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-13 21:24 - 2013-04-06 17:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-13 20:34 - 2013-02-21 19:02 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\Skype
2014-05-13 19:37 - 2014-05-13 19:37 - 02066944 _____ (Farbar) C:\Users\kaisermuecke\Desktop\FRST64.exe
2014-05-13 15:55 - 2014-05-13 15:55 - 02347384 _____ (ESET) C:\Users\kaisermuecke\Desktop\esetsmartinstaller_deu.exe
2014-05-13 15:54 - 2011-05-11 14:28 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-05-13 15:36 - 2014-05-13 15:36 - 00001279 _____ () C:\Users\kaisermuecke\Desktop\mbam.txt
2014-05-13 15:34 - 2014-04-29 19:36 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-13 15:33 - 2010-10-11 22:00 - 00000000 ____D () C:\Windows\Panther
2014-05-13 15:32 - 2014-04-29 19:40 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-13 14:31 - 2014-05-13 14:31 - 00000701 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:31 - 2014-05-13 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:31 - 2014-05-13 14:31 - 00000000 ____D () C:\Malwarebytes Anti-Malware
2014-05-13 14:31 - 2014-04-29 19:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 14:28 - 2014-05-13 14:27 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\kaisermuecke\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 14:26 - 2014-05-13 14:26 - 00000000 __SHD () C:\Users\kaisermuecke\AppData\Local\EmieUserList
2014-05-13 14:26 - 2014-05-13 14:26 - 00000000 __SHD () C:\Users\kaisermuecke\AppData\Local\EmieSiteList
2014-05-13 14:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-12 21:34 - 2014-05-12 21:34 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-12 18:19 - 2014-02-08 20:28 - 00626501 _____ () C:\test.xml
2014-05-12 17:28 - 2014-05-12 17:28 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-12 17:26 - 2014-05-12 17:26 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-12 17:26 - 2014-05-12 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-12 17:26 - 2010-12-04 09:47 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-12 17:23 - 2010-12-04 09:32 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-12 17:23 - 2010-12-04 09:32 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-12 16:58 - 2014-05-07 21:29 - 00000000 ____D () C:\AdwCleaner
2014-05-12 16:54 - 2014-05-12 16:54 - 01325827 _____ () C:\Users\kaisermuecke\Desktop\adwcleaner.exe
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\Program Files\WEB.DE MailCheck
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2014-05-12 16:48 - 2011-02-13 11:43 - 00000000 ____D () C:\Users\kaisermuecke
2014-05-07 23:19 - 2014-04-28 20:47 - 00000000 ____D () C:\Windows\erdnt
2014-05-07 23:19 - 2013-01-16 18:57 - 00000000 ____D () C:\ProgramData\1&1 Mail & Media GmbH
2014-05-07 23:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-07 23:18 - 2014-04-28 20:48 - 00000000 ____D () C:\Qoobox
2014-05-07 22:38 - 2009-07-14 09:44 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-07 20:06 - 2014-05-07 20:06 - 00019630 _____ () C:\ComboFix.txt
2014-05-07 20:00 - 2009-07-14 04:34 - 76836864 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-05-07 20:00 - 2009-07-14 04:34 - 26738688 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-05-07 20:00 - 2009-07-14 04:34 - 00258048 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-05-07 20:00 - 2009-07-14 04:34 - 00061440 _____ () C:\Windows\system32\config\SAM.bak
2014-05-07 20:00 - 2009-07-14 04:34 - 00028672 _____ () C:\Windows\system32\config\SECURITY.bak
2014-05-07 14:58 - 2014-05-07 14:58 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\TDSSKiller.2.8.16.0_29.04.2014_22.04.00_log
2014-05-07 14:39 - 2014-05-07 14:39 - 00000000 ____D () C:\ProgramData\UUdb
2014-05-07 14:39 - 2013-01-16 18:57 - 00003878 _____ () C:\Windows\System32\Tasks\Registration 1und1 Task
2014-05-07 14:39 - 2013-01-16 18:57 - 00002002 _____ () C:\Users\kaisermuecke\Desktop\Amazon.lnk
2014-05-07 14:39 - 2013-01-16 18:57 - 00002000 _____ () C:\Users\kaisermuecke\Desktop\WEB.DE.lnk
2014-05-07 14:39 - 2013-01-16 18:57 - 00000000 ____D () C:\Program Files (x86)\1und1Softwareaktualisierung
2014-05-01 10:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-29 22:29 - 2014-04-29 22:29 - 00063551 _____ () C:\Users\kaisermuecke\Desktop\TDSSKiller.2.8.16.0_29.04.2014_22.04.00_log.zip
2014-04-29 22:06 - 2014-04-29 22:06 - 00000000 ____D () C:\Users\kaisermuecke\Downloads\tdsskiller (1)
2014-04-29 22:05 - 2014-04-29 22:05 - 04143738 _____ () C:\Users\kaisermuecke\Downloads\tdsskiller (1).zip
2014-04-29 22:05 - 2014-04-29 22:03 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\kaisermuecke\Desktop\tdsskiller.exe
2014-04-29 22:04 - 2014-04-29 22:04 - 04143738 _____ () C:\Users\kaisermuecke\Downloads\tdsskiller.zip
2014-04-29 21:18 - 2014-04-29 19:35 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\mbar
2014-04-29 21:17 - 2014-04-29 21:17 - 00001267 _____ () C:\Users\kaisermuecke\Desktop\mbar-1.07.0.1009.lnk
2014-04-29 19:35 - 2014-04-29 19:34 - 12589848 _____ (Malwarebytes Corp.) C:\Users\kaisermuecke\Downloads\mbar-1.07.0.1009.exe
2014-04-29 16:01 - 2014-05-13 21:47 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-13 21:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 15:25 - 2013-04-06 17:13 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 15:25 - 2013-04-06 17:13 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 15:25 - 2011-11-07 12:47 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 14:48 - 2014-05-13 21:47 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-13 21:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-28 21:26 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-04-28 21:22 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-28 20:48 - 2014-04-28 20:48 - 00000741 _____ () C:\Users\kaisermuecke\Desktop\ComboFix.lnk
2014-04-28 20:47 - 2014-04-28 20:47 - 05196309 ____R (Swearware) C:\Users\kaisermuecke\Downloads\ComboFix.exe
2014-04-28 18:11 - 2011-02-26 19:10 - 00000000 ____D () C:\Users\kaisermuecke\Anja
2014-04-28 18:03 - 2014-04-28 18:03 - 00380416 _____ () C:\Users\kaisermuecke\Downloads\misblmly.exe
2014-04-28 17:23 - 2014-04-28 17:20 - 00000486 _____ () C:\Users\kaisermuecke\Desktop\defogger_disable.log
2014-04-28 17:20 - 2014-04-28 17:20 - 00000000 _____ () C:\Users\kaisermuecke\defogger_reenable
2014-04-27 12:52 - 2011-05-25 17:12 - 00000000 ____D () C:\Users\kaisermuecke\Matthias
2014-04-21 11:39 - 2014-04-21 11:38 - 13849784 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\mseinstall.exe
2014-04-21 11:26 - 2014-04-21 11:25 - 26747104 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\Windows-KB890830-x64-V5.11 (1).exe
2014-04-21 10:32 - 2014-04-21 10:17 - 256314176 _____ () C:\Users\kaisermuecke\Downloads\kis14.0.0.4651abDE_5169 (1).exe
2014-04-21 10:24 - 2013-01-02 14:45 - 00000000 ____D () C:\Users\kaisermuecke\Documents\My Digital Editions
2014-04-21 10:23 - 2014-04-21 10:23 - 00001173 _____ () C:\Users\kaisermuecke\Downloads\Crombie_Die-stillen-Wasser-des-Todes.acsm
2014-04-20 22:02 - 2014-04-20 22:02 - 00000000 ____D () C:\ProgramData\Licenses
2014-04-20 22:01 - 2014-04-20 22:01 - 00000000 ____D () C:\ProgramData\Simply Super Software
2014-04-20 21:56 - 2014-04-20 21:56 - 18058688 _____ (Simply Super Software ) C:\Users\kaisermuecke\Downloads\trjsetup691.exe
2014-04-20 21:13 - 2014-04-20 21:12 - 26747104 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\Windows-KB890830-x64-V5.11.exe
2014-04-20 21:01 - 2014-04-20 20:44 - 256314176 _____ () C:\Users\kaisermuecke\Downloads\kis14.0.0.4651abDE_5169.exe
2014-04-20 20:41 - 2014-04-15 19:43 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-04-20 13:48 - 2014-04-20 13:48 - 00000000 ____D () C:\Users\kaisermuecke\Documents\Criterion Games
2014-04-20 12:34 - 2014-04-20 12:34 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-04-20 12:34 - 2014-04-20 12:34 - 00000000 ____D () C:\ProgramData\EA Core
2014-04-20 12:34 - 2011-02-13 12:11 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\Adobe
2014-04-20 12:00 - 2014-04-20 11:39 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-04-20 12:00 - 2011-02-18 16:08 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Local\Adobe
2014-04-20 11:59 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-04-20 11:39 - 2010-12-04 09:39 - 00083098 _____ () C:\Windows\DirectX.log
2014-04-20 11:35 - 2014-04-20 11:32 - 00000000 ____D () C:\ProgramData\Solidshield
2014-04-16 14:27 - 2014-04-15 13:51 - 00000000 ____D () C:\Windows\SysWOW64\140415-135137
2014-04-16 14:27 - 2014-04-14 20:04 - 00000000 ____D () C:\Windows\SysWOW64\140414-200411
2014-04-16 14:27 - 2014-04-14 15:33 - 00000000 ____D () C:\Windows\SysWOW64\140414-153355
2014-04-16 14:27 - 2014-04-14 14:46 - 00000000 ____D () C:\Windows\SysWOW64\140414-144609
2014-04-16 14:27 - 2014-04-14 14:30 - 00000000 ____D () C:\Windows\SysWOW64\140414-143036
2014-04-16 14:27 - 2014-04-14 14:09 - 00000000 ____D () C:\Windows\SysWOW64\140414-140952
2014-04-16 14:27 - 2014-04-14 13:55 - 00000000 ____D () C:\Windows\SysWOW64\140414-135557
2014-04-16 14:27 - 2014-04-13 23:14 - 00000000 ____D () C:\Windows\SysWOW64\140413-231407
2014-04-15 20:13 - 2014-04-15 20:13 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\LavasoftStatistics
2014-04-15 20:04 - 2014-04-15 20:04 - 00000000 ____D () C:\ProgramData\BitDefender
2014-04-15 19:43 - 2014-04-15 19:43 - 00000000 ____D () C:\Program Files\Lavasoft
2014-04-15 19:40 - 2014-04-15 19:40 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-04-15 19:22 - 2013-12-03 16:16 - 00011833 _____ () C:\Windows\IE11_main.log
2014-04-15 19:10 - 2014-04-15 17:24 - 00000000 ____D () C:\ProgramData\MFAData
2014-04-15 18:46 - 2014-04-15 18:40 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-04-15 18:10 - 2013-11-19 10:46 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\Dropbox
2014-04-15 18:10 - 2011-02-13 11:50 - 00000000 ___RD () C:\Users\kaisermuecke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-15 17:42 - 2013-11-19 10:48 - 00000000 ___RD () C:\Users\kaisermuecke\Dropbox
2014-04-15 17:36 - 2014-04-15 17:36 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\TuneUp Software
2014-04-15 17:24 - 2014-04-15 17:24 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Local\MFAData
2014-04-15 14:42 - 2014-04-15 14:42 - 00185944 _____ (Лаборатория Касперского) C:\Users\kaisermuecke\Downloads\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5623.exe
2014-04-14 20:02 - 2013-01-26 13:46 - 00000000 ____D () C:\Program Files (x86)\EasternGraphics
2014-04-14 15:30 - 2014-04-14 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-04-14 15:30 - 2014-04-14 15:30 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-14 15:30 - 2014-04-14 15:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-04-14 04:24 - 2014-05-12 17:17 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-12 17:17 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Files to move or delete:
====================
C:\Users\kaisermuecke\SF_CDA_Full_Non-Network_deu_NB.exe


Some content of TEMP:
====================
C:\Users\kaisermuecke\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\kaisermuecke\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\kaisermuecke\AppData\Local\Temp\Quarantine.exe
C:\Users\kaisermuecke\AppData\Local\Temp\WEB.DE_Toolbar_IE_Setup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-12 17:52

==================== End Of Log ============================
--- --- ---

--- --- ---

mort 15.05.2014 20:37
Sieht schon recht gut aus. :)

Schritt 1

Downloade dir bitte Windows Repair (All In One) von hier.
  • Installiere das Programm und starte es, nachdem die Installation abgeschlossen wurde.
  • Klicke auf Step 2 und drücke unter Check Disk auf Do It.
  • Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.
  • Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs und drücke Start.
  • Bitte klicke auf Select all
  • Hake Restart/Shutdown System when Finished an und wähle darunter Restart System aus.
  • Drücke Start.

    http://www.tweaking.com/index.php?ct...on=file&id=107

Schritt 2

Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

3Mücken 16.05.2014 18:53
Hallo, habe ich alles gemacht:


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-05-2014
Ran by kaisermuecke (administrator) on VAIO on 16-05-2014 18:43:24
Running from C:\Users\kaisermuecke\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSpt.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
() C:\Program Files (x86)\Sony\SonicStage\SSAAD.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Sony Corporation) C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(AVEO) C:\Program Files (x86)\AVEO USB2.0 PC Camera\CamAppSTI.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(1und1 Mail und Media GmbH) C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-06-21] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-06-21] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [212480 2010-05-14] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)
HKLM-x32\...\Run: [ContentTransferWMDetector.exe] => C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [583016 2009-11-19] (Sony Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM-x32\...\Run: [CamAppSTI.exe] => C:\Program Files (x86)\AVEO USB2.0 PC Camera\CamAppSTI.exe [28672 2009-01-04] (AVEO)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-02] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-06-04] (Geek Software GmbH)
HKLM-x32\...\Run: [MailCheck IE Broker] => C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe [1810496 2014-04-24] (1und1 Mail und Media GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-3801510222-125144055-1401985464-1000\...\Run: [SsAAD.exe] => C:\Program Files (x86)\Sony\SonicStage\SSAAD.exe [476728 2007-02-05] ()
HKU\S-1-5-21-3801510222-125144055-1401985464-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1088424 2012-10-13] (Nokia)
HKU\S-1-5-21-3801510222-125144055-1401985464-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-3801510222-125144055-1401985464-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-12-04] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: WEB.DE MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: WEB.DE MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-25]

Chrome:
=======
CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-04-15&ent=hp&u=7D54D724A51E68AFE99F44534D6FA371
CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-04-15&ent=hp&u=7D54D724A51E68AFE99F44534D6FA371"
CHR DefaultSearchKeyword: securesearch
CHR DefaultSearchProvider: SecureSearch
CHR DefaultSearchURL: hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-04-15&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
CHR DefaultNewTabURL:
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll ()
CHR Plugin: (Google Gears 0.5.33.0) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\gears.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.2.183.23\npGoogleOneClick8.dll No File
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Google Wallet) - C:\Users\kaisermuecke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-06]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [252416 2010-05-25] (Sony Corporation)
S3 SonicStage Back-End Service; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeSvc.exe [112184 2007-02-05] (Sony Corporation)
S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
S3 SSScsiSV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SSScsiSV.exe [75320 2007-02-05] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)
S3 AppMgmt; %SystemRoot%\System32\appmgmts.dll [X]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S3 AVEO; C:\Windows\System32\DRIVERS\AVEOdcnt.sys [307072 2010-04-01] (AVEO Corp)
R0 mbamchameleon; C:\Windows\System32\drivers\mbamchameleon.sys [88280 2014-04-03] (Malwarebytes Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-16 18:43 - 2014-05-16 18:43 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\FRST-OlderVersion
2014-05-16 17:41 - 2014-05-16 17:41 - 00003160 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-05-16 16:12 - 2014-05-16 17:43 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-05-16 16:11 - 2014-05-16 16:11 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-VAIO-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-05-16 16:09 - 2014-05-16 16:09 - 00000000 ____D () C:\RegBackup
2014-05-16 15:01 - 2014-05-16 15:01 - 00003288 _____ () C:\bootsqm.dat
2014-05-16 14:39 - 2014-05-16 15:03 - 00002159 _____ () C:\Users\kaisermuecke\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-05-16 14:39 - 2014-05-16 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-05-16 14:38 - 2014-05-16 14:38 - 05577080 _____ () C:\Users\kaisermuecke\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-05-16 14:38 - 2014-05-16 14:38 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-05-15 19:34 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 19:34 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 19:34 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 19:34 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 19:34 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 19:34 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 15:46 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 15:46 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 15:46 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 15:46 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 15:45 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 15:45 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 15:45 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 15:45 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 15:44 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 15:44 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 15:44 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 15:44 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 15:44 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 15:44 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 15:44 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 15:44 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 15:44 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 15:44 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 15:44 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 15:44 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 15:44 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 15:44 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 15:44 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 15:44 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 15:44 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 15:44 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 15:44 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 15:44 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 15:44 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 15:44 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 15:44 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 15:44 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 15:44 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 15:44 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 15:44 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-14 14:12 - 2014-05-14 14:12 - 00005044 _____ () C:\Users\kaisermuecke\Desktop\AppMgmt.reg
2014-05-13 19:38 - 2014-05-16 18:43 - 00015652 _____ () C:\Users\kaisermuecke\Desktop\FRST.txt
2014-05-13 19:37 - 2014-05-16 18:43 - 02067456 _____ (Farbar) C:\Users\kaisermuecke\Desktop\FRST64.exe
2014-05-13 15:55 - 2014-05-13 15:55 - 02347384 _____ (ESET) C:\Users\kaisermuecke\Desktop\esetsmartinstaller_deu.exe
2014-05-13 15:36 - 2014-05-13 15:36 - 00001279 _____ () C:\Users\kaisermuecke\Desktop\mbam.txt
2014-05-13 14:31 - 2014-05-13 14:31 - 00000701 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:31 - 2014-05-13 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:31 - 2014-05-13 14:31 - 00000000 ____D () C:\Malwarebytes Anti-Malware
2014-05-13 14:31 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-13 14:31 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-13 14:27 - 2014-05-13 14:28 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\kaisermuecke\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 14:26 - 2014-05-13 14:26 - 00000000 __SHD () C:\Users\kaisermuecke\AppData\Local\EmieUserList
2014-05-13 14:26 - 2014-05-13 14:26 - 00000000 __SHD () C:\Users\kaisermuecke\AppData\Local\EmieSiteList
2014-05-12 21:35 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-12 21:35 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-12 21:35 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-12 21:35 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-12 21:35 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-12 21:35 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-12 21:35 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-12 21:35 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-12 21:35 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-12 21:35 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-12 21:35 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-12 21:35 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-12 21:35 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-12 21:35 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-12 21:35 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-12 21:35 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-12 21:35 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-12 21:35 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-12 21:35 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-12 21:35 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-12 21:35 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-12 21:35 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-12 21:35 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-12 21:35 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-12 21:35 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-12 21:35 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-12 21:35 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-12 21:35 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-12 21:35 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-12 21:35 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-12 21:35 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-12 21:35 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-12 21:35 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-12 21:35 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-12 21:35 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-12 21:35 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-12 21:35 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-12 21:35 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-12 21:35 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-12 21:35 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-12 21:35 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-12 21:35 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-12 21:35 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-12 21:35 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-12 21:34 - 2014-05-16 14:22 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-12 17:28 - 2014-05-12 17:28 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-12 17:26 - 2014-05-12 17:26 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-12 17:26 - 2014-05-12 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-12 16:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-12 16:54 - 2014-05-12 16:54 - 01325827 _____ () C:\Users\kaisermuecke\Desktop\adwcleaner.exe
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\Program Files\WEB.DE MailCheck
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2014-05-07 21:29 - 2014-05-12 16:58 - 00000000 ____D () C:\AdwCleaner
2014-05-07 20:06 - 2014-05-07 20:06 - 00019630 _____ () C:\ComboFix.txt
2014-05-07 14:58 - 2014-05-07 14:58 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\TDSSKiller.2.8.16.0_29.04.2014_22.04.00_log
2014-05-07 14:39 - 2014-05-07 14:39 - 00000000 ____D () C:\ProgramData\UUdb
2014-04-29 22:29 - 2014-04-29 22:29 - 00063551 _____ () C:\Users\kaisermuecke\Desktop\TDSSKiller.2.8.16.0_29.04.2014_22.04.00_log.zip
2014-04-29 22:06 - 2014-04-29 22:06 - 00000000 ____D () C:\Users\kaisermuecke\Downloads\tdsskiller (1)
2014-04-29 22:05 - 2014-04-29 22:05 - 04143738 _____ () C:\Users\kaisermuecke\Downloads\tdsskiller (1).zip
2014-04-29 22:04 - 2014-04-29 22:04 - 04143738 _____ () C:\Users\kaisermuecke\Downloads\tdsskiller.zip
2014-04-29 22:03 - 2014-04-29 22:05 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\kaisermuecke\Desktop\tdsskiller.exe
2014-04-29 21:17 - 2014-04-29 21:17 - 00001267 _____ () C:\Users\kaisermuecke\Desktop\mbar-1.07.0.1009.lnk
2014-04-29 19:40 - 2014-05-13 15:32 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-04-29 19:40 - 2014-05-13 14:31 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-29 19:36 - 2014-05-13 15:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-29 19:35 - 2014-04-29 21:18 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\mbar
2014-04-29 19:35 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-29 19:34 - 2014-04-29 19:35 - 12589848 _____ (Malwarebytes Corp.) C:\Users\kaisermuecke\Downloads\mbar-1.07.0.1009.exe
2014-04-28 20:48 - 2014-05-07 23:18 - 00000000 ____D () C:\Qoobox
2014-04-28 20:48 - 2014-04-28 20:48 - 00000741 _____ () C:\Users\kaisermuecke\Desktop\ComboFix.lnk
2014-04-28 20:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-28 20:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-28 20:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-28 20:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-28 20:47 - 2014-05-07 23:19 - 00000000 ____D () C:\Windows\erdnt
2014-04-28 20:47 - 2014-04-28 20:47 - 05196309 ____R (Swearware) C:\Users\kaisermuecke\Downloads\ComboFix.exe
2014-04-28 18:03 - 2014-04-28 18:03 - 00380416 _____ () C:\Users\kaisermuecke\Downloads\misblmly.exe
2014-04-28 17:56 - 2014-05-16 18:43 - 00000000 ____D () C:\FRST
2014-04-28 17:20 - 2014-04-28 17:23 - 00000486 _____ () C:\Users\kaisermuecke\Desktop\defogger_disable.log
2014-04-28 17:20 - 2014-04-28 17:20 - 00000000 _____ () C:\Users\kaisermuecke\defogger_reenable
2014-04-21 11:38 - 2014-04-21 11:39 - 13849784 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\mseinstall.exe
2014-04-21 11:25 - 2014-04-21 11:26 - 26747104 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\Windows-KB890830-x64-V5.11 (1).exe
2014-04-21 10:23 - 2014-04-21 10:23 - 00001173 _____ () C:\Users\kaisermuecke\Downloads\Crombie_Die-stillen-Wasser-des-Todes.acsm
2014-04-21 10:17 - 2014-04-21 10:32 - 256314176 _____ () C:\Users\kaisermuecke\Downloads\kis14.0.0.4651abDE_5169 (1).exe
2014-04-20 22:02 - 2014-04-20 22:02 - 00000000 ____D () C:\ProgramData\Licenses
2014-04-20 22:01 - 2014-04-20 22:01 - 00000000 ____D () C:\ProgramData\Simply Super Software
2014-04-20 21:56 - 2014-04-20 21:56 - 18058688 _____ (Simply Super Software ) C:\Users\kaisermuecke\Downloads\trjsetup691.exe
2014-04-20 21:12 - 2014-04-20 21:13 - 26747104 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\Windows-KB890830-x64-V5.11.exe
2014-04-20 20:44 - 2014-04-20 21:01 - 256314176 _____ () C:\Users\kaisermuecke\Downloads\kis14.0.0.4651abDE_5169.exe
2014-04-20 13:48 - 2014-04-20 13:48 - 00000000 ____D () C:\Users\kaisermuecke\Documents\Criterion Games
2014-04-20 12:34 - 2014-04-20 12:34 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-04-20 12:34 - 2014-04-20 12:34 - 00000000 ____D () C:\ProgramData\EA Core
2014-04-20 11:39 - 2014-04-20 12:00 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-04-20 11:39 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-04-20 11:39 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-04-20 11:39 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-04-20 11:39 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-04-20 11:39 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-04-20 11:39 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-04-20 11:39 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-04-20 11:39 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-04-20 11:39 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-04-20 11:39 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-04-20 11:39 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-04-20 11:39 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-04-20 11:39 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-04-20 11:39 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-04-20 11:39 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-04-20 11:39 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-04-20 11:39 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-04-20 11:39 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-04-20 11:39 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-04-20 11:39 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-04-20 11:39 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-04-20 11:39 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-04-20 11:39 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-04-20 11:39 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-04-20 11:39 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-04-20 11:39 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-04-20 11:39 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-04-20 11:39 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-04-20 11:39 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-04-20 11:39 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-04-20 11:39 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-04-20 11:39 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-04-20 11:39 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-04-20 11:39 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-04-20 11:39 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-04-20 11:39 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-04-20 11:39 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-04-20 11:39 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-04-20 11:39 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-04-20 11:39 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-04-20 11:39 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-04-20 11:39 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-04-20 11:39 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-04-20 11:39 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-04-20 11:39 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-04-20 11:39 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-04-20 11:39 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-04-20 11:39 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-04-20 11:39 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-04-20 11:39 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-04-20 11:39 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-04-20 11:39 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-04-20 11:39 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-04-20 11:39 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-04-20 11:39 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-04-20 11:39 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-04-20 11:39 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-04-20 11:39 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-04-20 11:39 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-04-20 11:39 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-04-20 11:39 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-04-20 11:39 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-04-20 11:39 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-04-20 11:39 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-04-20 11:39 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-04-20 11:39 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-04-20 11:39 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-04-20 11:39 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-04-20 11:39 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-04-20 11:39 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-04-20 11:39 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-04-20 11:39 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-04-20 11:39 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-04-20 11:39 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-04-20 11:39 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-04-20 11:39 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-04-20 11:39 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-04-20 11:39 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-04-20 11:39 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-04-20 11:39 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-04-20 11:39 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-04-20 11:39 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-04-20 11:39 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-04-20 11:39 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-04-20 11:39 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-04-20 11:39 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-04-20 11:38 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-04-20 11:38 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-04-20 11:38 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-04-20 11:38 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-04-20 11:38 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-04-20 11:38 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-04-20 11:38 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-04-20 11:38 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-04-20 11:38 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-04-20 11:38 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-04-20 11:38 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-04-20 11:38 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-04-20 11:38 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-04-20 11:38 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-04-20 11:38 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-04-20 11:38 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-04-20 11:32 - 2014-04-20 11:35 - 00000000 ____D () C:\ProgramData\Solidshield

==================== One Month Modified Files and Folders =======

2014-05-16 18:45 - 2014-05-13 19:38 - 00015652 _____ () C:\Users\kaisermuecke\Desktop\FRST.txt
2014-05-16 18:43 - 2014-05-16 18:43 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\FRST-OlderVersion
2014-05-16 18:43 - 2014-05-13 19:37 - 02067456 _____ (Farbar) C:\Users\kaisermuecke\Desktop\FRST64.exe
2014-05-16 18:43 - 2014-04-28 17:56 - 00000000 ____D () C:\FRST
2014-05-16 18:42 - 2013-02-21 19:02 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\Skype
2014-05-16 18:42 - 2011-02-13 11:43 - 01687923 _____ () C:\Windows\WindowsUpdate.log
2014-05-16 18:36 - 2011-02-13 11:51 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B773CA8F-B2ED-4BFB-8A77-50CDB650C6F5}
2014-05-16 18:35 - 2013-04-06 17:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-16 18:35 - 2011-02-13 11:44 - 00077496 _____ () C:\Users\kaisermuecke\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-16 18:35 - 2010-12-04 09:32 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-16 18:35 - 2010-12-04 09:32 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-16 18:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-05-16 18:12 - 2010-12-04 18:10 - 00685820 _____ () C:\Windows\system32\perfh007.dat
2014-05-16 18:12 - 2010-12-04 18:10 - 00145620 _____ () C:\Windows\system32\perfc007.dat
2014-05-16 18:12 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-16 18:12 - 2009-07-14 06:45 - 00009696 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-16 18:12 - 2009-07-14 06:45 - 00009696 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-16 18:07 - 2014-02-22 16:56 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-05-16 18:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-16 18:07 - 2009-07-14 06:51 - 00221983 _____ () C:\Windows\setupact.log
2014-05-16 18:07 - 2009-07-14 06:45 - 00342112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-16 18:05 - 2010-10-11 22:06 - 00154134 _____ () C:\Windows\PFRO.log
2014-05-16 17:43 - 2014-05-16 16:12 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-05-16 17:41 - 2014-05-16 17:41 - 00003160 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-05-16 17:36 - 2009-07-14 04:34 - 00000471 _____ () C:\Windows\win.ini
2014-05-16 16:11 - 2014-05-16 16:11 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-VAIO-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-05-16 16:09 - 2014-05-16 16:09 - 00000000 ____D () C:\RegBackup
2014-05-16 15:03 - 2014-05-16 14:39 - 00002159 _____ () C:\Users\kaisermuecke\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-05-16 15:01 - 2014-05-16 15:01 - 00003288 _____ () C:\bootsqm.dat
2014-05-16 14:39 - 2014-05-16 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-05-16 14:38 - 2014-05-16 14:38 - 05577080 _____ () C:\Users\kaisermuecke\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-05-16 14:38 - 2014-05-16 14:38 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-05-16 14:24 - 2011-02-13 11:50 - 00000000 ___RD () C:\Users\kaisermuecke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-16 14:24 - 2011-02-13 11:50 - 00000000 ___RD () C:\Users\kaisermuecke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 14:22 - 2014-05-12 21:34 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 19:34 - 2011-02-13 16:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 19:33 - 2013-08-21 12:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 19:26 - 2012-08-02 10:18 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 19:10 - 2011-05-25 17:12 - 00000000 ____D () C:\Users\kaisermuecke\Matthias
2014-05-14 19:10 - 2011-02-13 11:43 - 00000000 ____D () C:\Users\kaisermuecke
2014-05-14 18:25 - 2013-04-06 17:13 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:25 - 2013-04-06 17:13 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 18:25 - 2011-11-07 12:47 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 14:18 - 2011-05-25 17:12 - 00000000 ____D () C:\Users\kaisermuecke\Marlene
2014-05-14 14:12 - 2014-05-14 14:12 - 00005044 _____ () C:\Users\kaisermuecke\Desktop\AppMgmt.reg
2014-05-13 15:55 - 2014-05-13 15:55 - 02347384 _____ (ESET) C:\Users\kaisermuecke\Desktop\esetsmartinstaller_deu.exe
2014-05-13 15:54 - 2011-05-11 14:28 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-05-13 15:36 - 2014-05-13 15:36 - 00001279 _____ () C:\Users\kaisermuecke\Desktop\mbam.txt
2014-05-13 15:34 - 2014-04-29 19:36 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-13 15:33 - 2010-10-11 22:00 - 00000000 ____D () C:\Windows\Panther
2014-05-13 15:32 - 2014-04-29 19:40 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-13 14:31 - 2014-05-13 14:31 - 00000701 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-13 14:31 - 2014-05-13 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-13 14:31 - 2014-05-13 14:31 - 00000000 ____D () C:\Malwarebytes Anti-Malware
2014-05-13 14:31 - 2014-04-29 19:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 14:28 - 2014-05-13 14:27 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\kaisermuecke\Desktop\mbam-setup-2.0.1.1004.exe
2014-05-13 14:26 - 2014-05-13 14:26 - 00000000 __SHD () C:\Users\kaisermuecke\AppData\Local\EmieUserList
2014-05-13 14:26 - 2014-05-13 14:26 - 00000000 __SHD () C:\Users\kaisermuecke\AppData\Local\EmieSiteList
2014-05-13 14:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-12 18:19 - 2014-02-08 20:28 - 00626501 _____ () C:\test.xml
2014-05-12 17:28 - 2014-05-12 17:28 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-12 17:26 - 2014-05-12 17:26 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-12 17:26 - 2014-05-12 17:26 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-12 17:26 - 2014-05-12 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-12 17:26 - 2010-12-04 09:47 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-12 17:23 - 2010-12-04 09:32 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-12 17:23 - 2010-12-04 09:32 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-12 16:58 - 2014-05-07 21:29 - 00000000 ____D () C:\AdwCleaner
2014-05-12 16:54 - 2014-05-12 16:54 - 01325827 _____ () C:\Users\kaisermuecke\Desktop\adwcleaner.exe
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\Program Files\WEB.DE MailCheck
2014-05-12 16:48 - 2014-05-12 16:48 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2014-05-09 08:14 - 2014-05-15 15:46 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 15:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-07 23:19 - 2014-04-28 20:47 - 00000000 ____D () C:\Windows\erdnt
2014-05-07 23:19 - 2013-01-16 18:57 - 00000000 ____D () C:\ProgramData\1&1 Mail & Media GmbH
2014-05-07 23:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-07 23:18 - 2014-04-28 20:48 - 00000000 ____D () C:\Qoobox
2014-05-07 22:38 - 2009-07-14 09:44 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-07 20:06 - 2014-05-07 20:06 - 00019630 _____ () C:\ComboFix.txt
2014-05-07 20:00 - 2009-07-14 04:34 - 76836864 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-05-07 20:00 - 2009-07-14 04:34 - 26738688 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-05-07 20:00 - 2009-07-14 04:34 - 00258048 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-05-07 20:00 - 2009-07-14 04:34 - 00061440 _____ () C:\Windows\system32\config\SAM.bak
2014-05-07 20:00 - 2009-07-14 04:34 - 00028672 _____ () C:\Windows\system32\config\SECURITY.bak
2014-05-07 14:58 - 2014-05-07 14:58 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\TDSSKiller.2.8.16.0_29.04.2014_22.04.00_log
2014-05-07 14:39 - 2014-05-07 14:39 - 00000000 ____D () C:\ProgramData\UUdb
2014-05-07 14:39 - 2013-01-16 18:57 - 00003878 _____ () C:\Windows\System32\Tasks\Registration 1und1 Task
2014-05-07 14:39 - 2013-01-16 18:57 - 00002002 _____ () C:\Users\kaisermuecke\Desktop\Amazon.lnk
2014-05-07 14:39 - 2013-01-16 18:57 - 00002000 _____ () C:\Users\kaisermuecke\Desktop\WEB.DE.lnk
2014-05-07 14:39 - 2013-01-16 18:57 - 00000000 ____D () C:\Program Files (x86)\1und1Softwareaktualisierung
2014-05-06 06:40 - 2014-05-15 19:34 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 19:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 19:34 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 19:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 19:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 19:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-01 10:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-29 22:29 - 2014-04-29 22:29 - 00063551 _____ () C:\Users\kaisermuecke\Desktop\TDSSKiller.2.8.16.0_29.04.2014_22.04.00_log.zip
2014-04-29 22:06 - 2014-04-29 22:06 - 00000000 ____D () C:\Users\kaisermuecke\Downloads\tdsskiller (1)
2014-04-29 22:05 - 2014-04-29 22:05 - 04143738 _____ () C:\Users\kaisermuecke\Downloads\tdsskiller (1).zip
2014-04-29 22:05 - 2014-04-29 22:03 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\kaisermuecke\Desktop\tdsskiller.exe
2014-04-29 22:04 - 2014-04-29 22:04 - 04143738 _____ () C:\Users\kaisermuecke\Downloads\tdsskiller.zip
2014-04-29 21:18 - 2014-04-29 19:35 - 00000000 ____D () C:\Users\kaisermuecke\Desktop\mbar
2014-04-29 21:17 - 2014-04-29 21:17 - 00001267 _____ () C:\Users\kaisermuecke\Desktop\mbar-1.07.0.1009.lnk
2014-04-29 19:35 - 2014-04-29 19:34 - 12589848 _____ (Malwarebytes Corp.) C:\Users\kaisermuecke\Downloads\mbar-1.07.0.1009.exe
2014-04-28 21:26 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default
2014-04-28 21:22 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-28 21:22 - 2009-07-14 04:34 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_746
2014-04-28 20:48 - 2014-04-28 20:48 - 00000741 _____ () C:\Users\kaisermuecke\Desktop\ComboFix.lnk
2014-04-28 20:47 - 2014-04-28 20:47 - 05196309 ____R (Swearware) C:\Users\kaisermuecke\Downloads\ComboFix.exe
2014-04-28 18:11 - 2011-02-26 19:10 - 00000000 ____D () C:\Users\kaisermuecke\Anja
2014-04-28 18:03 - 2014-04-28 18:03 - 00380416 _____ () C:\Users\kaisermuecke\Downloads\misblmly.exe
2014-04-28 17:23 - 2014-04-28 17:20 - 00000486 _____ () C:\Users\kaisermuecke\Desktop\defogger_disable.log
2014-04-28 17:20 - 2014-04-28 17:20 - 00000000 _____ () C:\Users\kaisermuecke\defogger_reenable
2014-04-21 11:39 - 2014-04-21 11:38 - 13849784 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\mseinstall.exe
2014-04-21 11:26 - 2014-04-21 11:25 - 26747104 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\Windows-KB890830-x64-V5.11 (1).exe
2014-04-21 10:32 - 2014-04-21 10:17 - 256314176 _____ () C:\Users\kaisermuecke\Downloads\kis14.0.0.4651abDE_5169 (1).exe
2014-04-21 10:24 - 2013-01-02 14:45 - 00000000 ____D () C:\Users\kaisermuecke\Documents\My Digital Editions
2014-04-21 10:23 - 2014-04-21 10:23 - 00001173 _____ () C:\Users\kaisermuecke\Downloads\Crombie_Die-stillen-Wasser-des-Todes.acsm
2014-04-20 22:02 - 2014-04-20 22:02 - 00000000 ____D () C:\ProgramData\Licenses
2014-04-20 22:01 - 2014-04-20 22:01 - 00000000 ____D () C:\ProgramData\Simply Super Software
2014-04-20 21:56 - 2014-04-20 21:56 - 18058688 _____ (Simply Super Software ) C:\Users\kaisermuecke\Downloads\trjsetup691.exe
2014-04-20 21:13 - 2014-04-20 21:12 - 26747104 _____ (Microsoft Corporation) C:\Users\kaisermuecke\Downloads\Windows-KB890830-x64-V5.11.exe
2014-04-20 21:01 - 2014-04-20 20:44 - 256314176 _____ () C:\Users\kaisermuecke\Downloads\kis14.0.0.4651abDE_5169.exe
2014-04-20 20:41 - 2014-04-15 19:43 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-04-20 13:48 - 2014-04-20 13:48 - 00000000 ____D () C:\Users\kaisermuecke\Documents\Criterion Games
2014-04-20 12:34 - 2014-04-20 12:34 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-04-20 12:34 - 2014-04-20 12:34 - 00000000 ____D () C:\ProgramData\EA Core
2014-04-20 12:34 - 2011-02-13 12:11 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Roaming\Adobe
2014-04-20 12:00 - 2014-04-20 11:39 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-04-20 12:00 - 2011-02-18 16:08 - 00000000 ____D () C:\Users\kaisermuecke\AppData\Local\Adobe
2014-04-20 11:59 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-04-20 11:39 - 2010-12-04 09:39 - 00083098 _____ () C:\Windows\DirectX.log
2014-04-20 11:35 - 2014-04-20 11:32 - 00000000 ____D () C:\ProgramData\Solidshield
2014-04-16 14:27 - 2014-04-15 13:51 - 00000000 ____D () C:\Windows\SysWOW64\140415-135137
2014-04-16 14:27 - 2014-04-14 20:04 - 00000000 ____D () C:\Windows\SysWOW64\140414-200411
2014-04-16 14:27 - 2014-04-14 15:33 - 00000000 ____D () C:\Windows\SysWOW64\140414-153355
2014-04-16 14:27 - 2014-04-14 14:46 - 00000000 ____D () C:\Windows\SysWOW64\140414-144609
2014-04-16 14:27 - 2014-04-14 14:30 - 00000000 ____D () C:\Windows\SysWOW64\140414-143036
2014-04-16 14:27 - 2014-04-14 14:09 - 00000000 ____D () C:\Windows\SysWOW64\140414-140952
2014-04-16 14:27 - 2014-04-14 13:55 - 00000000 ____D () C:\Windows\SysWOW64\140414-135557
2014-04-16 14:27 - 2014-04-13 23:14 - 00000000 ____D () C:\Windows\SysWOW64\140413-231407

Files to move or delete:
====================
C:\Users\kaisermuecke\SF_CDA_Full_Non-Network_deu_NB.exe


Some content of TEMP:
====================
C:\Users\kaisermuecke\AppData\Local\Temp\NEventMessages.dll
C:\Users\kaisermuecke\AppData\Local\Temp\NOSEventMessages.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-15 15:44] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-12 17:52

==================== End Of Log ============================
--- --- ---

--- --- ---


Gut so?:confused:

mort 17.05.2014 12:24
Sieht ok aus. :)

Updates

Klicke nun auf den Windowsbutton in der Taskleiste und dort auf "Systemsteuerung". Wenn du dort bist, gehe auf "Programme deinstallieren" unter "Programme". Deinstalliere hier alle alten Java und Flash-Versionen.

Falls du Java brauchst kannst du es wieder herunter laden:
  • Downloade dir bitte die neueste Java-Version von hier
  • Speichere die jxpiinstall.exe
  • Schließe alle laufenden Programme. Speziell deinen Browser.
  • Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version (Java 7 Update 51) herunter laden.
  • Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.

Öffne bitte mit beiden Browsern Adobe - Adobe Flash Player installieren und lade dir die neueste Version herunter. Entferne beim installieren den Haken bei McAfee Security Plus.

Wenn du zufrieden bist, kannst du mir hier gerne danken.

Ich sehe in deinen Logs nichts gefährliches mehr. :)

Cleanup

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.


Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Tipps

Welches Antiviren-Programm soll ich nehmen?

Es gibt kein Antiviren-Programm, dass alle Schädlinge findet und du kannst dich nicht 100%-ig auf das Programm verlassen. Es hängt immer noch von deinem Verhalten ab. Mit dem richtigen Verhalten schützt du dich am besten davor, dass du überhaupt infiziert wirst.
  • Klicke nicht auf alles blinkende oder das dich auffordert etwas herunterzuladen.
  • Lasse die Finger weg von illegalen Programmen. Sie sind der Hauptgrund für infizierte Computer.
  • Öffne Email-Anhänge nur von bekannten Absendern.
  • Halte Java, Adobe Flash Player und andere Programme immer aktuell.

Nutze immer nur ein Antiviren Programm, da mehrere sich gegenseitig blockieren werden und es somit mehr schadet, als es nutzt. Falls du mehr als einen installiert hast, entscheide dich für einen von denen und deinstalliere die anderen. Halte außerdem dein Antiviren-Programm immer aktuell, denn durch eine veraltete Datenbank kann das Programm die neuen Infektionen nicht finden.
Zusätzlich zu deinem Antiviren-Programm kannst du kannst auch regelmäßig einen On-Demand Scanner laufen lassen um dir eine zweite Meinung zu holen. Ein On-Demand Scanner läuft im Gegensatz zu einem normalem Antiviren-Programm nicht ständig mit sondern nur wenn du ihm sagst, dass er das System scannen soll.
Was sollte ich vor dem Runterladen beachten?
  • Lade dir Programme direkt vom Hersteller runter. Bei Programmen aus einer anderen Quelle wie Softonic und anderen Seiten die dir einen Downloader anbieten, werden unerwünschte Toolbars und anderer Müll mit installiert. Führe außerdem immer eine benutzerdefinierte Installation durch und entferne die Haken optionalen Programmen.
  • Lass die Finger von Registry-Cleanern. Sie versprechen dir eine große Beschleunigung deines Systems obwohl das entfernen von verwaisten Registry-Schlüsseln nur wenig Perfomancegewinng bringt, wenn überhaupt etwas. Falls das Programm aber mal etwas wichtiges löscht, kannst du damit die Registry zerstören. Zerstörst du die Registry, zerstörst du Windows!
Sonstige Tipps
  • Halte dein System und die Programme darauf immer aktuell. Alte Software enthält Sicherheitslücken, die dein System angreifbar machen.
  • Nutze mehrere Passwörter. Falls jemand das Passwort eines Accounts von dir herausfindet hätte er Zugriff auf alle anderen Accounts.
  • Öffne keine Emails von dir unbekannten Absendern. Diese Emails sind meistens Spammails die dich unter anderem auch dazu bringen wollen bestimmt Seiten zu besuchen oder Dateien bzw. Anhänge herunterzuladen.
  • Achte auf die Dateiendung. In den Anhängen von Spammails wird gerne der Trick genutzt, ausführbare Dateien als harmlose Datei darzustellen, in dem sie eine Datei z.B. Rechnung.pdf.exe nennen. (Dateiendungen anzeigen lassen)
  • Deaktiviere die Autorun Funktion. Damit kann Malware sich automatisch von einem USB-Stick starten, wenn man einen infizierten USB-Stick einsteckt hat. (Autorun deaktivieren)


Wenn du das Trojaner-Board unterstützten willst, kannst du gerne Spenden.
Ich wünsche dir noch eine schöne Zeit. :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 05:52 Uhr.
Seite 3 von 3 12 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19