Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   firefox und avast probleme mysteriöse windows aktivierung. brauche hilfe bei analyse auswertung (https://www.trojaner-board.de/155249-firefox-avast-probleme-mysterioese-windows-aktivierung-brauche-hilfe-analyse-auswertung.html)

hendriks 15.06.2014 01:30
firefox und avast probleme mysteriöse windows aktivierung. brauche hilfe bei analyse auswertung
 
hallo,
bei mir fing es mit firefox an, seiten öffneten sich nur noch langsam später gar nicht mehr. nach einer de/installation von firefox lief es wieder scheinbar normal.

kurze zeit darauf (paar tage)aktualliesierte sich avast nicht mehr und das scannen dauerte gefühlt 10 mal länger als sonst, was aber nach einer de/installation wieder behoben war.(gefunden wurde aber nichts)

windows sollte kurze zeit später per telefon aktiviert werden, was aber ein halbes jahr nicht funktioniert hatte(windows neuinstallation 4mal in 6 monaten) .
bei der 4 neuinstallation von windows und ablauf der 30 tage erneut die telefonaktivierung angewählt und bei der länderauswahl fror die windows seite direkt ein.
paar sek. später kam unter windows eine benachrichtigung windows erfolgreich aktiviert.

habe also irgendwie das gefühl das irgendwas nicht stimmt wüsste nur nicht was^^
das alles geschah nach der 4 neuinstallation von windows.

bitte um hilfe bei der analyse und auswertung um schadsoftware auszuschliesen oder die verantwortung dafür zu geben

schrauber 15.06.2014 06:03
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


hendriks 15.06.2014 16:56
FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02
Ran by ogogog (administrator) on GIBMIRNENNAMEN on 15-06-2014 17:31:48
Running from C:\Users\ogogog\Desktop\Neuer Ordner (3)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Farbar) C:\Users\ogogog\Desktop\Neuer Ordner (3)\FRST64(1).exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-06-14] (AVAST Software)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-4148648416-1248544909-178784645-1000\...\MountPoints2: {244cf606-e8c7-11e3-be0d-001fd026e66e} - E:\pushinst.exe
HKU\S-1-5-21-4148648416-1248544909-178784645-1000\...\MountPoints2: {e95d6120-c788-11e3-82d4-001fd026e66e} - E:\autorun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/?type=501549&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDF1237A1AC5BCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {B6C91D74-F19B-41CB-84E6-4DBE94B1291A} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=501549&p={searchTerms}
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\ogogog\AppData\Roaming\Mozilla\Firefox\Profiles\dtxhvkrk.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-14]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-06-14] (AVAST Software)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-06-14] (BitRaider, LLC)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5214384 2014-01-13] (INCA Internet Co., Ltd.)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-06-14] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-06-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-06-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-06-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-06-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-06-14] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-06-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-06-14] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.)
R3 Thermnaltake MS6 Filter; C:\Windows\System32\Drivers\MS6Filter.sys [57200 2011-08-01] (Thermaltake)
R3 Thermnaltake MS6 Filter; C:\Windows\SysWOW64\Drivers\MS6Filter.sys [31488 2011-08-01] (Thermaltake) [File not signed]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-15 05:57 - 2014-06-15 05:57 - 00002029 _____ () C:\Users\ogogog\Desktop\sg_backup_2014-06-15-0557.spg
2014-06-15 05:46 - 2014-06-15 05:46 - 00002048 _____ () C:\Users\ogogog\Desktop\sg_backup_2014-06-15-0546.spg
2014-06-15 05:46 - 2014-06-15 05:46 - 00002048 _____ () C:\Users\ogogog\Desktop\FirstBackup.spg
2014-06-15 05:35 - 2014-06-15 05:35 - 00001150 _____ () C:\Users\ogogog\Desktop\FreshUI.lnk
2014-06-15 05:35 - 2014-06-15 05:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreshDevices
2014-06-15 05:35 - 2014-06-15 05:35 - 00000000 ____D () C:\Program Files (x86)\FreshDevices
2014-06-15 05:33 - 2014-06-15 05:33 - 00000000 ____D () C:\Users\ogogog\Downloads\Driver Manager
2014-06-15 05:32 - 2014-06-15 06:01 - 00003794 _____ () C:\Windows\System32\Tasks\Driver Manager-RTMUpdater
2014-06-15 05:32 - 2014-06-15 06:01 - 00003794 _____ () C:\Windows\System32\Tasks\Driver Manager-RTMScan
2014-06-15 05:32 - 2014-06-15 06:01 - 00003782 _____ () C:\Windows\System32\Tasks\Driver Manager-RTMRules
2014-06-15 05:32 - 2014-06-15 06:01 - 00003482 _____ () C:\Windows\System32\Tasks\Driver Manager-RTMScanRunOnce
2014-06-15 05:32 - 2014-06-15 05:33 - 00000000 ____D () C:\ProgramData\UAB
2014-06-15 05:32 - 2014-06-15 05:32 - 00002323 _____ () C:\Users\Public\Desktop\Driver Manager.lnk
2014-06-15 05:32 - 2014-06-15 05:32 - 00000000 ____D () C:\Users\ogogog\AppData\Local\PC_Drivers_Headquarters
2014-06-15 05:32 - 2014-06-15 05:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Manager
2014-06-15 05:32 - 2014-06-15 05:32 - 00000000 ____D () C:\ProgramData\Driver Manager
2014-06-15 05:32 - 2014-06-15 05:32 - 00000000 ____D () C:\Program Files (x86)\Driver Manager
2014-06-15 05:18 - 2014-06-15 05:18 - 00000000 ____D () C:\Users\ogogog\Downloads\Autoruns
2014-06-15 05:17 - 2014-06-15 05:17 - 00659456 _____ (Speed Guide Inc.) C:\Users\ogogog\Desktop\TCPOptimizer.exe
2014-06-15 05:16 - 2014-06-15 05:16 - 01633847 _____ ( ) C:\Users\ogogog\Downloads\frui.exe
2014-06-15 05:14 - 2014-06-15 05:14 - 02016040 _____ (Driver Manager) C:\Users\ogogog\Downloads\DriverManager.exe
2014-06-15 05:13 - 2014-06-15 05:13 - 00511782 _____ () C:\Users\ogogog\Downloads\Autoruns.zip
2014-06-15 04:55 - 2014-06-15 04:55 - 00380416 _____ () C:\Users\ogogog\Downloads\Gmer-19357.exe
2014-06-15 04:13 - 2014-06-15 04:13 - 00000310 _____ () C:\Windows\PFRO.log
2014-06-15 03:48 - 2014-06-15 03:48 - 00097656 _____ () C:\Users\ogogog\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-15 03:40 - 2014-06-15 17:18 - 00000280 _____ () C:\Windows\setupact.log
2014-06-15 03:40 - 2014-06-15 03:40 - 00339656 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-15 03:40 - 2014-06-15 03:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-14 23:09 - 2014-06-14 23:13 - 00000866 __RSH () C:\ProgramData\ntuser.pol
2014-06-14 23:08 - 2014-06-14 23:12 - 00000866 __RSH () C:\Users\ogogog\ntuser.pol
2014-06-14 22:38 - 2014-06-14 22:38 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-14 22:28 - 2014-06-15 17:31 - 00000000 ____D () C:\Users\ogogog\Desktop\Neuer Ordner (3)
2014-06-14 21:54 - 2014-06-14 21:54 - 00001264 _____ () C:\Users\ogogog\Desktop\Revo Uninstaller.lnk
2014-06-14 21:54 - 2014-06-14 21:54 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-06-14 21:40 - 2014-06-15 17:21 - 00203895 _____ () C:\Windows\WindowsUpdate.log
2014-06-14 18:39 - 2014-06-14 18:39 - 00000000 ____D () C:\Users\ogogog\AppData\Local\Microsoft Corporation
2014-06-14 18:37 - 2014-06-14 18:37 - 08676128 _____ (Microsoft Corporation) C:\Users\ogogog\Downloads\Windows7UpgradeAdvisorSetup.exe
2014-06-14 17:08 - 2014-06-14 17:08 - 00671232 _____ () C:\Users\ogogog\Downloads\MicrosoftFixit50688.msi
2014-06-14 11:37 - 2014-06-14 12:08 - 3141261841 _____ () C:\Users\ogogog\Downloads\VanHelsingICompletePack_Demo_Offline.zip
2014-06-14 06:40 - 2014-06-14 06:40 - 00000000 ____D () C:\Users\Public\Documents\BitRaider
2014-06-14 06:40 - 2014-06-14 06:40 - 00000000 ____D () C:\ProgramData\BitRaider
2014-06-14 06:39 - 2014-06-14 06:39 - 00000000 ____D () C:\Users\ogogog\AppData\Local\SWTORPerf
2014-06-14 03:38 - 2014-06-14 03:38 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\AVAST Software
2014-06-14 03:36 - 2014-06-14 03:36 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-06-14 03:36 - 2014-06-14 03:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-06-14 03:35 - 2014-06-14 21:14 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-06-14 03:35 - 2014-06-14 03:36 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-06-14 03:35 - 2014-06-14 03:36 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-06-14 03:35 - 2014-06-14 03:36 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1402709764953
2014-06-14 03:35 - 2014-06-14 03:35 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1402709764953
2014-06-14 03:35 - 2014-06-14 03:35 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-06-14 03:35 - 2014-06-14 03:35 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-06-14 03:35 - 2014-06-14 03:35 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00000000 ____D () C:\Program Files\AVAST Software
2014-06-12 00:11 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 00:11 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-12 00:11 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 00:11 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 00:11 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 00:11 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 00:11 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 00:11 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 00:11 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-12 00:11 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-12 00:11 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-12 00:11 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-11 17:01 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 17:01 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-10 14:46 - 2014-06-14 11:47 - 00000000 ____D () C:\Program Files (x86)\ShotOnline
2014-06-10 14:46 - 2014-06-10 14:46 - 00001031 _____ () C:\Users\ogogog\Desktop\ShotOnline.lnk
2014-06-10 14:46 - 2014-06-10 14:46 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ShotOnline
2014-06-10 14:46 - 2014-06-10 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShotOnline
2014-06-03 08:09 - 2014-06-11 18:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 08:09 - 2014-06-03 08:09 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-03 08:09 - 2014-06-03 08:09 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\Mozilla
2014-06-03 08:07 - 2014-06-03 06:03 - 28852416 _____ (Mozilla) C:\Users\ogogog\Desktop\Firefox_Setup_de29_0_1.exe
2014-06-02 18:34 - 2014-06-02 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-06-02 18:34 - 2014-06-02 18:34 - 00000000 ____D () C:\Program Files\7-Zip
2014-06-02 14:22 - 2014-06-02 14:22 - 00000000 ____D () C:\Windows\ERUNT
2014-06-02 14:12 - 2014-06-15 17:31 - 00000000 ____D () C:\FRST
2014-06-02 14:12 - 2014-06-15 04:12 - 00000000 ____D () C:\AdwCleaner
2014-06-02 13:05 - 2014-06-02 14:32 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover
2014-06-02 13:05 - 2014-06-02 13:05 - 00000000 ____D () C:\ProgramData\Simply Super Software
2014-06-02 10:49 - 2014-06-02 11:22 - 00000000 ____D () C:\Users\ogogog\.zenmap
2014-06-02 10:47 - 2014-06-02 14:32 - 00000000 ____D () C:\Program Files (x86)\Nmap
2014-06-02 08:49 - 2014-06-02 08:49 - 00159200 _____ () C:\Users\ogogog\AppData\Roaming\CrashRpt1402.dll
2014-06-02 08:49 - 2014-06-02 08:49 - 00000000 ____D () C:\Users\ogogog\AppData\Local\CrashRpt
2014-06-02 07:06 - 2014-06-02 07:06 - 00000004 _____ () C:\Users\ogogog\Desktop\advanced_ip_scanner_MAC.bin
2014-06-02 06:54 - 2014-06-02 06:54 - 00000000 ____D () C:\Users\ogogog\Desktop\TcpView-3.05
2014-06-02 06:53 - 2014-06-02 06:41 - 02723180 _____ () C:\Users\ogogog\Desktop\ipscan-3.3-setup.exe
2014-06-02 06:53 - 2014-06-02 06:40 - 06596600 _____ ( ) C:\Users\ogogog\Desktop\ipscan_2.3.2161.exe
2014-06-02 06:36 - 2014-06-02 06:36 - 00000358 _____ () C:\Users\ogogog\Desktop\Neues Textdokument (5).txt
2014-06-02 05:39 - 2010-10-22 02:00 - 00480632 ____N (AVM Berlin) C:\Windows\instwcli.dex
2014-06-02 04:45 - 2014-06-02 04:45 - 04353106 _____ () C:\Users\ogogog\Documents\SCHWESTA EWA FEAT SARI HALT DIE FRESSE 05 NR. 250 (OFFICIAL 3D VERSION AGGROTV)[1].mp4
2014-06-02 04:45 - 2014-06-02 04:45 - 03550062 _____ () C:\Users\ogogog\Documents\SCHWESTA EWA FEAT SARI HALT DIE FRESSE 05 NR. 250 (OFFICIAL HD VERSION AGGROTV).mp4
2014-06-02 03:32 - 2014-06-02 04:12 - 00000000 ____D () C:\Users\ogogog\Desktop\shok
2014-06-01 07:57 - 2014-06-01 07:57 - 00161177 _____ () C:\Users\ogogog\Documents\InstallLogs.zip
2014-06-01 07:53 - 2014-06-01 07:53 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\MAGIX
2014-06-01 07:46 - 2014-06-01 22:49 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-06-01 07:31 - 2014-06-01 07:31 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\X-Setup Pro
2014-06-01 07:31 - 2014-06-01 07:31 - 00000000 ____D () C:\ProgramData\X-Setup Pro
2014-06-01 05:50 - 2014-06-01 05:50 - 00001885 _____ () C:\Users\Public\Desktop\PrivaZer.lnk
2014-06-01 05:49 - 2014-06-01 05:49 - 07204488 _____ (Goversoft LLC) C:\Users\ogogog\Downloads\privazer_free(1).exe
2014-06-01 03:31 - 2014-06-02 13:06 - 00000000 ____D () C:\ProgramData\Licenses
2014-06-01 03:31 - 2014-06-01 22:41 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-01 03:31 - 2014-06-01 03:31 - 00000000 ____D () C:\usr
2014-06-01 03:31 - 2014-06-01 03:31 - 00000000 ____D () C:\ProgramData\Paessler
2014-06-01 03:30 - 2014-06-01 22:41 - 00000000 ____D () C:\Program Files (x86)\PRTG Network Monitor
2014-06-01 01:46 - 2014-06-01 01:46 - 00000218 _____ () C:\Users\ogogog\AppData\Local\recently-used.xbel
2014-06-01 01:23 - 2014-06-01 01:24 - 00000000 ____D () C:\Users\ogogog\AppData\Local\gtk-2.0
2014-05-31 22:41 - 2014-06-02 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cain
2014-05-31 21:37 - 2014-05-31 21:37 - 00001388 _____ () C:\Users\ogogog\Documents\131wifi.txt
2014-05-31 17:44 - 2014-05-31 20:22 - 00000852 _____ () C:\Users\ogogog\Documents\mac neu.txt
2014-05-31 15:58 - 2014-06-01 02:34 - 00000077 _____ () C:\wepkeys.txt
2014-05-31 15:46 - 2014-05-31 17:03 - 00000000 ____D () C:\Users\ogogog\AppData\Local\MetaGeek,_LLC
2014-05-31 15:38 - 2014-06-02 05:22 - 00000000 ____D () C:\Users\ogogog\Desktop\Neuer Ordner (2)
2014-05-31 15:36 - 2014-05-31 15:36 - 00000000 ____D () C:\Program Files (x86)\AVM_update
2014-05-31 15:28 - 2014-05-31 15:28 - 00000000 ____D () C:\Users\ogogog\AVM_Driver
2014-05-25 18:02 - 2014-05-25 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies
2014-05-21 22:34 - 2014-05-31 09:27 - 00003166 _____ () C:\Windows\System32\Tasks\{AAFBE4D2-5C85-470F-9C6E-6918F642A00B}
2014-05-21 20:09 - 2014-05-21 20:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-05-20 21:03 - 2014-06-02 18:12 - 00000104 _____ () C:\Users\ogogog\Desktop\Neues Textdokument (4).txt
2014-05-20 05:21 - 2014-05-20 05:21 - 00000416 _____ () C:\Windows\BRWMARK.INI
2014-05-20 05:21 - 2014-05-20 05:21 - 00000034 _____ () C:\Windows\SysWOW64\BD2030.DAT
2014-05-20 05:11 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-20 05:11 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-20 04:33 - 2014-05-20 19:33 - 00000672 _____ () C:\NSI_DriverInstall.log
2014-05-20 04:33 - 2014-05-20 04:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-05-20 04:33 - 2014-05-20 04:33 - 00000000 ____D () C:\Program Files (x86)\Handset WinDriver
2014-05-20 04:33 - 2011-10-24 06:04 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbmdm.sys
2014-05-20 04:33 - 2011-10-24 05:51 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_usbdev.sys
2014-05-20 04:33 - 2010-02-19 01:00 - 01533512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFUpdate_01007.dll
2014-05-20 04:33 - 2010-02-19 01:00 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2014-05-20 04:33 - 2010-02-19 01:00 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WinUSBCoInstaller.dll
2014-05-20 04:30 - 2010-02-19 01:00 - 01533512 _____ (Microsoft Corporation) C:\Windows\system32\wudfupdate_01007.dll
2014-05-20 04:30 - 2010-02-19 01:00 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01007.dll
2014-05-20 04:30 - 2010-02-19 01:00 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\winusbcoinstaller.dll
2014-05-19 23:50 - 2014-05-20 23:39 - 00000000 ____D () C:\Users\ogogog\Desktop\UnlockTools
2014-05-19 23:04 - 2014-05-19 23:04 - 00000000 ____D () C:\Program Files\Java
2014-05-19 23:03 - 2014-06-02 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-05-19 20:50 - 2014-05-19 23:26 - 00000000 ____D () C:\Users\ogogog\.android
2014-05-19 20:40 - 2014-06-02 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-19 20:40 - 2014-05-19 20:44 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-19 20:18 - 2014-05-19 20:18 - 00000000 ____D () C:\ProgramData\Sun
2014-05-19 20:17 - 2014-05-19 20:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-19 20:15 - 2014-05-19 20:15 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-19 20:02 - 2014-05-19 20:03 - 00000000 ____D () C:\Users\ogogog\Desktop\adt-bundle-windows-x86_64-20140321
2014-05-19 03:23 - 2014-05-19 03:23 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_smhwadb_01005.Wdf
2014-05-19 02:53 - 2014-05-19 02:53 - 00000000 ____D () C:\Users\ogogog\Desktop\adb-toolkit
2014-05-19 02:51 - 2014-05-19 02:51 - 00000000 ____D () C:\adbtk
2014-05-19 01:59 - 2009-12-24 03:00 - 01919968 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01005.dll
2014-05-19 01:21 - 2014-05-19 01:21 - 00000000 ____D () C:\Users\ogogog\AppData\Local\worstenbrood
2014-05-19 01:19 - 2014-05-19 01:19 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-05-19 00:25 - 2014-05-19 00:25 - 00000000 ____D () C:\Users\ogogog\AppData\Local\Downloaded Installations
2014-05-19 00:22 - 2014-05-19 00:22 - 02344129 _____ () C:\Users\ogogog\Desktop\HuaweiUpdateExtractor_0.9.7.9_Setup.zip
2014-05-18 11:55 - 2014-05-18 11:55 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\LolClient
2014-05-18 11:06 - 2014-05-18 11:06 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2014-05-18 11:06 - 2014-05-18 11:06 - 00000000 ____D () C:\Riot Games
2014-05-18 11:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-05-18 11:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-05-18 10:59 - 2014-05-19 23:27 - 00000000 ____D () C:\Users\ogogog\AppData\Local\PMB Files
2014-05-18 10:58 - 2014-05-18 10:58 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\Riot Games
2014-05-18 10:58 - 2014-05-18 10:58 - 00000000 ____D () C:\ProgramData\PMB Files
2014-05-18 10:58 - 2014-05-18 10:58 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-05-18 00:40 - 2014-05-18 20:44 - 00000061 _____ () C:\Users\ogogog\Desktop\Neues Textdokument (3).txt
2014-05-17 23:58 - 2014-05-17 23:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tt eSPORTS
2014-05-17 23:58 - 2014-05-17 23:58 - 00000000 ____D () C:\Program Files (x86)\Tt eSPORTS
2014-05-17 23:58 - 2011-08-01 13:42 - 00057200 _____ (Thermaltake) C:\Windows\system32\Drivers\MS6Filter.sys
2014-05-17 23:58 - 2011-08-01 13:40 - 00031488 _____ (Thermaltake) C:\Windows\SysWOW64\Drivers\MS6Filter.sys
2014-05-16 16:04 - 2014-05-16 16:21 - 00000000 ____D () C:\Users\ogogog\Documents\THERON

==================== One Month Modified Files and Folders =======

2014-06-15 17:31 - 2014-06-14 22:28 - 00000000 ____D () C:\Users\ogogog\Desktop\Neuer Ordner (3)
2014-06-15 17:31 - 2014-06-02 14:12 - 00000000 ____D () C:\FRST
2014-06-15 17:31 - 2014-04-05 04:54 - 00000000 ____D () C:\Users\ogogog\AppData\Local\Temp
2014-06-15 17:25 - 2009-07-14 06:45 - 00031680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-15 17:25 - 2009-07-14 06:45 - 00031680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-15 17:21 - 2014-06-14 21:40 - 00203895 _____ () C:\Windows\WindowsUpdate.log
2014-06-15 17:18 - 2014-06-15 03:40 - 00000280 _____ () C:\Windows\setupact.log
2014-06-15 17:18 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-15 06:01 - 2014-06-15 05:32 - 00003794 _____ () C:\Windows\System32\Tasks\Driver Manager-RTMUpdater
2014-06-15 06:01 - 2014-06-15 05:32 - 00003794 _____ () C:\Windows\System32\Tasks\Driver Manager-RTMScan
2014-06-15 06:01 - 2014-06-15 05:32 - 00003782 _____ () C:\Windows\System32\Tasks\Driver Manager-RTMRules
2014-06-15 06:01 - 2014-06-15 05:32 - 00003482 _____ () C:\Windows\System32\Tasks\Driver Manager-RTMScanRunOnce
2014-06-15 05:57 - 2014-06-15 05:57 - 00002029 _____ () C:\Users\ogogog\Desktop\sg_backup_2014-06-15-0557.spg
2014-06-15 05:46 - 2014-06-15 05:46 - 00002048 _____ () C:\Users\ogogog\Desktop\sg_backup_2014-06-15-0546.spg
2014-06-15 05:46 - 2014-06-15 05:46 - 00002048 _____ () C:\Users\ogogog\Desktop\FirstBackup.spg
2014-06-15 05:35 - 2014-06-15 05:35 - 00001150 _____ () C:\Users\ogogog\Desktop\FreshUI.lnk
2014-06-15 05:35 - 2014-06-15 05:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreshDevices
2014-06-15 05:35 - 2014-06-15 05:35 - 00000000 ____D () C:\Program Files (x86)\FreshDevices
2014-06-15 05:33 - 2014-06-15 05:33 - 00000000 ____D () C:\Users\ogogog\Downloads\Driver Manager
2014-06-15 05:33 - 2014-06-15 05:32 - 00000000 ____D () C:\ProgramData\UAB
2014-06-15 05:32 - 2014-06-15 05:32 - 00002323 _____ () C:\Users\Public\Desktop\Driver Manager.lnk
2014-06-15 05:32 - 2014-06-15 05:32 - 00000000 ____D () C:\Users\ogogog\AppData\Local\PC_Drivers_Headquarters
2014-06-15 05:32 - 2014-06-15 05:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Manager
2014-06-15 05:32 - 2014-06-15 05:32 - 00000000 ____D () C:\ProgramData\Driver Manager
2014-06-15 05:32 - 2014-06-15 05:32 - 00000000 ____D () C:\Program Files (x86)\Driver Manager
2014-06-15 05:21 - 2014-04-05 04:54 - 00000000 ___RD () C:\Users\ogogog\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-15 05:18 - 2014-06-15 05:18 - 00000000 ____D () C:\Users\ogogog\Downloads\Autoruns
2014-06-15 05:17 - 2014-06-15 05:17 - 00659456 _____ (Speed Guide Inc.) C:\Users\ogogog\Desktop\TCPOptimizer.exe
2014-06-15 05:16 - 2014-06-15 05:16 - 01633847 _____ ( ) C:\Users\ogogog\Downloads\frui.exe
2014-06-15 05:14 - 2014-06-15 05:14 - 02016040 _____ (Driver Manager) C:\Users\ogogog\Downloads\DriverManager.exe
2014-06-15 05:13 - 2014-06-15 05:13 - 00511782 _____ () C:\Users\ogogog\Downloads\Autoruns.zip
2014-06-15 04:55 - 2014-06-15 04:55 - 00380416 _____ () C:\Users\ogogog\Downloads\Gmer-19357.exe
2014-06-15 04:13 - 2014-06-15 04:13 - 00000310 _____ () C:\Windows\PFRO.log
2014-06-15 04:12 - 2014-06-02 14:12 - 00000000 ____D () C:\AdwCleaner
2014-06-15 03:48 - 2014-06-15 03:48 - 00097656 _____ () C:\Users\ogogog\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-15 03:40 - 2014-06-15 03:40 - 00339656 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-15 03:40 - 2014-06-15 03:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-15 03:36 - 2014-04-30 08:15 - 00000000 ____D () C:\Users\ogogog\AppData\Local\PrivaZer
2014-06-15 03:23 - 2014-04-30 21:57 - 00007610 _____ () C:\Users\ogogog\AppData\Local\Resmon.ResmonCfg
2014-06-14 23:13 - 2014-06-14 23:09 - 00000866 __RSH () C:\ProgramData\ntuser.pol
2014-06-14 23:12 - 2014-06-14 23:08 - 00000866 __RSH () C:\Users\ogogog\ntuser.pol
2014-06-14 23:12 - 2014-04-05 04:54 - 00000000 ____D () C:\Users\ogogog
2014-06-14 23:00 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-06-14 22:38 - 2014-06-14 22:38 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-14 21:54 - 2014-06-14 21:54 - 00001264 _____ () C:\Users\ogogog\Desktop\Revo Uninstaller.lnk
2014-06-14 21:54 - 2014-06-14 21:54 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-06-14 21:14 - 2014-06-14 03:35 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-06-14 18:39 - 2014-06-14 18:39 - 00000000 ____D () C:\Users\ogogog\AppData\Local\Microsoft Corporation
2014-06-14 18:37 - 2014-06-14 18:37 - 08676128 _____ (Microsoft Corporation) C:\Users\ogogog\Downloads\Windows7UpgradeAdvisorSetup.exe
2014-06-14 17:08 - 2014-06-14 17:08 - 00671232 _____ () C:\Users\ogogog\Downloads\MicrosoftFixit50688.msi
2014-06-14 12:08 - 2014-06-14 11:37 - 3141261841 _____ () C:\Users\ogogog\Downloads\VanHelsingICompletePack_Demo_Offline.zip
2014-06-14 11:47 - 2014-06-10 14:46 - 00000000 ____D () C:\Program Files (x86)\ShotOnline
2014-06-14 11:17 - 2014-04-30 03:12 - 00000000 ____D () C:\Program Files (x86)\Full Tilt Poker.Eu
2014-06-14 09:25 - 2014-04-29 03:48 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\vlc
2014-06-14 08:00 - 2014-04-30 03:12 - 00000000 ____D () C:\Users\ogogog\AppData\Local\PokerStars.EU
2014-06-14 07:47 - 2011-04-12 09:43 - 00673882 _____ () C:\Windows\system32\perfh007.dat
2014-06-14 07:47 - 2011-04-12 09:43 - 00139022 _____ () C:\Windows\system32\perfc007.dat
2014-06-14 07:47 - 2009-07-14 07:13 - 01553918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-14 07:01 - 2014-04-05 11:55 - 00000000 ____D () C:\ProgramData\Origin
2014-06-14 06:40 - 2014-06-14 06:40 - 00000000 ____D () C:\Users\Public\Documents\BitRaider
2014-06-14 06:40 - 2014-06-14 06:40 - 00000000 ____D () C:\ProgramData\BitRaider
2014-06-14 06:39 - 2014-06-14 06:39 - 00000000 ____D () C:\Users\ogogog\AppData\Local\SWTORPerf
2014-06-14 06:36 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-14 06:34 - 2014-04-05 11:57 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-06-14 06:32 - 2014-04-05 11:55 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-06-14 03:38 - 2014-06-14 03:38 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\AVAST Software
2014-06-14 03:36 - 2014-06-14 03:36 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-06-14 03:36 - 2014-06-14 03:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-06-14 03:36 - 2014-06-14 03:35 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-06-14 03:36 - 2014-06-14 03:35 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-06-14 03:36 - 2014-06-14 03:35 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1402709764953
2014-06-14 03:35 - 2014-06-14 03:35 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1402709764953
2014-06-14 03:35 - 2014-06-14 03:35 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-06-14 03:35 - 2014-06-14 03:35 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-06-14 03:35 - 2014-06-14 03:35 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-06-14 03:35 - 2014-06-14 03:35 - 00000000 ____D () C:\Program Files\AVAST Software
2014-06-14 03:32 - 2014-04-05 10:37 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-06-14 03:15 - 2014-04-25 21:35 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\TS3Client
2014-06-11 18:13 - 2014-04-05 05:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 18:12 - 2014-06-03 08:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-11 18:12 - 2014-04-05 05:48 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-10 14:46 - 2014-06-10 14:46 - 00001031 _____ () C:\Users\ogogog\Desktop\ShotOnline.lnk
2014-06-10 14:46 - 2014-06-10 14:46 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ShotOnline
2014-06-10 14:46 - 2014-06-10 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShotOnline
2014-06-05 14:14 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-05 06:38 - 2014-04-30 03:13 - 00000000 ____D () C:\Users\ogogog\AppData\Local\FullTiltPoker.eu
2014-06-03 08:09 - 2014-06-03 08:09 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-03 08:09 - 2014-06-03 08:09 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\Mozilla
2014-06-03 07:54 - 2014-04-30 03:12 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2014-06-03 06:03 - 2014-06-03 08:07 - 28852416 _____ (Mozilla) C:\Users\ogogog\Desktop\Firefox_Setup_de29_0_1.exe
2014-06-02 18:34 - 2014-06-02 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-06-02 18:34 - 2014-06-02 18:34 - 00000000 ____D () C:\Program Files\7-Zip
2014-06-02 18:29 - 2014-04-06 12:08 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-02 18:29 - 2014-04-06 12:08 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-02 18:12 - 2014-05-20 21:03 - 00000104 _____ () C:\Users\ogogog\Desktop\Neues Textdokument (4).txt
2014-06-02 16:06 - 2014-05-19 20:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-02 14:35 - 2014-05-19 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-06-02 14:33 - 2014-05-31 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cain
2014-06-02 14:32 - 2014-06-02 13:05 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover
2014-06-02 14:32 - 2014-06-02 10:47 - 00000000 ____D () C:\Program Files (x86)\Nmap
2014-06-02 14:22 - 2014-06-02 14:22 - 00000000 ____D () C:\Windows\ERUNT
2014-06-02 13:06 - 2014-06-01 03:31 - 00000000 ____D () C:\ProgramData\Licenses
2014-06-02 13:05 - 2014-06-02 13:05 - 00000000 ____D () C:\ProgramData\Simply Super Software
2014-06-02 11:22 - 2014-06-02 10:49 - 00000000 ____D () C:\Users\ogogog\.zenmap
2014-06-02 11:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-02 08:49 - 2014-06-02 08:49 - 00159200 _____ () C:\Users\ogogog\AppData\Roaming\CrashRpt1402.dll
2014-06-02 08:49 - 2014-06-02 08:49 - 00000000 ____D () C:\Users\ogogog\AppData\Local\CrashRpt
2014-06-02 07:06 - 2014-06-02 07:06 - 00000004 _____ () C:\Users\ogogog\Desktop\advanced_ip_scanner_MAC.bin
2014-06-02 06:54 - 2014-06-02 06:54 - 00000000 ____D () C:\Users\ogogog\Desktop\TcpView-3.05
2014-06-02 06:41 - 2014-06-02 06:53 - 02723180 _____ () C:\Users\ogogog\Desktop\ipscan-3.3-setup.exe
2014-06-02 06:40 - 2014-06-02 06:53 - 06596600 _____ ( ) C:\Users\ogogog\Desktop\ipscan_2.3.2161.exe
2014-06-02 06:36 - 2014-06-02 06:36 - 00000358 _____ () C:\Users\ogogog\Desktop\Neues Textdokument (5).txt
2014-06-02 05:22 - 2014-05-31 15:38 - 00000000 ____D () C:\Users\ogogog\Desktop\Neuer Ordner (2)
2014-06-02 04:45 - 2014-06-02 04:45 - 04353106 _____ () C:\Users\ogogog\Documents\SCHWESTA EWA FEAT SARI HALT DIE FRESSE 05 NR. 250 (OFFICIAL 3D VERSION AGGROTV)[1].mp4
2014-06-02 04:45 - 2014-06-02 04:45 - 03550062 _____ () C:\Users\ogogog\Documents\SCHWESTA EWA FEAT SARI HALT DIE FRESSE 05 NR. 250 (OFFICIAL HD VERSION AGGROTV).mp4
2014-06-02 04:12 - 2014-06-02 03:32 - 00000000 ____D () C:\Users\ogogog\Desktop\shok
2014-06-01 22:52 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-01 22:49 - 2014-06-01 07:46 - 00000000 ____D () C:\Users\Public\Documents\MAGIX
2014-06-01 22:41 - 2014-06-01 03:31 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-01 22:41 - 2014-06-01 03:30 - 00000000 ____D () C:\Program Files (x86)\PRTG Network Monitor
2014-06-01 07:57 - 2014-06-01 07:57 - 00161177 _____ () C:\Users\ogogog\Documents\InstallLogs.zip
2014-06-01 07:53 - 2014-06-01 07:53 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\MAGIX
2014-06-01 07:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-06-01 07:31 - 2014-06-01 07:31 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\X-Setup Pro
2014-06-01 07:31 - 2014-06-01 07:31 - 00000000 ____D () C:\ProgramData\X-Setup Pro
2014-06-01 05:50 - 2014-06-01 05:50 - 00001885 _____ () C:\Users\Public\Desktop\PrivaZer.lnk
2014-06-01 05:50 - 2014-04-30 08:15 - 00001897 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrivaZer.lnk
2014-06-01 05:50 - 2014-04-30 08:15 - 00000000 ____D () C:\Program Files (x86)\PrivaZer
2014-06-01 05:49 - 2014-06-01 05:49 - 07204488 _____ (Goversoft LLC) C:\Users\ogogog\Downloads\privazer_free(1).exe
2014-06-01 03:31 - 2014-06-01 03:31 - 00000000 ____D () C:\usr
2014-06-01 03:31 - 2014-06-01 03:31 - 00000000 ____D () C:\ProgramData\Paessler
2014-06-01 02:34 - 2014-05-31 15:58 - 00000077 _____ () C:\wepkeys.txt
2014-06-01 01:46 - 2014-06-01 01:46 - 00000218 _____ () C:\Users\ogogog\AppData\Local\recently-used.xbel
2014-06-01 01:24 - 2014-06-01 01:23 - 00000000 ____D () C:\Users\ogogog\AppData\Local\gtk-2.0
2014-05-31 21:37 - 2014-05-31 21:37 - 00001388 _____ () C:\Users\ogogog\Documents\131wifi.txt
2014-05-31 20:22 - 2014-05-31 17:44 - 00000852 _____ () C:\Users\ogogog\Documents\mac neu.txt
2014-05-31 17:03 - 2014-05-31 15:46 - 00000000 ____D () C:\Users\ogogog\AppData\Local\MetaGeek,_LLC
2014-05-31 15:36 - 2014-05-31 15:36 - 00000000 ____D () C:\Program Files (x86)\AVM_update
2014-05-31 15:28 - 2014-05-31 15:28 - 00000000 ____D () C:\Users\ogogog\AVM_Driver
2014-05-31 09:27 - 2014-05-21 22:34 - 00003166 _____ () C:\Windows\System32\Tasks\{AAFBE4D2-5C85-470F-9C6E-6918F642A00B}
2014-05-31 08:20 - 2014-04-05 19:00 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-05-25 18:02 - 2014-05-25 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies
2014-05-21 20:09 - 2014-05-21 20:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-05-21 16:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-20 23:39 - 2014-05-19 23:50 - 00000000 ____D () C:\Users\ogogog\Desktop\UnlockTools
2014-05-20 19:33 - 2014-05-20 04:33 - 00000672 _____ () C:\NSI_DriverInstall.log
2014-05-20 05:21 - 2014-05-20 05:21 - 00000416 _____ () C:\Windows\BRWMARK.INI
2014-05-20 05:21 - 2014-05-20 05:21 - 00000034 _____ () C:\Windows\SysWOW64\BD2030.DAT
2014-05-20 05:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-05-20 05:11 - 2014-04-30 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-20 04:33 - 2014-05-20 04:33 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-05-20 04:33 - 2014-05-20 04:33 - 00000000 ____D () C:\Program Files (x86)\Handset WinDriver
2014-05-19 23:27 - 2014-05-18 10:59 - 00000000 ____D () C:\Users\ogogog\AppData\Local\PMB Files
2014-05-19 23:26 - 2014-05-19 20:50 - 00000000 ____D () C:\Users\ogogog\.android
2014-05-19 23:04 - 2014-05-19 23:04 - 00000000 ____D () C:\Program Files\Java
2014-05-19 20:44 - 2014-05-19 20:40 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-19 20:42 - 2014-05-19 20:17 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-19 20:25 - 2014-04-19 09:56 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-19 20:23 - 2014-04-06 12:07 - 00000000 ____D () C:\Users\ogogog\AppData\Local\Adobe
2014-05-19 20:18 - 2014-05-19 20:18 - 00000000 ____D () C:\ProgramData\Sun
2014-05-19 20:15 - 2014-05-19 20:15 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-19 20:03 - 2014-05-19 20:02 - 00000000 ____D () C:\Users\ogogog\Desktop\adt-bundle-windows-x86_64-20140321
2014-05-19 04:24 - 2014-04-18 18:24 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-19 03:23 - 2014-05-19 03:23 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_smhwadb_01005.Wdf
2014-05-19 02:53 - 2014-05-19 02:53 - 00000000 ____D () C:\Users\ogogog\Desktop\adb-toolkit
2014-05-19 02:51 - 2014-05-19 02:51 - 00000000 ____D () C:\adbtk
2014-05-19 02:47 - 2014-04-22 22:45 - 00000103 _____ () C:\Users\ogogog\Desktop\Neues Textdokument (2).txt
2014-05-19 01:21 - 2014-05-19 01:21 - 00000000 ____D () C:\Users\ogogog\AppData\Local\worstenbrood
2014-05-19 01:19 - 2014-05-19 01:19 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-05-19 00:25 - 2014-05-19 00:25 - 00000000 ____D () C:\Users\ogogog\AppData\Local\Downloaded Installations
2014-05-19 00:22 - 2014-05-19 00:22 - 02344129 _____ () C:\Users\ogogog\Desktop\HuaweiUpdateExtractor_0.9.7.9_Setup.zip
2014-05-18 20:44 - 2014-05-18 00:40 - 00000061 _____ () C:\Users\ogogog\Desktop\Neues Textdokument (3).txt
2014-05-18 11:55 - 2014-05-18 11:55 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\LolClient
2014-05-18 11:06 - 2014-05-18 11:06 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2014-05-18 11:06 - 2014-05-18 11:06 - 00000000 ____D () C:\Riot Games
2014-05-18 10:58 - 2014-05-18 10:58 - 00000000 ____D () C:\Users\ogogog\AppData\Roaming\Riot Games
2014-05-18 10:58 - 2014-05-18 10:58 - 00000000 ____D () C:\ProgramData\PMB Files
2014-05-18 10:58 - 2014-05-18 10:58 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-05-17 23:58 - 2014-05-17 23:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tt eSPORTS
2014-05-17 23:58 - 2014-05-17 23:58 - 00000000 ____D () C:\Program Files (x86)\Tt eSPORTS
2014-05-17 23:58 - 2014-04-05 05:01 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-16 16:21 - 2014-05-16 16:04 - 00000000 ____D () C:\Users\ogogog\Documents\THERON

Some content of TEMP:
====================
C:\Users\ogogog\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-10 13:42

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---


FRST Additions Logfile:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-06-2014 02
Ran by ogogog at 2014-06-15 17:32:15
Running from C:\Users\ogogog\Desktop\Neuer Ordner (3)
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2018 - Avast Software)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Dead Space (HKLM-x32\...\{025A585C-0C66-413D-80D2-4C05CB699771}) (Version: 1.0.0.222 - Electronic Arts)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Driver Manager (HKLM-x32\...\{177CD779-4EEC-43C5-8DEA-4E0EC103624B}) (Version: 8.1 - Driver Manager)
EA Sports FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 5.3.0.40277 - Electronic Arts, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
FreshUI (HKLM-x32\...\FreshDevices - FreshUI_is1) (Version:  - )
Full Tilt Poker.Eu (HKLM-x32\...\{127BEFB3-24B2-4B44-8E99-AD22C2A5A8ED}) (Version: 5.8.21.WIN.FullTilt.EU - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
PrivaZer (HKLM-x32\...\PrivaZer) (Version: 2.20.1.0 - Goversoft LLC)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
ShotOnline (HKLM-x32\...\ShotOnline) (Version: 1.0 - OnNet)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.0.3 - Electronic Arts)
Tt eSPORTS THERON (HKLM-x32\...\{B50AB875-64A2-4D12-BB48-B15611B48CE0}) (Version: 1.0.0 - Tt eSPORTS)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WildStar (HKLM-x32\...\WildStar) (Version:  - NCSOFT)
WTF (HKLM-x32\...\WTF_is1) (Version: WTF - OnNet)

==================== Restore Points  =========================

05-06-2014 12:49:09 avast! antivirus system restore point
10-06-2014 10:35:07 Windows Update
11-06-2014 16:11:04 Windows Update
12-06-2014 01:00:12 Windows Update
12-06-2014 02:28:07 Windows Update
14-06-2014 01:35:22 avast! antivirus system restore point
14-06-2014 03:36:24 Windows Modules Installer
14-06-2014 04:35:43 DirectX wurde installiert
14-06-2014 15:08:50 Installed Microsoft Fix it 50688
14-06-2014 16:37:51 Windows 7 Upgrade Advisor wird installiert
14-06-2014 16:43:37 Windows 7 Upgrade Advisor wird entfernt
14-06-2014 19:36:40 Removed Outcome

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {29AAF102-2A21-422C-BB46-3A7BE5157860} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {630008D8-3F64-4B65-962E-D99FD9FB2A30} - System32\Tasks\Driver Manager-RTMUpdater => C:\Program Files (x86)\Driver Manager\Driver Manager\DriverManager.exe [2014-05-07] (PC Drivers Headquarters)
Task: {66494B01-600B-4943-BC0C-FA93B4C96F89} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-06-14] (AVAST Software)
Task: {D7BF7967-7247-483E-A5E3-CD52A1FC9B49} - System32\Tasks\Driver Manager-RTMScanRunOnce => C:\Program Files (x86)\Driver Manager\Driver Manager\DriverManager.exe [2014-05-07] (PC Drivers Headquarters)
Task: {E279B4F4-9C36-41A4-9B63-A80DA9EE3C57} - System32\Tasks\Driver Manager-RTMScan => C:\Program Files (x86)\Driver Manager\Driver Manager\DriverManager.exe [2014-05-07] (PC Drivers Headquarters)
Task: {E5672CD3-661B-4AC6-89F6-73E740B1A431} - System32\Tasks\Driver Manager-RTMRules => C:\Program Files (x86)\Driver Manager\Driver Manager\DriverManager.exe [2014-05-07] (PC Drivers Headquarters)

==================== Loaded Modules (whitelisted) =============

2014-04-05 06:42 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-06-14 20:26 - 2014-06-14 20:26 - 02776064 _____ () C:\Program Files\AVAST Software\Avast\defs\14061401\algo.dll
2014-06-15 17:18 - 2014-06-15 17:18 - 02776064 _____ () C:\Program Files\AVAST Software\Avast\defs\14061500\algo.dll
2014-06-14 03:35 - 2014-06-14 03:35 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-06-03 08:09 - 2014-06-11 18:12 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-19 20:22 - 2014-05-19 20:22 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:9A870F8B

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Tt eSPORTS THERON Gaming Mouse => "C:\Program Files (x86)\Tt eSPORTS\Tt eSPORTS THERON\THERON.exe" /Automation

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/15/2014 06:03:22 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm autoruns.exe, Version 12.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 74c

Startzeit: 01cf884e545f37de

Endzeit: 15

Anwendungspfad: C:\Users\ogogog\Downloads\Autoruns\autoruns.exe

Berichts-ID: f9444aae-f441-11e3-ab2a-001fd027f76f

Error: (06/15/2014 06:02:21 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/15/2014 06:02:18 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/15/2014 06:02:18 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/15/2014 06:02:07 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/15/2014 04:40:57 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/15/2014 04:40:23 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (06/15/2014 05:18:18 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Msmq-Listeneradapter" ist von folgendem Dienst abhängig: msmq. Dieser Dienst ist eventuell nicht installiert.

Error: (06/15/2014 06:01:21 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (06/15/2014 05:58:42 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Msmq-Listeneradapter" ist von folgendem Dienst abhängig: msmq. Dieser Dienst ist eventuell nicht installiert.

Error: (06/15/2014 05:33:09 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.

Error: (06/15/2014 05:33:08 AM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.

Error: (06/15/2014 05:26:57 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (06/15/2014 04:56:15 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (06/15/2014 06:03:22 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: autoruns.exe12.0.0.074c01cf884e545f37de15C:\Users\ogogog\Downloads\Autoruns\autoruns.exef9444aae-f441-11e3-ab2a-001fd027f76f

Error: (06/15/2014 06:02:21 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\ogogog\Desktop\Neuer Ordner (3)\esetsmartinstaller_deu.exe

Error: (06/15/2014 06:02:18 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\ogogog\Desktop\Neuer Ordner (3)\esetsmartinstaller_deu.exe

Error: (06/15/2014 06:02:18 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\ogogog\Desktop\Neuer Ordner (3)\esetsmartinstaller_deu.exe

Error: (06/15/2014 06:02:07 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\ogogog\Desktop\Neuer Ordner (3)\esetsmartinstaller_deu.exe

Error: (06/15/2014 04:40:57 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\ogogog\Desktop\Neuer Ordner (3)\esetsmartinstaller_deu.exe

Error: (06/15/2014 04:40:23 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\ogogog\Desktop\Neuer Ordner (3)\esetsmartinstaller_deu.exe


==================== Memory info ===========================

Percentage of memory in use: 25%
Total physical RAM: 4094.48 MB
Available physical RAM: 3051.59 MB
Total Pagefile: 8187.15 MB
Available Pagefile: 7084.4 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:777.84 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 4C148DC1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---

hi,
wenn nötig hätte ich auch noch logfiles von gestern abend oder so mit allen häkchen an.
habe übernacht recht viel deinstalliert.
danke soweit

schrauber 16.06.2014 09:27
Hi,

Malware ist da keine.

hendriks 17.06.2014 05:31
thx so weit für deine hilfe.
mache wegen der sicherheit einfach mal das system neu, bin nur mal gespannt wegen der erneuten aktivierung, das auch das einzige was bei mir wirklich fragen aufwirft.

schrauber 17.06.2014 10:55
Das sollte bei legalem Key gar kein problem sein.


Alle Zeitangaben in WEZ +1. Es ist jetzt 11:27 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131