Trojaner-Board - Virus blockt Malwarebytes und Malwarebytes Chameleon

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2014 01

Ran by Marcel (administrator) on MARCELS-PC on 18-08-2014 16:03:20

Running from C:\Users\Marcel\Downloads

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Akamai Technologies, Inc.) C:\Users\Marcel\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Marcel\AppData\Local\Akamai\netsession_win.exe

(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe

(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

() C:\Program Files (x86)\Opera\23.0.1522.75\opera_crashreporter.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

(EA Digital Illusions CE AB) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

() C:\Windows\SysWOW64\PnkBstrB.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)

HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [254464 2014-05-20] (Razer Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585560 2014-06-23] (Razer Inc.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)

HKU\S-1-5-21-594468629-384485566-424415787-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Marcel\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\S-1-5-21-594468629-384485566-424415787-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600728 2014-08-06] (Electronic Arts)

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.115.10
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)

FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Marcel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-06]
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR StartupUrls: "hxxp://www.google.com/"

CHR DefaultSearchKeyword: trovi.search

CHR DefaultSearchProvider: Trovi search

CHR Extension: (Google Docs) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-06]

CHR Extension: (Google Drive) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-06]

CHR Extension: (YouTube) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-06]

CHR Extension: (Google-Suche) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-06]

CHR Extension: (Skype Click to Call) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-06-06]

CHR Extension: (Google Wallet) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-06]

CHR Extension: (Battlefield Play4Free) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2014-08-13]

CHR Extension: (Google Mail) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-06]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-23]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-23] (AVAST Software)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356912 2014-07-19] (Microsoft Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-03] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-08-13] ()

R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [215416 2014-08-18] ()

R2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [367616 2014-05-20] (Razer Inc.) [File not signed]

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-23] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-23] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-23] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-23] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-23] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-23] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-23] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-23] ()

R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2014-05-19] (Razer Inc)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-18 16:03 - 2014-08-18 16:03 - 00013180 _____ () C:\Users\Marcel\Downloads\FRST.txt

2014-08-18 16:03 - 2014-08-18 16:03 - 00000000 ____D () C:\FRST

2014-08-18 16:02 - 2014-08-18 16:02 - 02101760 _____ (Farbar) C:\Users\Marcel\Downloads\FRST64.exe

2014-08-18 10:43 - 2014-08-18 11:32 - 00034224 _____ () C:\Windows\WindowsUpdate.log

2014-08-18 01:03 - 2014-08-18 01:03 - 00000758 _____ () C:\Windows\PFRO.log

2014-08-14 09:09 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-08-14 09:09 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-08-14 09:09 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-08-14 09:09 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-08-14 09:09 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-08-14 09:09 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-08-14 09:09 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-08-14 09:09 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-08-14 09:09 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-08-14 09:09 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-08-14 09:09 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-08-14 09:09 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-08-14 09:09 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-08-14 09:09 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-08-14 09:09 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-08-14 09:09 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-08-14 09:09 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-08-14 09:09 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-08-14 09:09 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-08-14 09:09 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-08-14 09:09 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-08-14 09:09 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-08-14 09:09 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-08-14 09:09 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-08-14 09:09 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-08-14 09:09 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-08-14 09:09 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-08-14 09:09 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-08-14 09:09 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-08-14 09:09 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-08-14 09:09 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-08-14 09:09 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-08-14 09:09 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-08-14 09:09 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-08-14 09:09 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-08-14 09:09 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-14 09:09 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-08-14 09:09 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-08-14 09:09 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-14 09:09 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-08-14 09:09 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-08-14 09:08 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-08-14 09:08 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-14 09:08 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-08-14 09:06 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-08-14 09:06 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-08-14 09:06 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-08-14 09:06 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-08-14 09:06 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-08-14 09:06 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-08-14 09:06 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-08-14 09:06 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe

2014-08-14 09:06 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-08-14 09:06 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-08-14 09:06 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-08-14 09:06 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-08-14 09:06 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-08-14 09:06 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-08-14 09:06 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-08-14 09:06 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2014-08-14 09:06 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\ncobjapi.dll

2014-08-14 09:06 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll

2014-08-14 09:06 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll

2014-08-14 09:06 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncobjapi.dll

2014-08-14 09:06 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll

2014-08-14 09:06 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll

2014-08-14 09:06 - 2014-05-03 01:26 - 00050745 _____ () C:\Windows\system32\srms.dat

2014-08-14 09:06 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-08-14 09:06 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys

2014-08-14 09:06 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-08-14 09:06 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys

2014-08-14 09:06 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys

2014-08-14 09:06 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe

2014-08-14 09:06 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe

2014-08-14 09:06 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2014-08-14 09:06 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll

2014-08-14 09:06 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2014-08-14 09:06 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll

2014-08-14 09:06 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2014-08-14 09:06 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2014-08-14 09:06 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll

2014-08-14 09:06 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll

2014-08-14 09:06 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll

2014-08-14 09:06 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll

2014-08-14 09:06 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll

2014-08-14 09:06 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2014-08-14 09:06 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-08-14 09:06 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-08-14 09:06 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll

2014-08-14 09:06 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2014-08-14 09:06 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2014-08-14 09:06 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll

2014-08-14 09:06 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-08-14 09:06 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-08-14 09:05 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-14 09:05 - 2014-08-07 00:39 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-14 09:05 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-14 09:05 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-08-14 09:05 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-08-14 09:05 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll

2014-08-14 09:05 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2014-08-14 09:05 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-14 09:05 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-14 09:05 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-14 09:05 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-08-14 09:05 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-08-14 09:05 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-14 09:05 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-08-14 09:05 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-08-14 09:05 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-08-14 09:05 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-08-14 09:05 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-08-14 09:05 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-08-14 09:05 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-08-14 09:05 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-08-14 09:05 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2014-08-14 09:05 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2014-08-14 09:05 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2014-08-14 09:05 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2014-08-14 09:05 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2014-08-14 09:05 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-08-14 09:05 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll

2014-08-14 09:05 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll

2014-08-14 09:05 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-08-14 09:05 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-08-13 16:41 - 2014-08-13 16:54 - 00000000 ____D () C:\Users\Marcel\Documents\Battlefield Play4Free

2014-08-13 16:41 - 2014-08-13 16:41 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games

2014-08-13 16:26 - 2014-08-13 16:26 - 00000000 ____D () C:\Program Files (x86)\EA Games

2014-08-08 20:50 - 2014-08-10 02:04 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\TS3Client

2014-08-08 20:50 - 2014-08-08 20:50 - 00001170 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2014-08-08 20:50 - 2014-08-08 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-08-08 20:50 - 2014-08-08 20:50 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client

2014-08-08 20:49 - 2014-08-08 20:50 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Marcel\Downloads\TeamSpeak3-Client-win32-3.0.16.exe

2014-08-08 20:49 - 2014-08-08 20:50 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Marcel\Downloads\TeamSpeak3-Client-win32-3.0.16 (1).exe

2014-08-06 11:27 - 2014-08-06 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-08-03 16:47 - 2014-08-03 16:49 - 00000000 ____D () C:\Users\Marcel\Documents\Battlefield 4 CTE

2014-07-23 15:56 - 2014-07-23 15:56 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-18 16:03 - 2014-08-18 16:03 - 00013180 _____ () C:\Users\Marcel\Downloads\FRST.txt

2014-08-18 16:03 - 2014-08-18 16:03 - 00000000 ____D () C:\FRST

2014-08-18 16:02 - 2014-08-18 16:02 - 02101760 _____ (Farbar) C:\Users\Marcel\Downloads\FRST64.exe

2014-08-18 16:01 - 2014-06-05 20:31 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-08-18 16:00 - 2014-06-08 11:30 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-08-18 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-08-18 15:55 - 2014-06-05 19:34 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{79717811-181B-47D1-9CBE-43C89F9ACFAF}

2014-08-18 15:46 - 2014-06-05 20:31 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-18 15:27 - 2014-06-08 11:30 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-08-18 12:12 - 2014-06-05 21:13 - 00005148 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for MARCELS-PC-Marcel Marcels-PC

2014-08-18 12:08 - 2014-06-05 18:07 - 00003592 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-594468629-384485566-424415787-1001

2014-08-18 12:05 - 2014-06-05 17:56 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-08-18 12:05 - 2013-08-23 01:24 - 00764340 _____ () C:\Windows\system32\perfh007.dat

2014-08-18 12:05 - 2013-08-23 01:24 - 00159160 _____ () C:\Windows\system32\perfc007.dat

2014-08-18 12:03 - 2014-06-05 20:31 - 00002195 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-18 12:02 - 2014-06-05 21:31 - 00000000 ____D () C:\ProgramData\Origin

2014-08-18 12:02 - 2014-06-05 21:31 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-08-18 12:02 - 2014-06-05 20:31 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-18 12:02 - 2014-06-05 18:03 - 00000000 ___DO () C:\Users\Marcel\SkyDrive

2014-08-18 12:01 - 2014-06-05 18:14 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-08-18 12:01 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-18 12:01 - 2013-08-22 16:44 - 00390960 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-18 12:00 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-08-18 11:55 - 2014-06-15 20:23 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-18 11:32 - 2014-08-18 10:43 - 00034224 _____ () C:\Windows\WindowsUpdate.log

2014-08-18 01:49 - 2014-06-06 18:45 - 00002220 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk

2014-08-18 01:45 - 2014-06-05 18:02 - 00000000 ____D () C:\Users\Marcel

2014-08-18 01:03 - 2014-08-18 01:03 - 00000758 _____ () C:\Windows\PFRO.log

2014-08-17 01:43 - 2014-06-05 21:37 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\Skype

2014-08-16 22:19 - 2014-06-08 17:35 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

2014-08-16 11:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-08-15 10:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache

2014-08-15 02:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-08-15 02:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-08-15 02:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager

2014-08-15 02:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera

2014-08-14 09:16 - 2014-06-05 19:05 - 00000000 ____D () C:\Windows\system32\MRT

2014-08-14 09:16 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-08-14 09:15 - 2014-06-05 19:05 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-08-14 09:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData

2014-08-14 09:05 - 2014-06-05 18:59 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-08-14 09:02 - 2014-06-12 17:57 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-08-14 09:01 - 2014-06-05 18:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-08-14 09:01 - 2013-08-22 13:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-08-14 09:01 - 2013-08-22 13:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-08-14 09:01 - 2013-08-22 13:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-08-14 09:01 - 2013-08-22 13:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-08-14 09:01 - 2013-08-22 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-08-14 09:01 - 2013-08-22 05:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-08-14 09:01 - 2013-08-22 05:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-08-14 09:01 - 2013-08-22 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-08-14 09:00 - 2014-06-05 20:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-08-14 09:00 - 2014-06-05 20:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-08-14 09:00 - 2013-08-22 13:22 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-08-14 09:00 - 2013-08-22 13:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-08-14 09:00 - 2013-08-22 12:32 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-08-14 09:00 - 2013-08-22 05:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-08-14 09:00 - 2013-08-22 05:40 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-08-13 18:01 - 2014-06-06 18:44 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2014-08-13 17:21 - 2014-06-08 11:30 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-08-13 16:54 - 2014-08-13 16:41 - 00000000 ____D () C:\Users\Marcel\Documents\Battlefield Play4Free

2014-08-13 16:44 - 2014-06-08 17:35 - 00000000 ____D () C:\Users\Marcel\AppData\Local\PunkBuster

2014-08-13 16:41 - 2014-08-13 16:41 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games

2014-08-13 16:26 - 2014-08-13 16:26 - 00000000 ____D () C:\Program Files (x86)\EA Games

2014-08-12 17:10 - 2014-06-05 20:09 - 00003854 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1401989751

2014-08-12 17:10 - 2014-06-05 19:35 - 00000000 ____D () C:\Program Files (x86)\Opera

2014-08-10 02:04 - 2014-08-08 20:50 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\TS3Client

2014-08-08 20:50 - 2014-08-08 20:50 - 00001170 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2014-08-08 20:50 - 2014-08-08 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-08-08 20:50 - 2014-08-08 20:50 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client

2014-08-08 20:50 - 2014-08-08 20:49 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Marcel\Downloads\TeamSpeak3-Client-win32-3.0.16.exe

2014-08-08 20:50 - 2014-08-08 20:49 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Marcel\Downloads\TeamSpeak3-Client-win32-3.0.16 (1).exe

2014-08-08 20:09 - 2014-06-05 21:37 - 00000000 ____D () C:\ProgramData\Skype

2014-08-07 21:23 - 2014-06-15 20:23 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-07 20:55 - 2014-06-05 21:37 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-08-07 09:40 - 2014-06-05 21:03 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-08-07 04:12 - 2014-08-14 09:05 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-07 00:39 - 2014-08-14 09:05 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-06 11:27 - 2014-08-06 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-08-06 11:27 - 2014-06-05 21:33 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-08-03 16:49 - 2014-08-03 16:47 - 00000000 ____D () C:\Users\Marcel\Documents\Battlefield 4 CTE

2014-08-03 16:49 - 2014-06-28 15:50 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

2014-08-02 05:56 - 2014-08-14 09:05 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-02 05:11 - 2014-08-14 09:05 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-08-02 02:17 - 2013-08-22 17:38 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-02 02:17 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-25 16:52 - 2014-08-14 09:09 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-25 15:51 - 2014-08-14 09:09 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-25 15:28 - 2014-08-14 09:09 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-25 15:25 - 2014-08-14 09:09 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-25 15:25 - 2014-08-14 09:09 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-25 14:59 - 2014-08-14 09:09 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-25 14:40 - 2014-08-14 09:09 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-25 14:34 - 2014-08-14 09:09 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-25 14:30 - 2014-08-14 09:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-25 14:28 - 2014-08-14 09:09 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-25 14:28 - 2014-08-14 09:09 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-25 14:21 - 2014-08-14 09:09 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-25 14:17 - 2014-08-14 09:09 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-25 14:10 - 2014-08-14 09:09 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-25 14:08 - 2014-08-14 09:09 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-25 14:06 - 2014-08-14 09:09 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-25 13:52 - 2014-08-14 09:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-25 13:47 - 2014-08-14 09:09 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-25 13:43 - 2014-08-14 09:09 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-25 13:43 - 2014-08-14 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-25 13:42 - 2014-08-14 09:09 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-25 13:39 - 2014-08-14 09:09 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-25 13:34 - 2014-08-14 09:09 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-25 13:29 - 2014-08-14 09:09 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-25 13:23 - 2014-08-14 09:09 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-25 13:13 - 2014-08-14 09:09 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-25 13:09 - 2014-08-14 09:09 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-25 13:07 - 2014-08-14 09:09 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-25 13:03 - 2014-08-14 09:09 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-25 12:52 - 2014-08-14 09:09 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-25 12:26 - 2014-08-14 09:09 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-25 12:17 - 2014-08-14 09:09 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-25 12:09 - 2014-08-14 09:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-25 12:05 - 2014-08-14 09:09 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-25 12:00 - 2014-08-14 09:09 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-23 15:58 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-07-23 15:56 - 2014-07-23 15:56 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr

2014-07-23 15:56 - 2014-06-06 18:44 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2014-07-23 15:56 - 2014-06-06 18:44 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys

2014-07-23 15:51 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\tracing

2014-07-20 17:00 - 2014-06-08 17:34 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-08-18 11:16
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-08-2014 01

Ran by Marcel at 2014-08-18 16:04:05

Running from C:\Users\Marcel\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)

avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.3825 - Electronic Arts)

Battlefield 4™ CTE (HKLM-x32\...\{551A08D1-B60E-4DED-9B67-C3B38258CCA3}) (Version: 1.0.2.9835 - Electronic Arts)

Battlefield Play4Free (Marcel) (HKCU\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version:  - EA Digital illusions)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)

CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)

Dead Space (HKLM-x32\...\{025A585C-0C66-413D-80D2-4C05CB699771}) (Version: 1.0.0.222 - Electronic Arts)

DriverTuner 3.5.0.1 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.5.0.1 - LionSea Software co., ltd)

ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)

Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.05 - Ubisoft)

Free Audio CD to MP3 Converter version 1.3.12.1228 (HKLM-x32\...\Free Audio CD to MP3 Converter_is1) (Version: 1.3.12.1228 - DVDVideoSoft Ltd.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Inno3D TunelT OverClock Utility version V6.0.0.0 (HKLM-x32\...\Inno3D TunelT OverClock Utility_is1) (Version: V6.0.0.0 - )

Java 7 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417060FF}) (Version: 7.0.600 - Oracle)

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft Office Home and Business 2013 - de-de (HKLM\...\HomeBusinessRetail - de-de) (Version: 15.0.4631.1004 - Microsoft Corporation)

Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden

NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)

NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden

NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)

NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4631.1004 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4631.1004 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4631.1004 - Microsoft Corporation) Hidden

Opera Stable 23.0.1522.75 (HKLM-x32\...\Opera 23.0.1522.75) (Version: 23.0.1522.75 - Opera Software ASA)

Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.)

Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.15.20888 - Razer Inc.)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 4.5.1f3 - Unity Technologies ApS)

Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-594468629-384485566-424415787-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Marcel\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\FileSyncApi64.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

03-08-2014 14:41:43 DirectX wurde installiert

11-08-2014 07:11:33 Geplanter Prüfpunkt

14-08-2014 07:11:34 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0A75E324-EE59-4C5B-8F5F-17653ABB0547} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv

Task: {0AC6CD73-4A93-4AEE-8ECF-60355F9C5401} - \Advanced System Protector No Task File <==== ATTENTION

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {0C81129B-4586-49D7-8EA0-8A2A206C25E0} - System32\Tasks\Microsoft Office 15 Sync Maintenance for MARCELS-PC-Marcel Marcels-PC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-06-03] (Microsoft Corporation)

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {6127D560-9159-4B07-9F5C-D4E65DB14CA9} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)

Task: {64AED200-D034-4DC4-BEE3-A6F5DBF9FFB4} - \Digital Sites No Task File <==== ATTENTION

Task: {6887B7AE-5218-4A0F-AD71-F1545FBA270A} - System32\Tasks\{0E0007BD-37E1-4757-95E7-23C4F2CE52D1} => c:\program files (x86)\opera\launcher.exe [2014-08-08] (Opera Software)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6BD68840-DF5E-47A9-A914-09A4A4CEB06C} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics

Task: {6D5873FE-9DF7-4993-825E-88A308375C90} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-594468629-384485566-424415787-1001 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {6E7E9257-AD99-4DE7-946C-B4B438D5D1A5} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {73C0B59D-2106-4368-8093-B3F4E57C9A4C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-08-14] (Microsoft Corporation)

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {7D405F5B-A6FA-44C5-B6DC-015399DB8105} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-05] (Google Inc.)

Task: {82A12E10-9CB4-49E5-982E-8FD1479091A6} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9C5AF145-710E-4132-924F-AD450CB44AF7} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-23] (AVAST Software)

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {AA53A4EE-1DF4-4EC7-89F0-4070A5659EE8} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-06-19] (Microsoft Corporation)

Task: {C4844109-53DC-4DCC-90AE-F2DEA1090334} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-05] (Google Inc.)

Task: {CC92F6DC-D7FC-4E6A-8DED-AD4573C03D33} - System32\Tasks\Opera scheduled Autoupdate 1401989751 => C:\Program Files (x86)\Opera\launcher.exe [2014-08-08] (Opera Software)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D6B3A04A-CEEA-4CB1-87AB-E9A03AC23E34} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E363125B-4F0E-4E91-BA95-04AE36F7E8D8} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: {FBB9440B-85CC-424E-A668-A99A21BF55E0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-06-05 18:13 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-06-05 18:14 - 2013-07-04 03:32 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe

2014-06-05 21:03 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2014-06-08 11:30 - 2014-08-13 17:21 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-06-08 03:44 - 2014-06-08 03:44 - 00028160 _____ () C:\Users\Marcel\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\AC\Microsoft\CLR_v4.0\NativeImages\Microsoft.PerfTrack\10ead687afca927bd7b22ad8d20e1de3\Microsoft.PerfTrack.ni.dll

2014-06-06 20:27 - 2014-06-06 20:27 - 00363520 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Foundation\057b7043f4868b76c209d9c426b80743\Windows.Foundation.ni.dll

2014-06-06 20:27 - 2014-06-06 20:27 - 01278464 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Storage\ba65f033632f4fc480cc45bc72bf25e4\Windows.Storage.ni.dll

2014-06-06 20:27 - 2014-06-06 20:27 - 01459712 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.UI\926020eb508f6968545d6a51fb661fad\Windows.UI.ni.dll

2014-08-17 13:35 - 2014-08-17 13:35 - 02207232 _____ () C:\Users\Marcel\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\AC\Microsoft\CLR_v4.0\NativeImages\Microsoft.B2e1870ee#\a43a17a5fd363f6ce6b97b4505e46aeb\Microsoft.Bing.AppEx.Telemetry.ni.dll

2014-06-06 20:27 - 2014-06-06 20:27 - 01782784 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.App640a3541#\43b92b6dbc9eb61983817ea32346d510\Windows.ApplicationModel.ni.dll

2014-06-06 20:27 - 2014-06-06 20:27 - 00347136 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Gloaae92e31#\94e2bc13589233f9d2cc54292717b8cf\Windows.Globalization.ni.dll

2014-06-06 20:27 - 2014-06-06 20:27 - 00632320 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Security\00ce12e0481a881d419350afd79395ef\Windows.Security.ni.dll

2014-06-06 20:27 - 2014-06-06 20:27 - 00207872 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.System\d1c5274ccd6fb2b4b5dbddd0f0ca6c6e\Windows.System.ni.dll

2014-06-08 03:44 - 2014-06-08 03:44 - 00117248 _____ () C:\Users\Marcel\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\AC\Microsoft\CLR_v4.0\NativeImages\SqliteWrapper\99fa190c50aa9d06da5fb90ed0d8b8f7\SqliteWrapper.ni.dll

2014-06-05 19:00 - 2014-06-05 19:00 - 00551440 _____ () C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.2.309_x64__8wekyb3d8bbwe\SqliteWrapper.dll

2013-08-23 01:27 - 2013-08-23 01:27 - 00660920 _____ () C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.2.309_x64__8wekyb3d8bbwe\Sqlite3.dll

2014-06-06 20:27 - 2014-06-06 20:27 - 01259520 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Networking\8f6e236cd6041c81411f85852722670b\Windows.Networking.ni.dll

2014-06-15 17:34 - 2014-06-15 17:34 - 01383936 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Web\6e0851f140b7f4407968add9bcebb667\Windows.Web.ni.dll

2014-06-15 17:34 - 2014-06-15 17:34 - 00467456 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Graphics\ea818a24554fc2db9a73de1e79afb286\Windows.Graphics.ni.dll

2014-06-15 17:35 - 2014-06-15 17:35 - 00521216 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Data\d07f690ce5d3a2de7c9089a6200d64db\Windows.Data.ni.dll

2014-06-15 17:35 - 2014-06-15 17:35 - 02019840 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Devices\0b4b3f23bdebd1d056b32b31e2f746bb\Windows.Devices.ni.dll

2014-08-12 17:10 - 2014-08-12 17:10 - 01401464 _____ () C:\Program Files (x86)\Opera\23.0.1522.75\opera_crashreporter.exe

2014-05-23 07:15 - 2014-06-21 05:03 - 00014200 _____ () C:\Program Files (x86)\Origin Games\Battlefield 4\Engine.BuildInfo_Win64_retail.dll

2014-06-09 16:16 - 2014-08-18 16:00 - 00662016 _____ () C:\Users\Marcel\AppData\Local\PunkBuster\BF4\pb\pbcl.d64

2014-06-09 16:16 - 2014-06-09 16:19 - 00055808 _____ () C:\Users\Marcel\AppData\Local\PunkBuster\BF4\pb\pbag.d64

2014-06-08 11:30 - 2014-08-18 16:00 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-07-23 15:56 - 2014-07-23 15:56 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll

2014-08-18 10:35 - 2014-08-18 10:35 - 02797568 _____ () C:\Program Files\AVAST Software\Avast\defs\14081800\algo.dll

2014-06-05 18:14 - 2014-08-18 12:01 - 00026112 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll

2014-06-05 18:14 - 2013-07-04 03:32 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll

2014-06-05 21:33 - 2014-08-06 08:26 - 00962560 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll

2014-06-05 21:32 - 2014-08-06 08:26 - 00024064 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll

2014-06-05 21:32 - 2014-08-06 08:26 - 00025088 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll

2014-06-05 21:32 - 2014-08-06 08:26 - 00217088 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll

2014-06-05 21:32 - 2014-08-06 08:26 - 00261632 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll

2014-06-05 21:32 - 2014-08-06 08:26 - 00019968 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll

2014-06-05 21:32 - 2014-08-06 08:26 - 00302592 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll

2014-06-05 21:32 - 2014-08-06 08:26 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll

2014-07-23 15:56 - 2014-07-23 15:56 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2014-06-19 15:29 - 2014-06-19 15:29 - 00316584 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll

2014-08-12 17:10 - 2014-08-12 17:10 - 00880248 _____ () C:\Program Files (x86)\Opera\23.0.1522.75\libglesv2.dll

2014-08-12 17:10 - 2014-08-12 17:10 - 00135800 _____ () C:\Program Files (x86)\Opera\23.0.1522.75\libegl.dll

2014-08-12 17:10 - 2014-08-12 17:10 - 00957048 _____ () C:\Program Files (x86)\Opera\23.0.1522.75\ffmpegsumo.dll

2014-08-13 14:40 - 2014-08-13 14:40 - 00294264 _____ () C:\Users\Marcel\AppData\Local\ESN\ESNLaunch\launcher-145.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\Marcel\SkyDrive:ms-properties
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 

Name: PCI-Kommunikationscontroller (einfach)

Description: PCI-Kommunikationscontroller (einfach)

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: SM-Bus-Controller

Description: SM-Bus-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (08/18/2014 00:07:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x8fc

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 00:00:07 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x594

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 00:00:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x4e0

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 11:59:57 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x7f4

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 11:55:56 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x4c

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 11:55:26 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x760

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 11:29:13 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x15fc

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 11:10:37 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x3d8

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 11:09:32 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0x678

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 

Error: (08/18/2014 11:06:32 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532

Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e

Ausnahmecode: 0x40000015

Fehleroffset: 0x0008d6fd

ID des fehlerhaften Prozesses: 0xebc

Startzeit der fehlerhaften Anwendung: 0xmbam.exe0

Pfad der fehlerhaften Anwendung: mbam.exe1

Pfad des fehlerhaften Moduls: mbam.exe2

Berichtskennung: mbam.exe3

Vollständiger Name des fehlerhaften Pakets: mbam.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
 
 

System errors:

=============

Error: (08/18/2014 00:00:30 PM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084WSearchNicht verfügbar{9E175B68-F52A-11D8-B9A5-505054503030}
 

Error: (08/18/2014 00:00:30 PM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
 

Error: (08/18/2014 00:00:25 PM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
 

Error: (08/18/2014 00:00:16 PM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084WSearchNicht verfügbar{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}
 

Error: (08/18/2014 00:00:16 PM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084WSearchNicht verfügbar{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}
 

Error: (08/18/2014 00:00:16 PM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084WSearchNicht verfügbar{9E175B6D-F52A-11D8-B9A5-505054503030}
 

Error: (08/18/2014 00:00:10 PM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
 

Error: (08/18/2014 00:00:04 PM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
 

Error: (08/18/2014 11:59:57 AM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
 

Error: (08/18/2014 11:59:49 AM) (Source: DCOM) (EventID: 10005) (User: MARCELS-PC)

Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
 
 

Microsoft Office Sessions:

=========================

Error: (08/18/2014 00:07:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd8fc01cfbacc3629d169C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll74dad8ba-26bf-11e4-8289-d850e63e5fa2
 

Error: (08/18/2014 00:00:07 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd59401cfbacb30af82e7C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll6e65982f-26be-11e4-8288-80a9e3a1b691
 

Error: (08/18/2014 00:00:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd4e001cfbacb2c9673fbC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll6a4a26e3-26be-11e4-8288-80a9e3a1b691
 

Error: (08/18/2014 11:59:57 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd7f401cfbacb2a8eb143C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll6844c687-26be-11e4-8288-80a9e3a1b691
 

Error: (08/18/2014 11:55:56 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd4c01cfbaca9b0e948cC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dlld8cbd0f0-26bd-11e4-8288-80a9e3a1b691
 

Error: (08/18/2014 11:55:26 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd76001cfbaca86f56d3dC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllc6a294c2-26bd-11e4-8288-80a9e3a1b691
 

Error: (08/18/2014 11:29:13 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd15fc01cfbac6df2038c0C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll1d3a0140-26ba-11e4-8287-d850e63e5fa2
 

Error: (08/18/2014 11:10:37 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd3d801cfbac4465e5facC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll845445f9-26b7-11e4-8287-d850e63e5fa2
 

Error: (08/18/2014 11:09:32 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd67801cfbac41f2ed3e3C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll5d2fb8b1-26b7-11e4-8287-d850e63e5fa2
 

Error: (08/18/2014 11:06:32 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdebc01cfbac3b3f4aee5C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllf2017cbe-26b6-11e4-8287-d850e63e5fa2
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz

Percentage of memory in use: 26%

Total physical RAM: 16322.76 MB

Available physical RAM: 12070.04 MB

Total Pagefile: 18754.76 MB

Available Pagefile: 12997.59 MB

Total Virtual: 131072 MB

Available Virtual: 131071.8 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.17 GB) (Free:749.25 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: C1D9E21B)

Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

ich war auf ner Internetseite wo ich auf einen Link für ein Forum geklickt hab und dann is nix passiert pc hat wie wild angefangen zu arbeiten und Avast hat sich gemeldet, dann hab ich den pc gleich ausgemacht aber anscheinend zu spät

Der PC arbeitet auch langsamer und die CPU und Datenträger auslastung ist seeehr hoch was sonst nie der Fall ist

AdwCleaner:

Code:

# AdwCleaner v3.307 - Bericht erstellt am 19/08/2014 um 23:36:52

# Aktualisiert 17/08/2014 von Xplode

# Betriebssystem : Windows 8.1  (64 bits)

# Benutzername : Marcel - MARCELS-PC

# Gestartet von : C:\Users\Marcel\Downloads\adwcleaner_3.307.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Program Files (x86)\Greener Web
 

***** [ Tasks ] *****
 

Task Gelöscht : Advanced System Protector

Task Gelöscht : Digital Sites
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17239
 
 

-\\ Google Chrome v36.0.1985.143
 

[ Datei : C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R1].txt - [1167 octets] - [19/08/2014 23:35:30]

AdwCleaner[S1].txt - [1088 octets] - [19/08/2014 23:36:52]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1148 octets] ##########

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 8.1 x64

Ran by Marcel on 19.08.2014 at 23:43:56,67

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 19.08.2014 at 23:48:01,98

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2014 01

Ran by Marcel (administrator) on MARCELS-PC on 19-08-2014 23:56:37

Running from C:\Users\Marcel\Downloads

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Akamai Technologies, Inc.) C:\Users\Marcel\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Marcel\AppData\Local\Akamai\netsession_win.exe

(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe

(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.77\opera.exe

() C:\Program Files (x86)\Opera\23.0.1522.77\opera_crashreporter.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.77\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.77\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.77\opera.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Farbar) C:\Users\Marcel\Downloads\FRST64 (1).exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)

HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [254464 2014-05-20] (Razer Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585560 2014-06-23] (Razer Inc.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)

HKU\S-1-5-21-594468629-384485566-424415787-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Marcel\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\S-1-5-21-594468629-384485566-424415787-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600728 2014-08-06] (Electronic Arts)

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.115.10
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)

FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Marcel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-06]
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR StartupUrls: "hxxp://www.google.com/"

CHR DefaultSearchKeyword: trovi.search

CHR DefaultSearchProvider: Trovi search

CHR Extension: (Google Docs) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-06]

CHR Extension: (Google Drive) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-06]

CHR Extension: (YouTube) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-06]

CHR Extension: (Google-Suche) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-06]

CHR Extension: (Skype Click to Call) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-06-06]

CHR Extension: (Google Wallet) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-06]

CHR Extension: (Battlefield Play4Free) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2014-08-13]

CHR Extension: (Google Mail) - C:\Users\Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-06]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-23]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-23] (AVAST Software)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356912 2014-07-19] (Microsoft Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-03] ()

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-08-13] ()

R2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [367616 2014-05-20] (Razer Inc.) [File not signed]

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-23] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-23] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-23] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-23] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-23] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-23] (AVAST Software)

S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-23] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-23] ()

R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39080 2014-05-19] (Razer Inc)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-19 23:56 - 2014-08-19 23:56 - 02101760 _____ (Farbar) C:\Users\Marcel\Downloads\FRST64 (1).exe

2014-08-19 23:48 - 2014-08-19 23:48 - 00000615 _____ () C:\Users\Marcel\Desktop\JRT.txt

2014-08-19 23:43 - 2014-08-19 23:43 - 01016261 _____ (Thisisu) C:\Users\Marcel\Downloads\JRT.exe

2014-08-19 23:43 - 2014-08-19 23:43 - 00000000 ____D () C:\Windows\ERUNT

2014-08-19 23:38 - 2014-08-19 23:38 - 00000310 _____ () C:\Windows\PFRO.log

2014-08-19 23:35 - 2014-08-19 23:36 - 00000000 ____D () C:\AdwCleaner

2014-08-19 23:35 - 2014-08-19 23:35 - 01361671 _____ () C:\Users\Marcel\Downloads\adwcleaner_3.307.exe

2014-08-19 11:41 - 2014-08-19 12:00 - 00029744 _____ () C:\Windows\WindowsUpdate.log

2014-08-18 16:04 - 2014-08-18 16:04 - 00034108 _____ () C:\Users\Marcel\Downloads\Addition.txt

2014-08-18 16:03 - 2014-08-19 23:56 - 00012763 _____ () C:\Users\Marcel\Downloads\FRST.txt

2014-08-18 16:03 - 2014-08-19 23:56 - 00000000 ____D () C:\FRST

2014-08-18 16:02 - 2014-08-18 16:02 - 02101760 _____ (Farbar) C:\Users\Marcel\Downloads\FRST64.exe

2014-08-14 09:09 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-08-14 09:09 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-08-14 09:09 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-08-14 09:09 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-08-14 09:09 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-08-14 09:09 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-08-14 09:09 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-08-14 09:09 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-08-14 09:09 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-08-14 09:09 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-08-14 09:09 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-08-14 09:09 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-08-14 09:09 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-08-14 09:09 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-08-14 09:09 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-08-14 09:09 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-08-14 09:09 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-08-14 09:09 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-08-14 09:09 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-08-14 09:09 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-08-14 09:09 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-08-14 09:09 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-08-14 09:09 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-08-14 09:09 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-08-14 09:09 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-08-14 09:09 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-08-14 09:09 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-08-14 09:09 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-08-14 09:09 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-08-14 09:09 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-08-14 09:09 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-08-14 09:09 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-08-14 09:09 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-08-14 09:09 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-08-14 09:09 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-08-14 09:09 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-14 09:09 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-08-14 09:09 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-08-14 09:09 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-14 09:09 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-08-14 09:09 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-08-14 09:08 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-08-14 09:08 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-14 09:08 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-08-14 09:06 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-08-14 09:06 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-08-14 09:06 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-08-14 09:06 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-08-14 09:06 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-08-14 09:06 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-08-14 09:06 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-08-14 09:06 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe

2014-08-14 09:06 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-08-14 09:06 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-08-14 09:06 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-08-14 09:06 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-08-14 09:06 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-08-14 09:06 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-08-14 09:06 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-08-14 09:06 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2014-08-14 09:06 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\ncobjapi.dll

2014-08-14 09:06 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll

2014-08-14 09:06 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll

2014-08-14 09:06 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncobjapi.dll

2014-08-14 09:06 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll

2014-08-14 09:06 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll

2014-08-14 09:06 - 2014-05-03 01:26 - 00050745 _____ () C:\Windows\system32\srms.dat

2014-08-14 09:06 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-08-14 09:06 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys

2014-08-14 09:06 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-08-14 09:06 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys

2014-08-14 09:06 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys

2014-08-14 09:06 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe

2014-08-14 09:06 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe

2014-08-14 09:06 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2014-08-14 09:06 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll

2014-08-14 09:06 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2014-08-14 09:06 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll

2014-08-14 09:06 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2014-08-14 09:06 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2014-08-14 09:06 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll

2014-08-14 09:06 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll

2014-08-14 09:06 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll

2014-08-14 09:06 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll

2014-08-14 09:06 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll

2014-08-14 09:06 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2014-08-14 09:06 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-08-14 09:06 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-08-14 09:06 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll

2014-08-14 09:06 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2014-08-14 09:06 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2014-08-14 09:06 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll

2014-08-14 09:06 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2014-08-14 09:06 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2014-08-14 09:05 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-14 09:05 - 2014-08-07 00:39 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-14 09:05 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-14 09:05 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-08-14 09:05 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-08-14 09:05 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll

2014-08-14 09:05 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2014-08-14 09:05 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-14 09:05 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-14 09:05 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-14 09:05 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-08-14 09:05 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-08-14 09:05 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-14 09:05 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-08-14 09:05 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-08-14 09:05 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-08-14 09:05 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-08-14 09:05 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-08-14 09:05 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-08-14 09:05 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-08-14 09:05 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-08-14 09:05 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2014-08-14 09:05 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2014-08-14 09:05 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2014-08-14 09:05 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2014-08-14 09:05 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2014-08-14 09:05 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-08-14 09:05 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll

2014-08-14 09:05 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll

2014-08-14 09:05 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-08-14 09:05 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-08-13 16:41 - 2014-08-13 16:54 - 00000000 ____D () C:\Users\Marcel\Documents\Battlefield Play4Free

2014-08-13 16:41 - 2014-08-13 16:41 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games

2014-08-13 16:26 - 2014-08-13 16:26 - 00000000 ____D () C:\Program Files (x86)\EA Games

2014-08-08 20:50 - 2014-08-10 02:04 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\TS3Client

2014-08-08 20:50 - 2014-08-08 20:50 - 00001170 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2014-08-08 20:50 - 2014-08-08 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-08-08 20:50 - 2014-08-08 20:50 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client

2014-08-08 20:49 - 2014-08-08 20:50 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Marcel\Downloads\TeamSpeak3-Client-win32-3.0.16.exe

2014-08-08 20:49 - 2014-08-08 20:50 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Marcel\Downloads\TeamSpeak3-Client-win32-3.0.16 (1).exe

2014-08-06 11:27 - 2014-08-06 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-08-03 16:47 - 2014-08-03 16:49 - 00000000 ____D () C:\Users\Marcel\Documents\Battlefield 4 CTE

2014-07-23 15:56 - 2014-07-23 15:56 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-19 23:56 - 2014-08-19 23:56 - 02101760 _____ (Farbar) C:\Users\Marcel\Downloads\FRST64 (1).exe

2014-08-19 23:56 - 2014-08-18 16:03 - 00012763 _____ () C:\Users\Marcel\Downloads\FRST.txt

2014-08-19 23:56 - 2014-08-18 16:03 - 00000000 ____D () C:\FRST

2014-08-19 23:50 - 2014-06-05 18:07 - 00003592 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-594468629-384485566-424415787-1001

2014-08-19 23:49 - 2014-06-05 19:34 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{79717811-181B-47D1-9CBE-43C89F9ACFAF}

2014-08-19 23:48 - 2014-08-19 23:48 - 00000615 _____ () C:\Users\Marcel\Desktop\JRT.txt

2014-08-19 23:46 - 2014-06-05 20:31 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-19 23:43 - 2014-08-19 23:43 - 01016261 _____ (Thisisu) C:\Users\Marcel\Downloads\JRT.exe

2014-08-19 23:43 - 2014-08-19 23:43 - 00000000 ____D () C:\Windows\ERUNT

2014-08-19 23:42 - 2014-06-05 17:56 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-08-19 23:42 - 2013-08-23 01:24 - 00764340 _____ () C:\Windows\system32\perfh007.dat

2014-08-19 23:42 - 2013-08-23 01:24 - 00159160 _____ () C:\Windows\system32\perfc007.dat

2014-08-19 23:40 - 2014-06-05 20:31 - 00002195 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-08-19 23:39 - 2014-06-05 21:31 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-08-19 23:39 - 2014-06-05 21:13 - 00005148 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for MARCELS-PC-Marcel Marcels-PC

2014-08-19 23:39 - 2014-06-05 20:31 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-19 23:39 - 2014-06-05 18:03 - 00000000 ___DO () C:\Users\Marcel\SkyDrive

2014-08-19 23:38 - 2014-08-19 23:38 - 00000310 _____ () C:\Windows\PFRO.log

2014-08-19 23:38 - 2014-06-05 18:14 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-08-19 23:38 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-19 23:37 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-08-19 23:36 - 2014-08-19 23:35 - 00000000 ____D () C:\AdwCleaner

2014-08-19 23:35 - 2014-08-19 23:35 - 01361671 _____ () C:\Users\Marcel\Downloads\adwcleaner_3.307.exe

2014-08-19 23:33 - 2014-06-05 21:31 - 00000000 ____D () C:\ProgramData\Origin

2014-08-19 23:31 - 2013-08-22 16:44 - 00390960 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-19 14:01 - 2014-06-05 20:31 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-08-19 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-08-19 12:00 - 2014-08-19 11:41 - 00029744 _____ () C:\Windows\WindowsUpdate.log

2014-08-19 11:42 - 2014-06-05 20:09 - 00003854 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1401989751

2014-08-19 11:42 - 2014-06-05 19:35 - 00000000 ____D () C:\Program Files (x86)\Opera

2014-08-18 23:08 - 2014-06-08 11:30 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2014-08-18 23:08 - 2014-06-08 11:30 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

2014-08-18 16:04 - 2014-08-18 16:04 - 00034108 _____ () C:\Users\Marcel\Downloads\Addition.txt

2014-08-18 16:02 - 2014-08-18 16:02 - 02101760 _____ (Farbar) C:\Users\Marcel\Downloads\FRST64.exe

2014-08-18 11:55 - 2014-06-15 20:23 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-18 01:49 - 2014-06-06 18:45 - 00002220 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk

2014-08-18 01:45 - 2014-06-05 18:02 - 00000000 ____D () C:\Users\Marcel

2014-08-17 01:43 - 2014-06-05 21:37 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\Skype

2014-08-16 22:19 - 2014-06-08 17:35 - 00297088 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

2014-08-16 11:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-08-15 10:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache

2014-08-15 02:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-08-15 02:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-08-15 02:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager

2014-08-15 02:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera

2014-08-14 09:16 - 2014-06-05 19:05 - 00000000 ____D () C:\Windows\system32\MRT

2014-08-14 09:16 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-08-14 09:15 - 2014-06-05 19:05 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-08-14 09:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData

2014-08-14 09:05 - 2014-06-05 18:59 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-08-14 09:02 - 2014-06-12 17:57 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-08-14 09:01 - 2014-06-05 18:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-08-14 09:01 - 2013-08-22 13:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-08-14 09:01 - 2013-08-22 13:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-08-14 09:01 - 2013-08-22 13:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-08-14 09:01 - 2013-08-22 13:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-08-14 09:01 - 2013-08-22 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-08-14 09:01 - 2013-08-22 05:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-08-14 09:01 - 2013-08-22 05:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-08-14 09:01 - 2013-08-22 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-08-14 09:00 - 2014-06-05 20:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-08-14 09:00 - 2014-06-05 20:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-08-14 09:00 - 2013-08-22 13:22 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-08-14 09:00 - 2013-08-22 13:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-08-14 09:00 - 2013-08-22 12:32 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-08-14 09:00 - 2013-08-22 05:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-08-14 09:00 - 2013-08-22 05:40 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-08-13 18:01 - 2014-06-06 18:44 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2014-08-13 17:21 - 2014-06-08 11:30 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-08-13 16:54 - 2014-08-13 16:41 - 00000000 ____D () C:\Users\Marcel\Documents\Battlefield Play4Free

2014-08-13 16:44 - 2014-06-08 17:35 - 00000000 ____D () C:\Users\Marcel\AppData\Local\PunkBuster

2014-08-13 16:41 - 2014-08-13 16:41 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games

2014-08-13 16:26 - 2014-08-13 16:26 - 00000000 ____D () C:\Program Files (x86)\EA Games

2014-08-10 02:04 - 2014-08-08 20:50 - 00000000 ____D () C:\Users\Marcel\AppData\Roaming\TS3Client

2014-08-08 20:50 - 2014-08-08 20:50 - 00001170 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2014-08-08 20:50 - 2014-08-08 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-08-08 20:50 - 2014-08-08 20:50 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client

2014-08-08 20:50 - 2014-08-08 20:49 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Marcel\Downloads\TeamSpeak3-Client-win32-3.0.16.exe

2014-08-08 20:50 - 2014-08-08 20:49 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Marcel\Downloads\TeamSpeak3-Client-win32-3.0.16 (1).exe

2014-08-08 20:09 - 2014-06-05 21:37 - 00000000 ____D () C:\ProgramData\Skype

2014-08-07 21:23 - 2014-06-15 20:23 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-07 20:55 - 2014-06-05 21:37 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-08-07 09:40 - 2014-06-05 21:03 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-08-07 04:12 - 2014-08-14 09:05 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-07 00:39 - 2014-08-14 09:05 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-06 11:27 - 2014-08-06 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-08-06 11:27 - 2014-06-05 21:33 - 00000000 ____D () C:\Program Files (x86)\Origin Games

2014-08-03 16:49 - 2014-08-03 16:47 - 00000000 ____D () C:\Users\Marcel\Documents\Battlefield 4 CTE

2014-08-03 16:49 - 2014-06-28 15:50 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

2014-08-02 05:56 - 2014-08-14 09:05 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-02 05:11 - 2014-08-14 09:05 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-08-02 02:17 - 2013-08-22 17:38 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-02 02:17 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-25 16:52 - 2014-08-14 09:09 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-25 15:51 - 2014-08-14 09:09 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-25 15:28 - 2014-08-14 09:09 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-25 15:25 - 2014-08-14 09:09 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-25 15:25 - 2014-08-14 09:09 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-25 14:59 - 2014-08-14 09:09 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-25 14:40 - 2014-08-14 09:09 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-25 14:34 - 2014-08-14 09:09 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-25 14:30 - 2014-08-14 09:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-25 14:28 - 2014-08-14 09:09 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-25 14:28 - 2014-08-14 09:09 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-25 14:21 - 2014-08-14 09:09 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-25 14:17 - 2014-08-14 09:09 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-25 14:10 - 2014-08-14 09:09 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-25 14:08 - 2014-08-14 09:09 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-25 14:06 - 2014-08-14 09:09 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-25 13:52 - 2014-08-14 09:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-25 13:47 - 2014-08-14 09:09 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-25 13:43 - 2014-08-14 09:09 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-25 13:43 - 2014-08-14 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-25 13:42 - 2014-08-14 09:09 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-25 13:39 - 2014-08-14 09:09 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-25 13:34 - 2014-08-14 09:09 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-25 13:29 - 2014-08-14 09:09 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-25 13:23 - 2014-08-14 09:09 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-25 13:13 - 2014-08-14 09:09 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-25 13:09 - 2014-08-14 09:09 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-25 13:07 - 2014-08-14 09:09 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-25 13:03 - 2014-08-14 09:09 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-25 12:52 - 2014-08-14 09:09 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-25 12:26 - 2014-08-14 09:09 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-25 12:17 - 2014-08-14 09:09 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-25 12:09 - 2014-08-14 09:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-25 12:05 - 2014-08-14 09:09 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-25 12:00 - 2014-08-14 09:09 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-23 15:58 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-07-23 15:56 - 2014-07-23 15:56 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr

2014-07-23 15:56 - 2014-06-06 18:44 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2014-07-23 15:56 - 2014-06-06 18:44 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys

2014-07-23 15:56 - 2014-06-06 18:44 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys

2014-07-23 15:51 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\tracing

2014-07-20 17:00 - 2014-06-08 17:34 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
 

Some content of TEMP:

====================

C:\Users\Marcel\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-08-19 12:10
 

==================== End Of Log ============================

--- --- ---

--- --- ---