Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Verdächtige Ordner (https://www.trojaner-board.de/141732-verdaechtige-ordner.html)

Jalian 17.09.2013 19:53
Verdächtige Ordner
 
Hallo liebes Trojaner-Board,
Ich habe auf meinem Desktop drei Ordner,in dem eigentlich nur Musik gewesen ist,doch als ich versucht hatte sie in einen anderen Ordner zu verschieben stand da nur:
Zitat:
Ordner wird verwendet
Die aktion kann nicht abgeschlossen werden,da der Ordner (oder eine Datei darin) in einem anderen Programm geöffnet ist.

Schliessen Sie den Ordner und wiederhohlen sie den Vorgang.
Ich dachte mir nicht dabei, villeicht ist ja noch ein Lied daraus im MediaPlayer geöffnet,doch auch nachdem ich diesen geschlossen hatte,und den PC neugestartet hatte,hatte ich immernoch das selbe Problem. :confused:
Immernoch umwissend erstellte ich einfach eine exacte Kopie des Ordners, der sich Problemlos verschieben liess.

Danach wollte ich den Originalordner löschen, doch dann wurde es dubios.
Zuerst kam die Standartwarnung, ob ich diesen Ordner in den Papierkorb Verschieben möchte, nachdem ich ok gedrückt hatte, hiess:
Zitat:
Ordnerzugriff verweigert

Sie müssen administratorberechtigungen angeben, um diesen Ordner zu löschen
Gesagt, getan. Also als Administrator vortsetzen. Doch dann kam nur die nächste Warnung:
Zitat:
Ordnerzugriff verweigert

Sie benötigen Berechtigungen zur Durchführung des Vorgangs.
Sie müssen die erforderliche berechtigung von "Julian-PC/Julian erhalten (Julian,das bin ich,bin auch so angemeldet), um Änderungen an diesem Ordner durführen zu können
Dann steht da nur wiederholen drücken, und das darf ich bis zu St.Nimmerleinstag wiederhohlt klicken und nichts geschieht.
Zum Test hatte ich den Clon-Ordner gelöscht,das ging gleich reibungslos.

Danach habe ich aus Verzweiflung alle Lied-Dateien im Ordner gelöscht,sonst war nicht zu sehen. Ich dachte villeicht liegt es an einem der einzelnen Dateien, doch nichts passierte, alle liessen sich Problemloss löschen. Der Ordner war augenscheinlich Leergefegt, doch bei Eigenschaften hiess es dass die Größe immernoch 285 Bytes und Größe auf Datenträger immernoch 4096 Bytes seien, und der inhalt 1 Datei und 2 Ordner, obwohl er Komplett leer war. Die Attribute des ordners seien Schreibgeschützt, in Klammern steht betrifft nur Dateien im Ordner. Das gleiche Problem habe ich bei den anderen 2 Ordnern. :killpc:

Ich weiss nicht was ich da tun soll, ich habe keinen verdacht was da los sein kann,meine grösste Angst ist dass da was grösseres dahinter steckt.

Mit absolut jeder Hilfe ist mir geholfen,
schonmal Danke im voraus. :dankeschoen:

schrauber 17.09.2013 19:58
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Jalian 17.09.2013 20:59
Ok,ich habe den Scan durchgeführt
Hier ist die FRST.txt


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013 03
Ran by Julian (administrator) on JULIAN-PC on 17-09-2013 21:54:49
Running from C:\Users\Julian\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(IObit) C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WlanNetService.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(IObit) C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\system32\PnkBstrA.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WLanGUI.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\lcdmon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Razer Inc.) C:\Program Files\Razer\Synapse\RzSynapse.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\Steam\Steam\Steam.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AVMWlanClient] - C:\Program Files\avmwlanstick\wlangui.exe [1904640 2009-05-07] (AVM Berlin)
HKLM\...\Run: [amd_dc_opt] - C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM\...\Run: [VirtualCloneDrive] - C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [358472 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [1809992 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [3649096 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [332288 2010-12-17] ()
HKLM\...\Run: [IObit Malware Fighter] - C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [1514816 2013-06-07] (IObit)
HKLM\...\Run: [Razer Synapse] - C:\Program Files\Razer\Synapse\RzSynapse.exe [610152 2013-06-21] (Razer Inc.)
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Run: [Advanced SystemCare 6] - C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit)
HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-07-12] (SteelSeries ApS)
HKCU\...\Policies\Explorer: [NoDrives] 0
Startup: C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com?type=800236&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB52DD112165DCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://go.microsoft.com/fwlink/?LinkId=69157
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {CE901047-0715-429F-9716-6DBB6B034A37} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
SearchScopes: HKCU - {CE901047-0715-429F-9716-6DBB6B034A37} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~1\IObit\ADVANC~1\BROWER~1\ASCPLU~1.DLL (IObit)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} hxxp://www.logitech.com/devicedetector/plugins/LogitechDeviceDetection32.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default
FF user.js: detected! => C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\user.js
FF Homepage: user_pref("browser.startup.homepage", );
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: Yahoo
FF Keyword.URL: hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=800236&ilc=12&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.3 - C:\Program Files\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.7 - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Julian\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Julian\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: Battlefield Play4Free - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\battlefieldplay4free@ea.com
FF Extension: No Name - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
FF Extension: adblockpopups - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: ftdownloader3 - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\ftdownloader3@ftdownloader.com.xpi
FF Extension: mp4downloader - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\mp4downloader@jeff.net.xpi
FF Extension: OneClickDownloader - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\OneClickDownloader@OneClickDownloader.com.xpi
FF Extension: ytd - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\ytd@mybrowserbar.com
FF Extension: No Name - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\{d8b271a6-6ed3-427d-b600-1b674e00e6ec}.xpi
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

Chrome:
=======
CHR HomePage: hxxp://de.search.yahoo.com?type=800236&fr=spigot-yhp-ch
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Uplay PC) - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Nexon Game Controller) - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
CHR Plugin: (Google Update) - C:\Users\Julian\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.70.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Adblock Plus) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.5_0
CHR Extension: (Speed Dial) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgpdioedihjhncjafcpgbbjdpbbkikmi\2.5.3_0
CHR Extension: (Color Changer for Facebook) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\dheljpcbhldkdiabdemaflamgfnbpnkd\19.0_0
CHR Extension: (AdBlock) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.7_0
CHR Extension: (Color Changer for Facebook) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnafahpcndghkcdngfombklgpffkehmg\2.0.0.3_0
CHR Extension: (Ebay Shopping Assistant by Spigot) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj\1.0_0
CHR Extension: (Auto Replay for YouTube) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb\1.9.28_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Lucky \u2606 Star: Konata (Aero)) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocdgcggbmlchagbfcbagafpkcahjfcei\1.2_0
CHR HKLM\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files\Common Files\Spigot\GC\saebay_1.0.crx
CHR HKLM\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files\Common Files\Spigot\GC\coupons_2.4.crx
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files\Common Files\Spigot\GC\saamazon_1.0.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 AdvancedSystemCareService6; C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2012-12-19] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [368640 2009-05-07] (AVM Berlin)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [641832 2011-09-23] (Nero AG)
S3 npggsvc; C:\Windows\system32\GameMon.des [3953632 2012-03-05] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-09-06] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [1514304 2011-12-14] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48256 2012-04-09] (Advanced Micro Devices)
S2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48256 2012-04-09] (Advanced Micro Devices)
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [16640 2010-12-30] (Wondershare)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-12-07] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-30] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2009-05-07] (AVM Berlin)
R3 busenum; C:\Windows\System32\DRIVERS\SteelBus.sys [113920 2013-06-25] (SteelSeries Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
R3 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-07-07] (REALiX(tm))
R3 LGBusEnum; C:\Windows\System32\drivers\LGBusEnum.sys [19720 2009-11-23] (Logitech Inc.)
R3 LGVirHid; C:\Windows\System32\drivers\LGVirHid.sys [14856 2009-11-23] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-12-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [31752 2013-03-26] (IObit.com)
S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [33016 2013-05-17] (Windows (R) Win 7 DDK provider)
R3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham.sys [34304 2013-06-25] (SteelSeries Corporation)
S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [15672 2010-11-26] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [10064 2011-12-12] (TuneUp Software)
R3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-03-26] (IObit.com)
S3 WinRing0_1_2_0; C:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys [14416 2012-11-13] (OpenLibSys.org)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 EagleXNt; No ImagePath
S3 esgiguard; No ImagePath
S3 XDva397; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-17 21:54 - 2013-09-17 21:52 - 01083437 _____ (Farbar) C:\Users\Julian\Desktop\FRST.exe
2013-09-17 21:52 - 2013-09-17 21:52 - 00000000 ____D C:\FRST
2013-09-17 21:51 - 2013-09-17 21:52 - 01083437 _____ (Farbar) C:\Users\Julian\Downloads\FRST.exe
2013-09-17 21:34 - 2013-09-17 21:34 - 98062984 _____ C:\Windows\system32\찂獢x
2013-09-16 20:59 - 2013-09-16 20:59 - 00175560 _____ C:\Users\Julian\Documents\ts3_clientui-win32-1378715177-2013-09-16 20_59_22.071129.dmp
2013-09-16 13:48 - 2013-09-16 13:49 - 00175560 _____ C:\Users\Julian\Documents\ts3_clientui-win32-1378715177-2013-09-16 13_48_55.396928.dmp
2013-09-14 17:20 - 2013-09-14 17:30 - 00000000 ____D C:\Users\Julian\Desktop\VA - Club Sounds Vol.65 (2013) [320].part1
2013-09-14 17:19 - 2013-09-14 17:19 - 00000000 ____D C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320]
2013-09-14 15:59 - 2013-09-14 17:18 - 188743680 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part1.rar
2013-09-14 14:24 - 2013-09-14 15:28 - 188743680 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part2.rar
2013-09-14 11:37 - 2013-09-14 11:37 - 03101500 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(240p_H.264-AAC).3gp
2013-09-14 11:37 - 2013-09-14 11:37 - 00364797 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(240p_H.264-AAC).3gp
2013-09-14 11:36 - 2013-09-14 11:37 - 03012259 _____ C:\Users\Julian\Downloads\EA in a Nutshell(240p_H.264-AAC).3gp
2013-09-14 11:33 - 2013-09-14 11:33 - 00227940 _____ C:\Users\Julian\Downloads\The Price is Right losing horn(360p_H.264-AAC).flv
2013-09-14 11:33 - 2013-09-14 11:33 - 00083884 _____ C:\Users\Julian\Downloads\The Price is Right losing horn(240p_H.263-MP3).flv
2013-09-14 11:32 - 2013-09-14 11:33 - 03733430 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(480p_H.264-AAC).flv
2013-09-14 11:31 - 2013-09-14 11:35 - 39099988 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(480p_H.264-AAC).flv
2013-09-14 11:31 - 2013-09-14 11:32 - 02868286 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(360p_H.264-AAC).flv
2013-09-14 11:31 - 2013-09-14 11:31 - 01280340 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(240p_H.263-MP3).flv
2013-09-14 11:29 - 2013-09-14 11:34 - 28110494 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(360p_H.264-AAC).flv
2013-09-14 11:29 - 2013-09-14 11:31 - 12161515 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(240p_H.263-MP3).flv
2013-09-14 11:28 - 2013-09-14 11:31 - 21923324 _____ C:\Users\Julian\Downloads\EA in a Nutshell(480p_H.264-AAC).flv
2013-09-14 11:27 - 2013-09-14 11:29 - 17450391 _____ C:\Users\Julian\Downloads\EA in a Nutshell(360p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 11:29 - 21274511 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(360p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 11:28 - 11681915 _____ C:\Users\Julian\Downloads\EA in a Nutshell(240p_H.263-MP3).flv
2013-09-14 11:26 - 2013-09-14 11:27 - 03254378 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(360p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 11:26 - 02256696 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(240p_H.263-MP3).flv
2013-09-14 11:25 - 2013-09-14 11:26 - 09015976 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(240p_H.263-MP3).flv
2013-09-14 10:29 - 2013-09-14 11:22 - 164296988 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part3.rar
2013-09-14 10:28 - 2013-09-14 11:37 - 02461931 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(240p_H.264-AAC).3gp
2013-09-14 10:28 - 2013-09-14 11:36 - 02262305 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(240p_H.264-AAC).3gp
2013-09-14 10:28 - 2013-09-14 11:36 - 00320838 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(240p_H.264-AAC).3gp
2013-09-14 10:27 - 2013-09-14 11:26 - 20717179 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(480p_H.264-AAC).flv
2013-09-14 10:27 - 2013-09-14 11:26 - 16345758 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_H.264-AAC).flv
2013-09-14 10:27 - 2013-09-14 11:25 - 09331102 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(240p_H.263-MP3).flv
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(720p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(1080p_H.264-AAC).mp4.part
2013-09-14 10:26 - 2013-09-14 10:27 - 29005824 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(720p_VP8-Vorbis).webm.part
2013-09-14 10:26 - 2013-09-14 10:27 - 14006980 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(360p_VP8-Vorbis).webm.part
2013-09-14 10:26 - 2013-09-14 10:27 - 10787572 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_VP8-Vorbis).webm.part
2013-09-13 18:07 - 2013-09-13 18:07 - 00000000 ____D C:\Users\Julian\Downloads\66cs_320kbps
2013-09-13 15:51 - 2013-09-13 16:55 - 164115999 _____ C:\Users\Julian\Downloads\66cs_320kbps.part3.rar
2013-09-12 20:20 - 2013-09-12 21:53 - 183500800 _____ C:\Users\Julian\Downloads\66cs_320kbps.part2.rar
2013-09-12 19:23 - 2013-09-13 18:07 - 183500800 _____ C:\Users\Julian\Downloads\66cs_320kbps.part1.rar
2013-09-12 19:06 - 2013-09-12 19:06 - 00000000 ____D C:\Users\Julian\Downloads\Marteria aka Marsimoto.007
2013-09-12 18:04 - 2013-09-12 19:06 - 209715200 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part2.rar
2013-09-12 16:33 - 2013-09-12 16:58 - 86833768 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part3.rar
2013-09-12 16:06 - 2013-09-12 18:00 - 209715200 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part1.rar
2013-09-11 20:10 - 2013-09-11 20:58 - 01852752 _____ C:\Users\Julian\Downloads\130120130227.rar
2013-09-11 20:00 - 2013-09-11 20:47 - 138741598 _____ C:\Users\Julian\Downloads\MH2006.rar
2013-09-11 19:53 - 2013-09-11 19:54 - 10306736 _____ C:\Users\Julian\Downloads\Marteria-Sekundenschlaf-CDS-DE-2011-VOiCE.rar
2013-09-11 19:47 - 2013-09-11 19:47 - 00000000 ____D C:\Users\Julian\Downloads\martaishah.01
2013-09-11 19:32 - 2013-09-11 19:47 - 47712454 _____ C:\Users\Julian\Downloads\martaishah.01.rar
2013-09-11 19:21 - 2013-09-11 19:54 - 100000021 _____ C:\Users\Julian\Downloads\00000100.part1.rar
2013-09-11 18:44 - 2013-09-11 18:46 - 25165824 _____ C:\Users\Julian\Downloads\MBV07.part1.rar
2013-09-11 16:23 - 2013-09-11 16:23 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf
2013-09-07 08:13 - 2013-09-07 14:13 - 96511910 _____ C:\Windows\system32\ᘻ㠌[
2013-09-06 14:57 - 2013-09-06 14:57 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashRpt
2013-09-06 14:55 - 2013-09-06 14:55 - 00000000 ____D C:\Program Files\Microsoft Chart Controls
2013-09-05 20:37 - 2013-09-05 20:41 - 00001040 _____ C:\Users\Julian\Desktop\Diablo II LoD Serialz.txt
2013-08-28 15:57 - 2013-08-28 15:58 - 00000000 ____D C:\Users\Julian\AppData\Local\PAYDAY 2
2013-08-28 15:57 - 2013-08-28 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-08-25 18:33 - 2013-08-25 18:33 - 00090742 _____ C:\Users\Julian\Desktop\post-13565-Y-BAT-Y-U-DO-DIS-H1MK.jpeg
2013-08-24 11:31 - 2013-08-24 11:31 - 00675988 _____ C:\Users\Julian\Downloads\Minecraft (2).exe
2013-08-22 20:21 - 2013-08-22 20:21 - 00886409 _____ C:\Users\Julian\Downloads\pbsetup (1).zip
2013-08-22 19:52 - 2013-08-22 19:52 - 03820480 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.1.7_115.exe
2013-08-22 18:50 - 2013-08-22 19:35 - 137912227 _____ C:\Users\Julian\Downloads\PayDay 2 Original Soundtrack.rar
2013-08-19 15:28 - 2013-08-19 15:28 - 00000403 _____ C:\Users\Julian\Desktop\www.facebook.com.url

==================== One Month Modified Files and Folders =======

2013-09-17 21:52 - 2013-09-17 21:54 - 01083437 _____ (Farbar) C:\Users\Julian\Desktop\FRST.exe
2013-09-17 21:52 - 2013-09-17 21:52 - 00000000 ____D C:\FRST
2013-09-17 21:52 - 2013-09-17 21:51 - 01083437 _____ (Farbar) C:\Users\Julian\Downloads\FRST.exe
2013-09-17 21:49 - 2011-09-02 16:40 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TS3Client
2013-09-17 21:34 - 2013-09-17 21:34 - 98062984 _____ C:\Windows\system32\찂獢x
2013-09-17 21:33 - 2012-06-29 16:46 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000UA.job
2013-09-17 21:27 - 2013-02-13 21:16 - 00000364 _____ C:\Windows\Tasks\WpsUpdateTask_Julian.job
2013-09-17 21:19 - 2012-04-03 10:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-17 21:07 - 2013-08-09 00:26 - 00010044 _____ C:\Windows\setupact.log
2013-09-17 20:56 - 2011-06-26 15:46 - 01641292 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-17 15:58 - 2011-06-26 15:27 - 01162273 _____ C:\Windows\WindowsUpdate.log
2013-09-17 15:40 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-17 15:40 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-17 15:35 - 2011-10-22 21:17 - 00000000 ____D C:\Users\Julian\Desktop\Musik
2013-09-17 15:32 - 2013-08-09 12:02 - 00015022 _____ C:\Windows\PFRO.log
2013-09-17 15:32 - 2012-04-10 16:13 - 00000000 ____D C:\Users\Julian\AppData\Local\LogMeIn Hamachi
2013-09-17 15:32 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-16 20:59 - 2013-09-16 20:59 - 00175560 _____ C:\Users\Julian\Documents\ts3_clientui-win32-1378715177-2013-09-16 20_59_22.071129.dmp
2013-09-16 14:33 - 2012-06-29 16:46 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000Core.job
2013-09-16 13:49 - 2013-09-16 13:48 - 00175560 _____ C:\Users\Julian\Documents\ts3_clientui-win32-1378715177-2013-09-16 13_48_55.396928.dmp
2013-09-15 21:59 - 2012-12-20 15:17 - 04857344 ___SH C:\Users\Julian\Desktop\Thumbs.db
2013-09-15 21:43 - 2011-08-12 21:22 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Skype
2013-09-14 17:31 - 2012-08-31 17:32 - 00000000 ____D C:\Program Files\JDownloader 2
2013-09-14 17:30 - 2013-09-14 17:20 - 00000000 ____D C:\Users\Julian\Desktop\VA - Club Sounds Vol.65 (2013) [320].part1
2013-09-14 17:19 - 2013-09-14 17:19 - 00000000 ____D C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320]
2013-09-14 17:18 - 2013-09-14 15:59 - 188743680 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part1.rar
2013-09-14 15:37 - 2011-08-31 14:20 - 00280792 _____ C:\Windows\system32\PnkBstrB.xtr
2013-09-14 15:37 - 2011-08-31 14:09 - 00280792 _____ C:\Windows\system32\PnkBstrB.exe
2013-09-14 15:37 - 2011-08-31 14:09 - 00139112 _____ C:\Windows\system32\Drivers\PnkBstrK.sys
2013-09-14 15:36 - 2011-08-31 14:09 - 00280856 _____ C:\Windows\system32\PnkBstrB.ex0
2013-09-14 15:28 - 2013-09-14 14:24 - 188743680 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part2.rar
2013-09-14 12:52 - 2012-04-03 13:38 - 00000000 ____D C:\Users\Julian\Desktop\Internetz
2013-09-14 11:37 - 2013-09-14 11:37 - 03101500 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(240p_H.264-AAC).3gp
2013-09-14 11:37 - 2013-09-14 11:37 - 00364797 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(240p_H.264-AAC).3gp
2013-09-14 11:37 - 2013-09-14 11:36 - 03012259 _____ C:\Users\Julian\Downloads\EA in a Nutshell(240p_H.264-AAC).3gp
2013-09-14 11:37 - 2013-09-14 10:28 - 02461931 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(240p_H.264-AAC).3gp
2013-09-14 11:36 - 2013-09-14 10:28 - 02262305 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(240p_H.264-AAC).3gp
2013-09-14 11:36 - 2013-09-14 10:28 - 00320838 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(240p_H.264-AAC).3gp
2013-09-14 11:35 - 2013-09-14 11:31 - 39099988 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(480p_H.264-AAC).flv
2013-09-14 11:34 - 2013-09-14 11:29 - 28110494 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(360p_H.264-AAC).flv
2013-09-14 11:33 - 2013-09-14 11:33 - 00227940 _____ C:\Users\Julian\Downloads\The Price is Right losing horn(360p_H.264-AAC).flv
2013-09-14 11:33 - 2013-09-14 11:33 - 00083884 _____ C:\Users\Julian\Downloads\The Price is Right losing horn(240p_H.263-MP3).flv
2013-09-14 11:33 - 2013-09-14 11:32 - 03733430 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(480p_H.264-AAC).flv
2013-09-14 11:32 - 2013-09-14 11:31 - 02868286 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(360p_H.264-AAC).flv
2013-09-14 11:31 - 2013-09-14 11:31 - 01280340 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(240p_H.263-MP3).flv
2013-09-14 11:31 - 2013-09-14 11:29 - 12161515 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(240p_H.263-MP3).flv
2013-09-14 11:31 - 2013-09-14 11:28 - 21923324 _____ C:\Users\Julian\Downloads\EA in a Nutshell(480p_H.264-AAC).flv
2013-09-14 11:29 - 2013-09-14 11:27 - 17450391 _____ C:\Users\Julian\Downloads\EA in a Nutshell(360p_H.264-AAC).flv
2013-09-14 11:29 - 2013-09-14 11:26 - 21274511 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(360p_H.264-AAC).flv
2013-09-14 11:28 - 2013-09-14 11:26 - 11681915 _____ C:\Users\Julian\Downloads\EA in a Nutshell(240p_H.263-MP3).flv
2013-09-14 11:27 - 2013-09-14 11:26 - 03254378 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(360p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 11:26 - 02256696 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(240p_H.263-MP3).flv
2013-09-14 11:26 - 2013-09-14 11:25 - 09015976 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(240p_H.263-MP3).flv
2013-09-14 11:26 - 2013-09-14 10:27 - 20717179 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(480p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 10:27 - 16345758 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_H.264-AAC).flv
2013-09-14 11:25 - 2013-09-14 10:27 - 09331102 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(240p_H.263-MP3).flv
2013-09-14 11:22 - 2013-09-14 10:29 - 164296988 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part3.rar
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(720p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(1080p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:26 - 29005824 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(720p_VP8-Vorbis).webm.part
2013-09-14 10:27 - 2013-09-14 10:26 - 14006980 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(360p_VP8-Vorbis).webm.part
2013-09-14 10:27 - 2013-09-14 10:26 - 10787572 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_VP8-Vorbis).webm.part
2013-09-13 20:19 - 2012-04-03 10:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-13 20:19 - 2011-06-26 16:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-13 18:07 - 2013-09-13 18:07 - 00000000 ____D C:\Users\Julian\Downloads\66cs_320kbps
2013-09-13 18:07 - 2013-09-12 19:23 - 183500800 _____ C:\Users\Julian\Downloads\66cs_320kbps.part1.rar
2013-09-13 16:55 - 2013-09-13 15:51 - 164115999 _____ C:\Users\Julian\Downloads\66cs_320kbps.part3.rar
2013-09-12 21:53 - 2013-09-12 20:20 - 183500800 _____ C:\Users\Julian\Downloads\66cs_320kbps.part2.rar
2013-09-12 19:06 - 2013-09-12 19:06 - 00000000 ____D C:\Users\Julian\Downloads\Marteria aka Marsimoto.007
2013-09-12 19:06 - 2013-09-12 18:04 - 209715200 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part2.rar
2013-09-12 18:00 - 2013-09-12 16:06 - 209715200 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part1.rar
2013-09-12 16:58 - 2013-09-12 16:33 - 86833768 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part3.rar
2013-09-11 20:58 - 2013-09-11 20:10 - 01852752 _____ C:\Users\Julian\Downloads\130120130227.rar
2013-09-11 20:47 - 2013-09-11 20:00 - 138741598 _____ C:\Users\Julian\Downloads\MH2006.rar
2013-09-11 19:54 - 2013-09-11 19:53 - 10306736 _____ C:\Users\Julian\Downloads\Marteria-Sekundenschlaf-CDS-DE-2011-VOiCE.rar
2013-09-11 19:54 - 2013-09-11 19:21 - 100000021 _____ C:\Users\Julian\Downloads\00000100.part1.rar
2013-09-11 19:47 - 2013-09-11 19:47 - 00000000 ____D C:\Users\Julian\Downloads\martaishah.01
2013-09-11 19:47 - 2013-09-11 19:32 - 47712454 _____ C:\Users\Julian\Downloads\martaishah.01.rar
2013-09-11 18:46 - 2013-09-11 18:44 - 25165824 _____ C:\Users\Julian\Downloads\MBV07.part1.rar
2013-09-11 16:23 - 2013-09-11 16:23 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf
2013-09-11 16:15 - 2012-09-15 22:35 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-09-10 17:38 - 2011-06-26 16:06 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-09-08 11:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-09-07 17:06 - 2011-12-28 20:02 - 00000000 ____D C:\Users\Julian\AppData\Roaming\.minecraft
2013-09-07 14:13 - 2013-09-07 08:13 - 96511910 _____ C:\Windows\system32\ᘻ㠌[
2013-09-06 16:19 - 2011-08-31 14:09 - 00076888 _____ C:\Windows\system32\PnkBstrA.exe
2013-09-06 16:18 - 2011-08-31 14:19 - 00000000 ____D C:\Users\Julian\AppData\Local\PunkBuster
2013-09-06 14:57 - 2013-09-06 14:57 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashRpt
2013-09-06 14:56 - 2011-09-08 19:10 - 00000000 ____D C:\Users\Julian\Documents\My Games
2013-09-06 14:55 - 2013-09-06 14:55 - 00000000 ____D C:\Program Files\Microsoft Chart Controls
2013-09-06 14:55 - 2011-08-31 14:09 - 00138056 _____ C:\Users\Julian\AppData\Roaming\PnkBstrK.sys
2013-09-05 20:41 - 2013-09-05 20:37 - 00001040 _____ C:\Users\Julian\Desktop\Diablo II LoD Serialz.txt
2013-09-05 15:37 - 2013-05-07 14:35 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-05 15:37 - 2012-10-18 17:21 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-05 15:37 - 2012-10-18 17:21 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-29 14:42 - 2009-07-14 06:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-28 15:58 - 2013-08-28 15:57 - 00000000 ____D C:\Users\Julian\AppData\Local\PAYDAY 2
2013-08-28 15:57 - 2013-08-28 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-08-28 15:57 - 2011-12-22 23:29 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-08-25 18:33 - 2013-08-25 18:33 - 00090742 _____ C:\Users\Julian\Desktop\post-13565-Y-BAT-Y-U-DO-DIS-H1MK.jpeg
2013-08-24 11:31 - 2013-08-24 11:31 - 00675988 _____ C:\Users\Julian\Downloads\Minecraft (2).exe
2013-08-22 20:21 - 2013-08-22 20:21 - 00886409 _____ C:\Users\Julian\Downloads\pbsetup (1).zip
2013-08-22 19:55 - 2011-09-30 23:14 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Origin
2013-08-22 19:55 - 2011-09-30 23:14 - 00000000 ____D C:\Users\Julian\AppData\Local\Origin
2013-08-22 19:55 - 2011-09-30 23:14 - 00000000 ____D C:\ProgramData\Origin
2013-08-22 19:54 - 2011-09-30 23:14 - 00000000 ____D C:\Program Files\Origin
2013-08-22 19:53 - 2011-10-01 09:15 - 00000000 ____D C:\Program Files\Battlelog Web Plugins
2013-08-22 19:52 - 2013-08-22 19:52 - 03820480 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.1.7_115.exe
2013-08-22 19:35 - 2013-08-22 18:50 - 137912227 _____ C:\Users\Julian\Downloads\PayDay 2 Original Soundtrack.rar
2013-08-19 15:28 - 2013-08-19 15:28 - 00000403 _____ C:\Users\Julian\Desktop\www.facebook.com.url
2013-08-18 15:04 - 2011-10-12 16:11 - 00000000 ____D C:\Users\Julian\Documents\TrackMania
2013-08-18 14:54 - 2011-10-12 16:11 - 00000000 ____D C:\ProgramData\TrackMania
2013-08-18 14:52 - 2011-10-21 21:03 - 00000000 ____D C:\Users\Julian\AppData\Roaming\vlc
2013-08-18 14:43 - 2011-10-03 22:05 - 00000000 ____D C:\Users\Julian\Desktop\Anime

Files to move or delete:
====================
C:\ProgramData\hash.dat


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-04 19:49

==================== End Of Log ============================
--- --- ---


Hier die Addition

Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-09-2013 03
Ran by Julian at 2013-09-17 21:55:54
Running from C:\Users\Julian\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Adobe Flash Player 11 ActiveX (Version: 11.8.800.174)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
Adobe Reader X (10.1.4) - Deutsch (Version: 10.1.4)
Advanced SystemCare 6 (Version: 6.3)
ALLBenchmark 1.0 RC5 (Version: 1.0 RC5)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.903.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2012.1219.1521.27485)
AMD Media Foundation Decoders (Version: 1.0.71219.1540)
AMD Steady Video Plug-In  (Version: 2.04.0000)
AMD VISION Engine Control Center (Version: 2012.1219.1521.27485)
Ashampoo Burning Studio 2013 v.11.0.5 (Version: 11.0.5)
Ashampoo Burning Studio 6 FREE v.6.80 (Version: 6.8.0)
Assassin's Creed II (Version: 1.01)
Avira Free Antivirus (Version: 13.0.0.4052)
AVM FRITZ!WLAN
Bandisoft MPEG-1 Decoder
Battlefield 3™ (Version: 1.4.0.0)
Battlelog Web Plugins (Version: 2.1.7)
Black & White® 2 (Version: 1.00.0000)
Black Shades (remove only)
Borderlands (Version: 1.0.295)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (Version: 2012.1219.1520.27485)
CCC Help Czech (Version: 2012.1219.1520.27485)
CCC Help Danish (Version: 2012.1219.1520.27485)
CCC Help Dutch (Version: 2012.1219.1520.27485)
CCC Help English (Version: 2012.1219.1520.27485)
CCC Help Finnish (Version: 2012.1219.1520.27485)
CCC Help French (Version: 2012.1219.1520.27485)
CCC Help German (Version: 2012.1219.1520.27485)
CCC Help Greek (Version: 2012.1219.1520.27485)
CCC Help Hungarian (Version: 2012.1219.1520.27485)
CCC Help Italian (Version: 2012.1219.1520.27485)
CCC Help Japanese (Version: 2012.1219.1520.27485)
CCC Help Korean (Version: 2012.1219.1520.27485)
CCC Help Norwegian (Version: 2012.1219.1520.27485)
CCC Help Polish (Version: 2012.1219.1520.27485)
CCC Help Portuguese (Version: 2012.1219.1520.27485)
CCC Help Russian (Version: 2012.1219.1520.27485)
CCC Help Spanish (Version: 2012.1219.1520.27485)
CCC Help Swedish (Version: 2012.1219.1520.27485)
CCC Help Thai (Version: 2012.1219.1520.27485)
CCC Help Turkish (Version: 2012.1219.1520.27485)
ccc-utility (Version: 2012.1219.1521.27485)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Color Efex Pro 3.0 Standard (Version: 3.1.0.9)
Common Desktop Agent (Version: 1.53.0)
Crysis(R) (Version: 1.00.0000)
D3DX10 (Version: 15.4.2368.0902)
Deus Ex: Human Revolution
Diablo II
DivX-Setup (Version: 2.6.1.5)
Dual-Core Optimizer (Version: 1.1.4.0169)
ESN Sonar (Version: 0.70.4)
Fallout 3 - Game of the Year Edition
GameSpy Comrade (Version: 1.5.0.156)
Garry's Mod
Google Chrome (HKCU Version: 29.0.1547.66)
Google Earth (Version: 6.2.1.6014)
HammerHead Rhythm Station
Hitman: Absolution
HWiNFO32 Version 4.20 (Version: 4.20)
IObit Malware Fighter (Version: 2.0)
IPS Wizard
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 31 (Version: 6.0.310)
JavaFX 2.1.1 (Version: 2.1.1)
JDownloader 2 (Version: 2)
Junk Mail filter update (Version: 15.4.3502.0922)
Just Cause 2
Killing Floor
Kingsoft Office 2012 (8.1.0.3375) (Version: 8.1.0.3375)
Logitech GamePanel Software 3.06.109 (Version: 3.06.109)
LogMeIn Hamachi (Version: 2.1.0.374)
MAGIX Screenshare (Version: 4.3.6.1987)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Mass Effect 2
Mesh Runtime (Version: 15.4.5722.2)
Messenger Companion (Version: 15.4.3502.0922)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (Version: 3.5.0.0)
Microsoft Games for Windows - LIVE Redistributable (Version: 2.0.672.0)
Microsoft Silverlight (Version: 4.1.10329.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works 6-9 Converter (Version: 9.7.0000)
Microsoft XNA Framework Redistributable 3.1 (Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 (Version: 4.0.20823.0)
Monaco
Mozilla Maintenance Service (Version: 17.0.6)
Mozilla Thunderbird 17.0.6 (x86 de) (Version: 17.0.6)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Need for Speed™ Most Wanted
Nero Burning ROM 11 (Version: 11.0.10400)
Nero Burning ROM 11 (Version: 11.0.12200.23.100)
Nero Burning ROM 11 Help (CHM) (Version: 11.0.10300)
Nero ControlCenter 11 (Version: 11.0.12300.0.23)
Nero ControlCenter 11 Help (CHM) (Version: 11.0.10300)
Nero Core Components 11 (Version: 11.0.14700.1.9)
Nero RescueAgent 11 (Version: 4.0.10600.10.100)
Nero RescueAgent 11 Help (CHM) (Version: 11.0.10400)
Nero Update (Version: 11.0.10623.22.0)
nero.prerequisites.msi (Version: 11.0.20007)
Nexon Game Manager
Nexus Mod Manager (Version: 0.13.1)
NVIDIA PhysX (Version: 9.12.1031)
Oblivion (Version: 1.2.0416)
OpenAL
OpenOffice.org 3.4.1 (Version: 3.41.9593)
Origin (Version: 8.5.0.4550)
osu! (Version: 0.0.0.0)
PAYDAY 2
PlanetSide 2
Poker Night 2
POSTAL 2 Complete
Postal 2 Demo
Project64 1.6 (Version: 1.6)
PunkBuster Services (Version: 0.992)
QuickTime (Version: 7.72.80.56)
Razer Game Booster (Version: 3.5.6.0)
Razer Synapse 2.0 (Version: 1.11.3)
Realtek Ethernet Controller Driver (Version: 7.41.216.2011)
REALTEK Wireless LAN Driver (Version: 1.00.0129)
Rising Storm/Red Orchestra 2 Multiplayer
Saints Row: The Third
Samsung Easy Printer Manager (Version: 1.02.06.07)
Samsung ML-2160 Series (Version: 1.07 (08.05.2012))
Samsung Printer Live Update (Version: 1.01.00.04)
Screen Recording Suite V2.4.8 (Version: 2.4.8)
ScummVM 1.5.0
Skype Audio Player (remove only)
Skype™ 6.6 (Version: 6.6.106)
Smart Defrag 2 (Version: 2.7)
Steam (Version: 1.0.0.0)
SteelSeries Engine (Version: 2.8.59.30483)
Synthesia (remove only)
Tag - IGF Professional 2008
TeamSpeak 3 Client (Version: 3.0.12)
Text-To-Speech-Runtime (Version: 1.0.0.0)
TmUnitedForever
TuneUp Utilities 2012 (Version: 12.0.2160.11)
TuneUp Utilities Language Pack (de-DE) (Version: 12.0.2160.11)
Ubisoft Game Launcher (Version: 1.0.0.0)
UltraStar 0.8.4
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Uplay (Version: 2.1)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
Vindictus EU
VirtualCloneDrive
VirtualDubMOD 1.5.10.3 US (Version: 1.5.10.3)
VLC media player 2.0.1 (Version: 2.0.1)
VTFEdit 1.2.5
Window Ruler 1.x
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Family Safety (Version: 15.4.3538.0513)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
WinRAR 4.01 (32-Bit) (Version: 4.01.0)
Yume Nikki 0.10 English

==================== Restore Points  =========================

27-08-2013 15:46:38 Geplanter Prüfpunkt
04-09-2013 17:57:41 Geplanter Prüfpunkt
06-09-2013 12:55:20 DirectX wurde installiert

==================== Hosts content: ==========================

2009-07-14 04:04 - 2013-05-07 14:50 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07FBF0E1-072E-4B90-9BE3-0B5CB5165791} - System32\Tasks\Divx-Online-Aktualisierungsprogramm => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-07-29] ()
Task: {0AE9BFD8-E46A-4BEA-8FB2-292728C5425C} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files\Razer\Razer Game Booster\AutoUpdate.exe [2012-11-13] ()
Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {0F89ABC9-4796-4A5A-9F3C-B712BFC9EBB7} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000Core => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-29] (Google Inc.)
Task: {1D882B72-4A8A-45D5-9694-52EC498B77C7} - System32\Tasks\SmartDefragUpdate => C:\Program Files\IObit\Smart Defrag 2\AutoUpdate.exe [2012-09-06] (IObit)
Task: {2FB61F7A-64F1-4942-80AE-BE620170C63F} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {316394C8-68A0-4789-A6E1-297CCD39FF96} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe
Task: {32247FF0-EECF-41B1-B829-67936D1AB0B5} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {3E5831B7-B4C5-4B65-855C-B953A884DB68} - System32\Tasks\SmartDefrag_Startup => C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe [2012-12-25] (IObit)
Task: {51ABE0F6-FAB3-459B-842B-31B5940511DA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated)
Task: {65CFD607-FA50-45BC-BF3D-9313876C3D33} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files\TuneUp Utilities 2012\OneClick.exe [2011-12-14] (TuneUp Software)
Task: {709CD726-EDDD-4D99-902C-A4B2677BDB9E} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect
Task: {72398630-773A-4942-89C4-D5F38D515282} - System32\Tasks\WpsUpdateTask_Julian => C:\Program Files\Kingsoft\Kingsoft Office\office6\wpsupdate.exe [2013-06-05] (Kingsoft Corp. Ltd.)
Task: {7A89F846-095B-4C80-A5CD-037B82F7744A} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {86A0AC6D-017A-4797-8A21-DBE70A7097FC} - System32\Tasks\RunAsStdUser Task => C:\Program Files\ClickPotatoLite\bin\10.0.728.0\ClickPotatoLiteSA.exe
Task: {8F93D8D6-BFB4-43E3-AD38-C9ABA638658D} - System32\Tasks\Dealply => C:\Users\Julian\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: {93E0F643-BFC0-4EFF-AB64-2D7F1B45E8B7} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000UA => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-29] (Google Inc.)
Task: {A306675D-027E-48E2-AAEC-A15C9C19F642} - System32\Tasks\Google Updater and Installer => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-29] (Google Inc.)
Task: {DB2F2F24-C190-4B50-A9BC-97CFB846C4BA} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000Core.job => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000UA.job => C:\Users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WpsUpdateTask_Julian.job => C:\Program Files\Kingsoft\Kingsoft Office\office6\wpsupdate.exe

==================== Loaded Modules (whitelisted) =============

2013-02-11 14:42 - 2011-08-19 17:33 - 00047960 _____ () C:\Program Files\IObit\Smart Defrag 2\NtfsData.dll
2011-10-21 18:56 - 2011-05-28 22:04 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll
2012-11-13 22:53 - 2012-11-13 22:53 - 00121472 _____ () C:\Program Files\Razer\Razer Game Booster\GBV3ContextMenu.dll
2011-09-20 10:43 - 2011-09-20 10:43 - 02442536 _____ (Nero AG) C:\Program Files\Common Files\Nero\NeroShellExt\NeroShellExt.dll
2011-09-20 10:43 - 2011-09-20 10:43 - 00031528 _____ (Nero AG) C:\Program Files\Common Files\Nero\NeroShellExt\SolutionExplorer.dll
2011-12-14 13:23 - 2011-12-14 13:23 - 00030016 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2012\SDShelEx-win32.dll
2011-12-14 13:23 - 2011-12-14 13:23 - 00025920 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2012\DseShExt-x86.dll
2013-08-08 21:30 - 2013-01-15 18:47 - 00143168 _____ () C:\Program Files\IObit\Advanced SystemCare 6\ASCExtMenu.dll
2011-03-07 02:52 - 2011-03-07 02:52 - 00134512 _____ (Elaborate Bytes AG) C:\Windows\system32\ElbyVCD.dll
2011-03-07 04:08 - 2011-03-07 04:08 - 00093552 _____ (Elaborate Bytes AG) C:\Windows\system32\ElbyCDIO.dll
2010-12-17 19:13 - 2010-12-17 19:13 - 00049664 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-06-26 12:35 - 2013-06-26 12:35 - 05732864 _____ (Razer Inc.) C:\ProgramData\Razer\Synapse\Devices\RazerConfigNative.dll
2013-06-21 18:33 - 2013-06-21 18:33 - 00070656 _____ (Razer Inc.) C:\Program Files\Razer\Synapse\RzStorageIO.dll
2013-06-21 18:33 - 2013-06-21 18:33 - 00073728 _____ (Razer Inc) C:\Program Files\Razer\Synapse\RzEmilySettings.dll
2013-06-21 18:33 - 2013-06-21 18:33 - 00181760 _____ (Razer USA Ltd) C:\Program Files\Razer\Synapse\rzdetmgr.dll
2013-08-08 21:30 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files\IObit\Advanced SystemCare 6\madExcept_.bpl
2013-08-08 21:30 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files\IObit\Advanced SystemCare 6\madBasic_.bpl
2013-08-08 21:30 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files\IObit\Advanced SystemCare 6\madDisAsm_.bpl
2013-07-12 16:57 - 2013-07-12 16:57 - 00665088 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineLib.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00175104 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DBUtils.dll
2013-08-12 14:05 - 2013-08-12 14:05 - 00096347 _____ () C:\Users\Julian\AppData\Local\Temp\a19482f6-74a8-457b-b041-bf6df9233adc\CliSecureRT.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00278528 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DriverCommunication.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00139776 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\ISSPlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00148480 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Localization.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00145408 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\Utilities.dll
2013-07-12 16:55 - 2013-07-12 16:55 - 00053248 _____ ( ) C:\Program Files\SteelSeries\SteelSeries Engine\Interop.BSteelLinkLib.dll
2013-06-25 16:32 - 2013-06-25 16:32 - 00428544 _____ (TODO: <Company name>) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\BSteelLink.dll
2013-01-10 07:46 - 2013-01-10 07:46 - 00040960 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesDrivers\x2api.dll
2011-03-28 11:29 - 2011-03-28 11:29 - 00200704 _____ (ICSharpCode.net) C:\Program Files\SteelSeries\SteelSeries Engine\ICSharpCode.SharpZipLib.dll
2013-01-10 07:46 - 2013-01-10 07:46 - 00135168 _____ (Simon Mourier) C:\Program Files\SteelSeries\SteelSeries Engine\HtmlAgilityPack.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 09519104 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SSEngineWinGui.dll
2013-01-10 07:46 - 2013-01-10 07:46 - 00904704 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\System.Data.SQLite.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00164352 _____ (Protolog Systems Ltd.) C:\Program Files\SteelSeries\SteelSeries Engine\PluginAbstract.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00209408 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CustomWPFColorPicker.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00302592 _____ (Protolog Systems Ltd.) C:\Program Files\SteelSeries\SteelSeries Engine\VoicePlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00349696 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MousePlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00164864 _____ (Protolog Systems Ltd.) C:\Program Files\SteelSeries\SteelSeries Engine\D3HeadsetPlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00171008 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\D3MousePlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00173568 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\KKMousePlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00171008 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\SRawPlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00307200 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\MLGSenseiPlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00154624 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWGoldPlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\GW2MousePlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00169472 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CSGOMousePlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\DOTA2MousePlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00157184 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoWWirelessPlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00170496 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\CODMousePlugin.dll
2013-07-12 16:57 - 2013-07-12 16:57 - 00169984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine\WoTMousePlugin.dll
2012-08-10 17:51 - 2012-08-10 17:51 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2012-12-19 16:31 - 2012-12-19 16:31 - 00095232 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2011-09-03 11:29 - 2011-09-03 11:29 - 01518520 ___SH (Microsoft Corporation) \\?\C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv_SID_S-1-5-21-618426037-2681808743-1371803286-1000\Indiv01.key
2013-09-05 15:38 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll
2013-09-05 15:38 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll
2013-09-05 15:38 - 2013-09-02 20:46 - 03231688 _____ (Microsoft Corporation) C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\D3DCompiler_46.dll
2013-09-05 15:38 - 2013-09-02 22:35 - 00709584 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-05 15:38 - 2013-09-02 22:35 - 00099792 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\libegl.dll
2013-09-05 15:38 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-05 15:38 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-05 15:38 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll
2013-09-05 15:38 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-05-07 15:03 - 2013-05-07 15:03 - 00577856 _____ (IObit) C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0\Plugin\ASCPlugin_Protect.dll
2013-09-05 15:38 - 2013-09-02 22:35 - 13599184 _____ () C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll
2012-12-26 11:07 - 2013-09-06 22:55 - 00288680 _____ (Valve Corporation) D:\Steam\Steam\crashhandler.dll
2012-12-26 11:07 - 2013-07-16 00:32 - 02895272 _____ (Valve Corporation) D:\Steam\Steam\steam.dll
2012-12-26 11:07 - 2013-09-06 22:55 - 10659752 _____ (Valve Corporation) D:\Steam\Steam\steamui.dll
2013-03-12 18:10 - 2013-08-22 00:18 - 00687104 _____ () D:\Steam\Steam\SDL2.dll
2012-12-26 11:07 - 2013-09-06 22:55 - 00263080 _____ (Valve Corporation) D:\Steam\Steam\tier0_s.dll
2012-12-26 11:07 - 2013-09-06 22:56 - 00236456 _____ (Valve Corporation) D:\Steam\Steam\vstdlib_s.dll
2012-12-26 11:07 - 2013-06-15 01:49 - 01039192 _____ (Microsoft Corporation) D:\Steam\Steam\DbgHelp.dll
2012-12-26 11:07 - 2013-06-15 01:49 - 00122864 _____ (Valve) D:\Steam\Steam\CSERHelper.dll
2013-05-09 13:24 - 2013-09-06 22:55 - 00169384 _____ (Valve Corporation) D:\Steam\Steam\bin\filesystem_stdio.DLL
2012-12-26 11:07 - 2013-09-06 22:55 - 00694696 _____ (Valve Corporation) D:\Steam\Steam\bin\vgui2_s.DLL
2012-12-26 11:07 - 2013-09-06 22:55 - 01120680 _____ () D:\Steam\Steam\bin\chromehtml.DLL
2012-12-26 11:07 - 2013-08-07 21:31 - 20625832 _____ () D:\Steam\Steam\bin\libcef.dll
2012-12-26 11:07 - 2013-06-15 01:49 - 09955112 _____ (The ICU Project) D:\Steam\Steam\bin\icudt.dll
2012-12-26 11:07 - 2013-06-15 01:49 - 01100800 _____ () D:\Steam\Steam\bin\avcodec-53.dll
2012-12-26 11:07 - 2013-06-15 01:49 - 00124416 _____ () D:\Steam\Steam\bin\avutil-51.dll
2012-12-26 11:07 - 2013-06-15 01:49 - 00192000 _____ () D:\Steam\Steam\bin\avformat-53.dll
2012-12-26 11:07 - 2013-09-06 22:55 - 07751080 _____ (Valve Corporation) D:\Steam\Steam\steamclient.dll
2012-12-26 11:07 - 2013-09-06 22:55 - 02449832 _____ (Valve Corporation) d:\steam\steam\bin\friendsui.DLL
2012-12-26 11:07 - 2013-09-06 22:55 - 01804712 _____ (Valve Corporation) d:\steam\steam\bin\serverbrowser.DLL
2013-09-11 17:19 - 2013-09-11 17:19 - 16177544 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll
2011-08-30 17:13 - 2013-06-05 21:47 - 02244504 _____ () C:\Program Files\Mozilla Thunderbird\mozjs.dll
2011-08-30 17:13 - 2013-06-05 21:47 - 00158104 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAP32V60.dll
2011-08-30 17:13 - 2013-06-05 21:47 - 00022424 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAPPR32V60.dll
2011-08-30 17:13 - 2013-06-05 21:47 - 00579480 _____ (sqlite.org) C:\Program Files\Mozilla Thunderbird\mozsqlite3.dll
2013-09-13 20:19 - 2013-09-13 20:19 - 16244616 ____R (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\Flash32_11_8_800_174.ocx

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/17/2013 09:54:31 PM) (Source: Application Hang) (User: )
Description: Programm FRST.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2ca4

Startzeit: 01ceb3df6b2f93bb

Endzeit: 3

Anwendungspfad: C:\Users\Julian\Downloads\FRST.exe

Berichts-ID: e74b4d9d-1fd2-11e3-9da4-4061868bafa1

Error: (09/17/2013 09:06:13 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ssj1msm.exe, Version: 1.4.0.9, Zeitstempel: 0x508f9577
Name des fehlerhaften Moduls: ssj1msm.exe, Version: 1.4.0.9, Zeitstempel: 0x508f9577
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000a49e9
ID des fehlerhaften Prozesses: 0x2a80
Startzeit der fehlerhaften Anwendung: 0xssj1msm.exe0
Pfad der fehlerhaften Anwendung: ssj1msm.exe1
Pfad des fehlerhaften Moduls: ssj1msm.exe2
Berichtskennung: ssj1msm.exe3

Error: (09/17/2013 03:33:18 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avnotify.exe, Version: 13.6.20.2100, Zeitstempel: 0x51e6b921
Name des fehlerhaften Moduls: avnotify.exe, Version: 13.6.20.2100, Zeitstempel: 0x51e6b921
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001487
ID des fehlerhaften Prozesses: 0xd78
Startzeit der fehlerhaften Anwendung: 0xavnotify.exe0
Pfad der fehlerhaften Anwendung: avnotify.exe1
Pfad des fehlerhaften Moduls: avnotify.exe2
Berichtskennung: avnotify.exe3

Error: (09/16/2013 02:45:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel: 0x52210960
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6601aae9
ID des fehlerhaften Prozesses: 0x15dc
Startzeit der fehlerhaften Anwendung: 0xhl2.exe0
Pfad der fehlerhaften Anwendung: hl2.exe1
Pfad des fehlerhaften Moduls: hl2.exe2
Berichtskennung: hl2.exe3

Error: (09/15/2013 09:49:16 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel: 0x52210960
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x667eaae9
ID des fehlerhaften Prozesses: 0x298c
Startzeit der fehlerhaften Anwendung: 0xhl2.exe0
Pfad der fehlerhaften Anwendung: hl2.exe1
Pfad des fehlerhaften Moduls: hl2.exe2
Berichtskennung: hl2.exe3

Error: (09/15/2013 07:40:22 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel: 0x52210960
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x50efaae9
ID des fehlerhaften Prozesses: 0x3418
Startzeit der fehlerhaften Anwendung: 0xhl2.exe0
Pfad der fehlerhaften Anwendung: hl2.exe1
Pfad des fehlerhaften Moduls: hl2.exe2
Berichtskennung: hl2.exe3

Error: (09/15/2013 02:32:20 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel: 0x52210960
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x65c3aae9
ID des fehlerhaften Prozesses: 0x24b8
Startzeit der fehlerhaften Anwendung: 0xhl2.exe0
Pfad der fehlerhaften Anwendung: hl2.exe1
Pfad des fehlerhaften Moduls: hl2.exe2
Berichtskennung: hl2.exe3

Error: (09/14/2013 03:31:25 PM) (Source: Application Hang) (User: )
Description: Programm rogame.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 32bc

Startzeit: 01ceb14d2f631a03

Endzeit: 154

Anwendungspfad: D:\Steam\Steam\steamapps\common\Red Orchestra 2\binaries\win32\rogame.exe

Berichts-ID:

Error: (09/14/2013 01:25:46 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel: 0x52210960
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x65c7aae9
ID des fehlerhaften Prozesses: 0x29f8
Startzeit der fehlerhaften Anwendung: 0xhl2.exe0
Pfad der fehlerhaften Anwendung: hl2.exe1
Pfad des fehlerhaften Moduls: hl2.exe2
Berichtskennung: hl2.exe3

Error: (09/13/2013 08:22:20 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel: 0x52210960
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5035aae9
ID des fehlerhaften Prozesses: 0x1864
Startzeit der fehlerhaften Anwendung: 0xhl2.exe0
Pfad der fehlerhaften Anwendung: hl2.exe1
Pfad des fehlerhaften Moduls: hl2.exe2
Berichtskennung: hl2.exe3


System errors:
=============
Error: (09/17/2013 03:34:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (09/17/2013 03:34:11 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.

Error: (09/17/2013 03:33:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (09/17/2013 03:33:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/17/2013 03:33:26 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (09/17/2013 03:33:24 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (09/17/2013 03:32:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (09/16/2013 11:28:39 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (09/16/2013 11:28:13 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (09/15/2013 08:07:08 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.


Microsoft Office Sessions:
=========================
Error: (09/17/2013 09:54:31 PM) (Source: Application Hang)(User: )
Description: FRST.exe3.3.8.12ca401ceb3df6b2f93bb3C:\Users\Julian\Downloads\FRST.exee74b4d9d-1fd2-11e3-9da4-4061868bafa1

Error: (09/17/2013 09:06:13 PM) (Source: Application Error)(User: )
Description: ssj1msm.exe1.4.0.9508f9577ssj1msm.exe1.4.0.9508f9577c0000409000a49e92a8001ceb3d8f6247724C:\windows\system32\spool\drivers\w32x86\3\ssj1msm.exeC:\windows\system32\spool\drivers\w32x86\3\ssj1msm.exe37d7dbf5-1fcc-11e3-9da4-4061868bafa1

Error: (09/17/2013 03:33:18 PM) (Source: Application Error)(User: )
Description: avnotify.exe13.6.20.210051e6b921avnotify.exe13.6.20.210051e6b921c000000500001487d7801ceb3aa6c7ebf66C:\Program Files\Avira\AntiVir Desktop\avnotify.exeC:\Program Files\Avira\AntiVir Desktop\avnotify.exeb5e639b2-1f9d-11e3-9da4-4061868bafa1

Error: (09/16/2013 02:45:10 PM) (Source: Application Error)(User: )
Description: hl2.exe0.0.0.052210960unknown0.0.0.000000000c00000056601aae915dc01ceb2d85a99a8e2D:\Steam\Steam\steamapps\common\Team Fortress 2\hl2.exeunknownd1eaeab2-1ecd-11e3-a417-4061868bafa1

Error: (09/15/2013 09:49:16 PM) (Source: Application Error)(User: )
Description: hl2.exe0.0.0.052210960unknown0.0.0.000000000c0000005667eaae9298c01ceb249f32e5d1fD:\Steam\Steam\steamapps\common\Team Fortress 2\hl2.exeunknowne6a698e0-1e3f-11e3-a18d-4061868bafa1

Error: (09/15/2013 07:40:22 PM) (Source: Application Error)(User: )
Description: hl2.exe0.0.0.052210960unknown0.0.0.000000000c000000550efaae9341801ceb2332c0f671dD:\Steam\Steam\steamapps\common\Team Fortress 2\hl2.exeunknowne535ea75-1e2d-11e3-a18d-4061868bafa1

Error: (09/15/2013 02:32:20 PM) (Source: Application Error)(User: )
Description: hl2.exe0.0.0.052210960unknown0.0.0.000000000c000000565c3aae924b801ceb2086395efdeD:\Steam\Steam\steamapps\common\Team Fortress 2\hl2.exeunknowndcf20488-1e02-11e3-a18d-4061868bafa1

Error: (09/14/2013 03:31:25 PM) (Source: Application Hang)(User: )
Description: rogame.exe0.0.0.032bc01ceb14d2f631a03154D:\Steam\Steam\steamapps\common\Red Orchestra 2\binaries\win32\rogame.exe

Error: (09/14/2013 01:25:46 PM) (Source: Application Error)(User: )
Description: hl2.exe0.0.0.052210960unknown0.0.0.000000000c000000565c7aae929f801ceb13a45fc3588D:\Steam\Steam\steamapps\common\Team Fortress 2\hl2.exeunknown65b202ce-1d30-11e3-a215-4061868bafa1

Error: (09/13/2013 08:22:20 PM) (Source: Application Error)(User: )
Description: hl2.exe0.0.0.052210960unknown0.0.0.000000000c00000055035aae9186401ceb0ac74c7b3dbD:\Steam\Steam\steamapps\common\Team Fortress 2\hl2.exeunknown6cc8272e-1ca1-11e3-890a-4061868bafa1


==================== Memory info ===========================

Percentage of memory in use: 59%
Total physical RAM: 3326.3 MB
Available physical RAM: 1331.11 MB
Total Pagefile: 6650.9 MB
Available Pagefile: 2971.58 MB
Total Virtual: 2047.88 MB
Available Virtual: 1903.36 MB

==================== Drives ================================

Drive c: (BootWindows7) (Fixed) (Total:700.2 GB) (Free:303.92 GB) NTFS
Drive d: (EigeneDateien) (Fixed) (Total:695.96 GB) (Free:406.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: DF3FB8C6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=700 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=696 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================

schrauber 18.09.2013 10:01
Sieht jetzt gar nit so wild aus. Hast Du mal versucht Vollzugriff von dem Ordner zu übernehmen?

Jalian 18.09.2013 15:32
Da steht das alle Nutzer und der Administrator bereits den Vollzugriff haben, und wenn ich versuche die Attribute, bei denen steht, dass der Ordner schreibgeschützt ist, zu ändern, bekomme ich nur die Nachricht:
Beim Übernehmen der Attribute der Datei ist ein Fehler aufgetreten

Zugriff verweigert.

schrauber 18.09.2013 19:58
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Jalian 18.09.2013 20:20
Ich wollte den Scan starten, doch obwohl ich alle Antiviren-Scanner und Anti-Malware Programme ausgeschaltet hatte bekam ich die Anzeige dass Avira Anti Virus immernoch geöffnet sei. Also ging ich auf das Programm um den Echtzeitscanner auszuschalten,doch dass ging nicht, ich bekam volgende Nachricht:

Zitat:
C:/ programm files/avira/antivir desctop/ccuac.exe

Auf das angegebene Gerät, bzw. den Pfad oder die Datei kann nicht zugegriffen werden. Sie verfügen eventuell nicht über ausreichende Berechtigungen um auf das Element zugreifen zu können.
Ich war schon immer der einzige User am Rechner und so auch Administrator, und müsste so eigentlich alle Rechte besitzen, und weil das Avira noch läuft und sich nicht abschalten lässt will ich den Combofix Scan nicht ohne absprache durchführen.

schrauber 19.09.2013 09:38
Wenn Du den Schirm von Avira zugeklappt hast starte combofix :)

Jalian 19.09.2013 13:59
Die letzten drei male hatte Avira mir den zugriff verweigert, doch diesmal war ohne mein zutun der Schrim einfach geschlossen. :balla:
Seitdem ich angefangen hab diese Sachen da zu machen scheint er irgendwie zu spinnen.
Also weil der Schirm zu war hab ich es einfach mal geöffnet,ich hoffe es ist die richtige File.

Code:
ComboFix 13-09-19.01 - Julian 19.09.2013  14:25:44.2.4 - x86
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.3326.1965 [GMT 2:00]
ausgeführt von:: c:\users\Julian\Downloads\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Julian\AppData\Local\temp\a19482f6-74a8-457b-b041-bf6df9233adc\CliSecureRT.dll
c:\users\Julian\AppData\Roaming\Microsoft\Windows\Recent\nolife-radio.com-radio-NoLife-radio.m3u.url
D:\install.exe
.
Infizierte Kopie von c:\windows\system32\userinit.exe wurde gefunden und desinfiziert
Kopie von - c:\windows\erdnt\cache\userinit.exe wurde wiederhergestellt
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-08-19 bis 2013-09-19  ))))))))))))))))))))))))))))))
.
.
2013-09-19 12:35 . 2013-09-19 12:35        --------        d-----w-        c:\users\Public\AppData\Local\temp
2013-09-19 12:35 . 2013-09-19 12:35        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-09-17 19:52 . 2013-09-17 19:52        --------        d-----w-        C:\FRST
2013-09-11 14:23 . 2013-09-11 14:23        --------        d-----w-        c:\users\Julian\AppData\Local\Overwolf
2013-09-06 12:57 . 2013-09-06 12:57        --------        d-----w-        c:\users\Julian\AppData\Local\CrashRpt
2013-09-06 12:55 . 2013-09-06 12:55        --------        d-----w-        c:\program files\Microsoft Chart Controls
2013-08-28 13:57 . 2013-08-28 13:58        --------        d-----w-        c:\users\Julian\AppData\Local\PAYDAY 2
2013-08-28 13:57 . 2013-08-28 13:57        --------        d-----w-        c:\program files\AGEIA Technologies
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-14 13:37 . 2011-08-31 12:09        139112        ----a-w-        c:\windows\system32\drivers\PnkBstrK.sys
2013-09-14 13:37 . 2011-08-31 12:20        280792        ----a-w-        c:\windows\system32\PnkBstrB.xtr
2013-09-14 13:37 . 2011-08-31 12:09        280792        ----a-w-        c:\windows\system32\PnkBstrB.exe
2013-09-14 13:36 . 2011-08-31 12:09        280856        ----a-w-        c:\windows\system32\PnkBstrB.ex0
2013-09-13 18:19 . 2012-04-03 08:26        692616        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2013-09-13 18:19 . 2011-06-26 14:01        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2013-09-06 14:19 . 2011-08-31 12:09        76888        ----a-w-        c:\windows\system32\PnkBstrA.exe
2013-09-06 12:55 . 2011-08-31 12:09        138056        ----a-w-        c:\users\Julian\AppData\Roaming\PnkBstrK.sys
2013-09-05 13:37 . 2013-05-07 12:35        66144        ----a-w-        c:\windows\system32\drivers\avnetflt.sys
2013-09-05 13:37 . 2012-10-18 15:21        88840        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2013-09-05 13:37 . 2012-10-18 15:21        136672        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2013-07-07 10:29 . 2013-07-07 10:29        22560        ----a-w-        c:\windows\system32\drivers\HWiNFO32.SYS
2013-06-25 14:00 . 2013-06-25 14:00        34304        ----a-w-        c:\windows\system32\drivers\SAlpham.sys
2013-06-25 14:00 . 2013-06-25 14:00        113920        ----a-w-        c:\windows\system32\drivers\SteelBus.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 6"="c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
"SteelSeries Engine"="c:\program files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe" [2013-07-12 242688]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVMWlanClient"="c:\program files\avmwlanstick\wlangui.exe" [2009-05-07 1904640]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456]
"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2010-08-03 358472]
"Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2010-08-03 1809992]
"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2010-08-03 3649096]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-09-05 347192]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2010-12-17 332288]
"IObit Malware Fighter"="c:\program files\IObit\IObit Malware Fighter\IMF.exe" [2013-06-07 1514816]
"Razer Synapse"="c:\program files\Razer\Synapse\RzSynapse.exe" [2013-06-21 610152]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-06-28 2255184]
.
c:\users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.4.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"EADM"="c:\program files\Origin\Origin.exe" -AutoStart
"KPeerNexonEU"=c:\nexon\NEXON_EU_Downloader\nxEULauncher.exe
"Skype"="c:\program files\Skype\Phone\Skype.exe" /nosplash /minimized
"Sidebar"=c:\program files\Windows Sidebar\sidebar.exe /autoRun
"Google Update"="c:\users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"Comrade.exe"=c:\program files\GameSpy\Comrade\Comrade.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
.
R2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-04-09 48256]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [2009-05-07 4352]
R3 EagleXNt;EagleXNt; [x]
R3 esgiguard;esgiguard; [x]
R3 FileMonitor;FileMonitor;c:\program files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [2013-03-23 21480]
R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [2007-01-25 265088]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2012-03-05 3953632]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-12-25 14848]
R3 RegFilter;RegFilter;c:\program files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [2013-03-26 31752]
R3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys [2013-05-17 33016]
R3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [2010-07-01 34896]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-12-25 49664]
R3 UrlFilter;UrlFilter;c:\program files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [2013-03-26 20944]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\Razer\Razer Game Booster\Driver\WinRing0.sys [2012-11-13 14416]
R3 XDva397;XDva397; [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 15672]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-03-30 37352]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\system32\drivers\HWiNFO32.SYS [2013-07-07 22560]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [2013-04-18 574272]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-12-19 219136]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-12-19 291840]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2013-09-05 84024]
S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-04-09 48256]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2013-06-28 1440080]
S2 IMFservice;IMF Service;c:\program files\IObit\IObit Malware Fighter\IMFsrv.exe [2013-04-25 335168]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2011-09-23 641832]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2011-03-14 5120]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [2011-12-14 1514304]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys [2010-12-30 16640]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2012-11-06 84992]
S3 busenum;SteelBusSvc;c:\windows\system32\DRIVERS\SteelBus.sys [2013-06-25 113920]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2009-11-23 19720]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2009-11-23 14856]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-02-16 340072]
S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2009-10-30 579072]
S3 SAlphamHid;SteelHIDSvc;c:\windows\system32\DRIVERS\SAlpham.sys [2013-06-25 34304]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [2011-12-12 10064]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2010-12-16 37504]
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 18:19]
.
2013-09-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000Core.job
- c:\users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-29 15:13]
.
2013-09-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000UA.job
- c:\users\Julian\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-29 15:13]
.
2013-09-19 c:\windows\Tasks\WpsUpdateTask_Julian.job
- c:\program files\Kingsoft\Kingsoft Office\office6\wpsupdate.exe [2012-09-17 18:27]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://de.search.yahoo.com?type=800236&fr=spigot-yhp-ie
IE: Free YouTube Download - c:\users\Julian\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: samsungsetup.com\www
Trusted Zone: soe.com
Trusted Zone: sony.com
Trusted Zone: vizzed.com\www
TCP: DhcpNameServer = 192.168.178.1
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-618426037-2681808743-1371803286-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:9b,6a,6b,96,79,7f,b4,1a,df,e1,7b,d3,b4,18,b5,ff,7a,21,43,13,d3,56,52,
  ff,7a,45,9a,c1,e6,ca,a0,47,19,00,40,0b,3b,c7,2a,da,97,1c,3f,57,60,62,4c,ab,\
"??"=hex:a1,5e,47,db,25,65,bb,27,8b,92,55,34,10,3f,d9,49
.
[HKEY_USERS\S-1-5-21-618426037-2681808743-1371803286-1000\Software\SecuROM\License information*]
"datasecu"=hex:db,13,d6,56,cf,0e,95,cc,32,2d,e9,c5,27,1e,0d,d6,c8,a2,61,d0,f6,
  ba,4c,92,d1,b3,88,8f,e4,7a,52,6c,0a,36,e1,83,67,c5,87,0f,06,60,ae,d9,46,e1,\
"rkeysecu"=hex:f6,bb,ce,61,71,57,15,7c,93,d6,28,d3,1f,c0,ff,cd
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\avmwlanstick\WlanNetService.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\taskhost.exe
c:\program files\IObit\Smart Defrag 2\SmartDefrag.exe
c:\program files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\System32\WUDFHost.exe
c:\windows\System32\WUDFHost.exe
c:\windows\System32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\WMPSideShowGadget.exe
c:\program files\Windows Media Player\wmplayer.exe
c:\windows\system32\taskhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
c:\program files\Logitech\GamePanel Software\Applets\LCDClock.exe
c:\program files\Logitech\GamePanel Software\Applets\LCDPop3.exe
c:\program files\Logitech\GamePanel Software\Applets\LCDMedia.exe
c:\program files\Logitech\GamePanel Software\Applets\LCDRSS.exe
c:\program files\OpenOffice.org 3\program\soffice.exe
c:\program files\OpenOffice.org 3\program\soffice.bin
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\windows\system32\DllHost.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-09-19  14:43:12 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-09-19 12:43
ComboFix2.txt  2013-05-07 12:56
.
Vor Suchlauf: 318015737856 Bytes frei
Nach Suchlauf: 318076157952 Bytes frei
.
- - End Of File - - B9A118EC43AF90BD84D5C9DE6552E9A6
A36C5E4F47E84449FF07ED3517B43A31

schrauber 19.09.2013 17:36
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Jalian 19.09.2013 18:46
Ok, alles durchgeführt.

Malwarebytes Logfile

Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.19.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
Julian :: JULIAN-PC [Administrator]

19.09.2013 19:07:28
mbam-log-2013-09-19 (19-07-28).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 201623
Laufzeit: 11 Minute(n), 58 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0G2Y1R2X0G1M2S1M0G1S1H -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 2
C:\Users\Julian\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 16
C:\Users\Julian\Downloads\06 - Dracula's Castle.exe (PUP.Optional.4Squared) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\7ZipSetup-85T7ygp.exe (PUP.Optional.Somoto) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\7ZipSetup-coAgE9z.exe (PUP.Optional.Somoto) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\blind guardian - 1998 - nightfall in middle-earth.exe (PUP.Optional.4Squared) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Blind_Guardian-Nightfall_In_Middle-Earth-1998-k4_int.exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Borderlands_Game_Soundtrack_downloader_99146.exe (PUP.Optional.YourFileDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Borderlands_Original_Soundtrack (1).exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Borderlands_Original_Soundtrack.exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Castlevania_20th_Anniversary_Premium_Music_Collection (1).exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Castlevania_20th_Anniversary_Premium_Music_Collection.exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\codec_pack_18898_ch.exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Game_Setup_Zip.exe (PUP.Optional.Somoto) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Need_for_Speed_Underground_2_Game_Soundtrack_downloader_de_99146.exe (PUP.Optional.YourFileDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\Downloads\Peter_Fox_-_Stadtaffe.exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Julian\AppData\Roaming\Dealply\UpdateProc\TTL.DAT (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
AdwCleaner Logfile

Code:
# AdwCleaner v3.004 - Bericht erstellt am 19/09/2013 um 19:32:25
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Julian - JULIAN-PC
# Gestartet von : C:\Users\Julian\Desktop\adwcleaner (1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files\FTDownloader.com
Ordner Gelöscht : C:\Program Files\MyPC Backup
Ordner Gelöscht : C:\Program Files\Common Files\spigot
Ordner Gelöscht : C:\Users\Julian\AppData\Local\cre
Ordner Gelöscht : C:\Users\Julian\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com
Ordner Gelöscht : C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Datei Gelöscht : C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\BrowserProtect
Datei Gelöscht : C:\Windows\System32\Tasks\Dealply

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bbffdhejhaoiflnpooogkckfdcmmjppn
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserProtect
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{709CD726-EDDD-4D99-902C-A4B2677BDB9E}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{709CD726-EDDD-4D99-902C-A4B2677BDB9E}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dealply
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8F93D8D6-BFB4-43E3-AD38-C9ABA638658D}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8F93D8D6-BFB4-43E3-AD38-C9ABA638658D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FTDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\DEALPL~1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\DEALPL~1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_directx_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_directx_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_duty-calls_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_duty-calls_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_monster-trucks-nitro_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_monster-trucks-nitro_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_rom-check-fail_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_rom-check-fail_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_super-crate-box_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_super-crate-box_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_funny-voice_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_funny-voice_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hackthegame_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_hackthegame_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_morphvox_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_morphvox_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_nero-burning-rom_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_nero-burning-rom_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_nfs-radar-screensaver_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_nfs-radar-screensaver_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_quicktime_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_quicktime_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_screen-ruler-2d_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_screen-ruler-2d_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_super-mario-64-screensaver_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_super-mario-64-screensaver_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_tuneup-utilities-2012_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_tuneup-utilities-2012_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-clonedrive_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_virtual-clonedrive_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_window-ruler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_window-ruler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_hackthegame_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_hackthegame_RASMANCS
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Search Settings

***** [ Browser ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v

[ Datei : C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [7073 octets] - [19/09/2013 19:30:19]
AdwCleaner[S0].txt - [6983 octets] - [19/09/2013 19:32:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7043 octets] ##########
Junkware Removal Logfile

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.1 (09.15.2013:1)
OS: Windows 7 Home Premium x86
Ran by Julian on 19.09.2013 at 19:41:04.21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\bProtectTabs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-618426037-2681808743-1371803286-1000\Software\SweetIM



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.09.2013 at 19:42:23.94
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

schrauber 20.09.2013 10:27

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Jalian 20.09.2013 20:31
Hier sind die neuen Logs

ESET
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=0ca9362d41d31f4e80a9d85cdcef5f4a
# engine=15201
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-20 07:13:29
# local_time=2013-09-20 09:13:29 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 97 19141 245127699 11911 0
# compatibility_mode=5893 16776573 100 94 173042 131335600 0 0
# scanned=844603
# found=7
# cleaned=0
# scan_time=18609
sh=7E80294C5B870EEE9E33F9CD6179333C17488861 ft=1 fh=26d2333f502bd728 vn="a variant of Win32/Adware.MediaFinder.H application" ac=I fn="C:\Users\Julian\Downloads\Peter_Fox__Stadtaffe_Full_Album_inkl.exe"
sh=FBE285FD65D00E2DA131B1927574264D17808454 ft=0 fh=0000000000000000 vn="JS/Adware.Yontoo.B application" ac=I fn="C:\Windows.old\Users\Julian Wilhelm\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.0_0\background.html"
sh=AF2D07BA57E199216528451BEE8B818B274D7A57 ft=0 fh=0000000000000000 vn="JS/Adware.Yontoo.B application" ac=I fn="C:\Windows.old\Users\Julian Wilhelm\AppData\Local\Temp\YontooLayers.crx"
sh=FBE285FD65D00E2DA131B1927574264D17808454 ft=0 fh=0000000000000000 vn="JS/Adware.Yontoo.B application" ac=I fn="C:\Windows.old\Users\Julian Wilhelm\AppData\Local\Temp\YontooLayers\background.html"
sh=FBE285FD65D00E2DA131B1927574264D17808454 ft=0 fh=0000000000000000 vn="JS/Adware.Yontoo.B application" ac=I fn="C:\Windows.old\Users\Julian Wilhelm\Lokale Einstellungen\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.0_0\background.html"
sh=AF2D07BA57E199216528451BEE8B818B274D7A57 ft=0 fh=0000000000000000 vn="JS/Adware.Yontoo.B application" ac=I fn="C:\Windows.old\Users\Julian Wilhelm\Lokale Einstellungen\Temp\YontooLayers.crx"
sh=FBE285FD65D00E2DA131B1927574264D17808454 ft=0 fh=0000000000000000 vn="JS/Adware.Yontoo.B application" ac=I fn="C:\Windows.old\Users\Julian Wilhelm\Lokale Einstellungen\Temp\YontooLayers\background.html"
Security Check

Code:
Results of screen317's Security Check version 0.99.73 
 Windows 7 Service Pack 1 x86 (UAC is enabled) 
[b][u]``````````````AntivirusFirewall Check``````````````[b][u]
Avira Desktop 
 Antivirus up to date!  (On Access scanning [b]disabled[b]!)
[b][u]`````````Anti-malwareOther Utilities Check`````````[b][u]
 Malwarebytes Anti-Malware Version 1.75.0.1300 
 TuneUp Utilities 2012 
 TuneUp Utilities Language Pack (de-DE)
 JavaFX 2.1.1   
 Java(TM) 6 Update 31 
 Java 7 Update 21 
 [color=red][b]Java version out of Date![b][color]
 Adobe Flash Player        11.8.800.168 
 Adobe Reader 10.1.4 [color=red][b]Adobe Reader out of Date![b][color] 
 Mozilla Thunderbird (17.0.6)
 Google Chrome 29.0.1547.62 
 Google Chrome 29.0.1547.66 
[b][u]````````Process Check objlist.exe by Laurent````````[b][u] 
 Avira Antivir avgnt.exe
 Avira Antivir avguard.exe
 IObit IObit Malware Fighter IMFsrv.exe 
[b][u]`````````````````System Health check`````````````````[b][u]
 Total Fragmentation on Drive C 
[b][u]````````````````````End of Log``````````````````````[b][u]
FRST


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013 03
Ran by Julian (administrator) on JULIAN-PC on 20-09-2013 21:26:27
Running from C:\Users\Julian\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(IObit) C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WlanNetService.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
() C:\Windows\system32\PnkBstrA.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WLanGUI.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\lcdmon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(IObit) C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Valve Corporation) D:\Steam\Steam\Steam.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AVMWlanClient] - C:\Program Files\avmwlanstick\wlangui.exe [1904640 2009-05-07] (AVM Berlin)
HKLM\...\Run: [amd_dc_opt] - C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM\...\Run: [VirtualCloneDrive] - C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM\...\Run: [Launch LgDeviceAgent] - C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [358472 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [1809992 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [3649096 2010-08-03] (Logitech Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [332288 2010-12-17] ()
HKLM\...\Run: [IObit Malware Fighter] - C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [1514816 2013-06-07] (IObit)
HKLM\...\Run: [Razer Synapse] - C:\Program Files\Razer\Synapse\RzSynapse.exe [610152 2013-06-21] (Razer Inc.)
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-06-28] (LogMeIn Inc.)
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Run: [Advanced SystemCare 6] - C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit)
HKCU\...\Run: [SteelSeries Engine] - C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-07-12] (SteelSeries ApS)
HKCU\...\Policies\Explorer: [NoDrives] 0
Startup: C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com?type=800236&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB52DD112165DCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://go.microsoft.com/fwlink/?LinkId=69157
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {CE901047-0715-429F-9716-6DBB6B034A37} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
SearchScopes: HKCU - {CE901047-0715-429F-9716-6DBB6B034A37} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~1\IObit\ADVANC~1\BROWER~1\ASCPLU~1.DLL (IObit)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} hxxp://www.logitech.com/devicedetector/plugins/LogitechDeviceDetection32.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default
FF Homepage: user_pref("browser.startup.homepage", );
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: Yahoo
FF Keyword.URL: hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=800236&ilc=12&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.3 - C:\Program Files\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.1.7 - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Julian\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Julian\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: Battlefield Play4Free - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\battlefieldplay4free@ea.com
FF Extension: adblockpopups - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: ftdownloader3 - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\ftdownloader3@ftdownloader.com.xpi
FF Extension: mp4downloader - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\mp4downloader@jeff.net.xpi
FF Extension: OneClickDownloader - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\OneClickDownloader@OneClickDownloader.com.xpi
FF Extension: ytd - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\ytd@mybrowserbar.com
FF Extension: No Name - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3mx9s3yy.default\Extensions\{d8b271a6-6ed3-427d-b600-1b674e00e6ec}.xpi
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Julian\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Nexon Game Controller) - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
CHR Plugin: (Google Update) - C:\Users\Julian\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.5_0
CHR Extension: (Adblock for Youtube\u2122) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk\2.4_0
CHR Extension: (Google Search) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.7_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_1
CHR Extension: (Gmail) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files\Common Files\Spigot\GC\saebay_1.0.crx
CHR HKLM\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files\Common Files\Spigot\GC\coupons_2.4.crx
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files\Common Files\Spigot\GC\saamazon_1.0.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Julian\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 AdvancedSystemCareService6; C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2012-12-19] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [368640 2009-05-07] (AVM Berlin)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [641832 2011-09-23] (Nero AG)
S3 npggsvc; C:\Windows\system32\GameMon.des [3953632 2012-03-05] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-09-06] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [1514304 2011-12-14] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48256 2012-04-09] (Advanced Micro Devices)
S2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48256 2012-04-09] (Advanced Micro Devices)
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [16640 2010-12-30] (Wondershare)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-12-07] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-30] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2009-05-07] (AVM Berlin)
R3 busenum; C:\Windows\System32\DRIVERS\SteelBus.sys [113920 2013-06-25] (SteelSeries Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
S4 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-07-07] (REALiX(tm))
R3 LGBusEnum; C:\Windows\System32\drivers\LGBusEnum.sys [19720 2009-11-23] (Logitech Inc.)
R3 LGVirHid; C:\Windows\System32\drivers\LGVirHid.sys [14856 2009-11-23] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-12-07] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [31752 2013-03-26] (IObit.com)
S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [33016 2013-05-17] (Windows (R) Win 7 DDK provider)
R3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham.sys [34304 2013-06-25] (SteelSeries Corporation)
S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [15672 2010-11-26] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [10064 2011-12-12] (TuneUp Software)
S3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-03-26] (IObit.com)
S3 WinRing0_1_2_0; C:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys [14416 2012-11-13] (OpenLibSys.org)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Julian\AppData\Local\Temp\catchme.sys [x]
S3 EagleXNt; No ImagePath
S3 esgiguard; No ImagePath
S3 XDva397; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-20 21:26 - 2013-09-17 21:52 - 01083437 _____ (Farbar) C:\Users\Julian\Desktop\FRST.exe
2013-09-20 21:24 - 2013-09-20 21:25 - 00001100 _____ C:\Users\Julian\Desktop\Neues Textdokument (3).txt
2013-09-20 21:24 - 2013-09-20 21:24 - 00891144 _____ C:\Users\Julian\Desktop\SecurityCheck.exe
2013-09-20 21:23 - 2013-09-20 21:24 - 00891144 _____ C:\Users\Julian\Downloads\SecurityCheck.exe
2013-09-20 16:00 - 2013-09-20 16:00 - 00000000 ____D C:\Program Files\ESET
2013-09-20 15:58 - 2013-09-20 15:58 - 02347384 _____ (ESET) C:\Users\Julian\Downloads\esetsmartinstaller_enu (1).exe
2013-09-20 15:54 - 2013-09-20 15:54 - 98481651 _____ C:\Windows\system32\滊탼b
2013-09-19 19:42 - 2013-09-19 19:42 - 00000936 _____ C:\Users\Julian\Desktop\JRT.txt
2013-09-19 19:40 - 2013-09-19 19:40 - 01029675 _____ (Thisisu) C:\Users\Julian\Downloads\JRT (1).exe
2013-09-19 19:40 - 2013-09-19 19:40 - 01029675 _____ (Thisisu) C:\Users\Julian\Desktop\JRT (1).exe
2013-09-19 19:37 - 2013-09-19 19:37 - 00007123 _____ C:\Users\Julian\Desktop\Neues Textdokument (2).txt
2013-09-19 19:30 - 2013-09-19 19:32 - 00000000 ____D C:\AdwCleaner
2013-09-19 19:30 - 2013-09-19 19:30 - 01039554 _____ C:\Users\Julian\Desktop\adwcleaner (1).exe
2013-09-19 19:29 - 2013-09-19 19:30 - 01039554 _____ C:\Users\Julian\Downloads\adwcleaner (1).exe
2013-09-19 14:56 - 2013-09-19 14:56 - 00000000 ___SD C:\ComboFix
2013-09-19 14:43 - 2013-09-19 14:43 - 00015254 _____ C:\ComboFix.txt
2013-09-19 13:59 - 2013-09-19 13:59 - 98352290 _____ C:\Windows\system32\ꀙ繀`
2013-09-19 06:30 - 2013-09-19 06:46 - 00000000 ____D C:\Users\Julian\Desktop\USB BACKUP
2013-09-19 06:16 - 2013-09-19 19:21 - 00003719 _____ C:\Users\Julian\Desktop\Neues Textdokument.txt
2013-09-18 21:03 - 2013-09-18 21:03 - 00013307 _____ C:\Users\Julian\Desktop\ComboFix - Verknüpfung.lnk
2013-09-18 16:14 - 2013-09-18 16:14 - 98144778 _____ C:\Windows\system32\춪䑍`
2013-09-17 21:55 - 2013-09-17 21:57 - 00036347 _____ C:\Users\Julian\Desktop\Addition.txt
2013-09-17 21:52 - 2013-09-17 21:52 - 00000000 ____D C:\FRST
2013-09-17 21:51 - 2013-09-17 21:52 - 01083437 _____ (Farbar) C:\Users\Julian\Downloads\FRST.exe
2013-09-16 20:59 - 2013-09-16 20:59 - 00175560 _____ C:\Users\Julian\Documents\ts3_clientui-win32-1378715177-2013-09-16 20_59_22.071129.dmp
2013-09-16 13:48 - 2013-09-16 13:49 - 00175560 _____ C:\Users\Julian\Documents\ts3_clientui-win32-1378715177-2013-09-16 13_48_55.396928.dmp
2013-09-14 17:19 - 2013-09-14 17:19 - 00000000 ____D C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320]
2013-09-14 15:59 - 2013-09-14 17:18 - 188743680 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part1.rar
2013-09-14 14:24 - 2013-09-14 15:28 - 188743680 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part2.rar
2013-09-14 11:37 - 2013-09-14 11:37 - 03101500 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(240p_H.264-AAC).3gp
2013-09-14 11:37 - 2013-09-14 11:37 - 00364797 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(240p_H.264-AAC).3gp
2013-09-14 11:36 - 2013-09-14 11:37 - 03012259 _____ C:\Users\Julian\Downloads\EA in a Nutshell(240p_H.264-AAC).3gp
2013-09-14 11:33 - 2013-09-14 11:33 - 00227940 _____ C:\Users\Julian\Downloads\The Price is Right losing horn(360p_H.264-AAC).flv
2013-09-14 11:33 - 2013-09-14 11:33 - 00083884 _____ C:\Users\Julian\Downloads\The Price is Right losing horn(240p_H.263-MP3).flv
2013-09-14 11:32 - 2013-09-14 11:33 - 03733430 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(480p_H.264-AAC).flv
2013-09-14 11:31 - 2013-09-14 11:35 - 39099988 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(480p_H.264-AAC).flv
2013-09-14 11:31 - 2013-09-14 11:32 - 02868286 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(360p_H.264-AAC).flv
2013-09-14 11:31 - 2013-09-14 11:31 - 01280340 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(240p_H.263-MP3).flv
2013-09-14 11:29 - 2013-09-14 11:34 - 28110494 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(360p_H.264-AAC).flv
2013-09-14 11:29 - 2013-09-14 11:31 - 12161515 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(240p_H.263-MP3).flv
2013-09-14 11:28 - 2013-09-14 11:31 - 21923324 _____ C:\Users\Julian\Downloads\EA in a Nutshell(480p_H.264-AAC).flv
2013-09-14 11:27 - 2013-09-14 11:29 - 17450391 _____ C:\Users\Julian\Downloads\EA in a Nutshell(360p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 11:29 - 21274511 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(360p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 11:28 - 11681915 _____ C:\Users\Julian\Downloads\EA in a Nutshell(240p_H.263-MP3).flv
2013-09-14 11:26 - 2013-09-14 11:27 - 03254378 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(360p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 11:26 - 02256696 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(240p_H.263-MP3).flv
2013-09-14 11:25 - 2013-09-14 11:26 - 09015976 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(240p_H.263-MP3).flv
2013-09-14 10:29 - 2013-09-14 11:22 - 164296988 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part3.rar
2013-09-14 10:28 - 2013-09-14 11:37 - 02461931 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(240p_H.264-AAC).3gp
2013-09-14 10:28 - 2013-09-14 11:36 - 02262305 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(240p_H.264-AAC).3gp
2013-09-14 10:28 - 2013-09-14 11:36 - 00320838 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(240p_H.264-AAC).3gp
2013-09-14 10:27 - 2013-09-14 11:26 - 20717179 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(480p_H.264-AAC).flv
2013-09-14 10:27 - 2013-09-14 11:26 - 16345758 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_H.264-AAC).flv
2013-09-14 10:27 - 2013-09-14 11:25 - 09331102 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(240p_H.263-MP3).flv
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(720p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(1080p_H.264-AAC).mp4.part
2013-09-14 10:26 - 2013-09-14 10:27 - 29005824 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(720p_VP8-Vorbis).webm.part
2013-09-14 10:26 - 2013-09-14 10:27 - 14006980 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(360p_VP8-Vorbis).webm.part
2013-09-14 10:26 - 2013-09-14 10:27 - 10787572 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_VP8-Vorbis).webm.part
2013-09-13 18:07 - 2013-09-13 18:07 - 00000000 ____D C:\Users\Julian\Downloads\66cs_320kbps
2013-09-13 15:51 - 2013-09-13 16:55 - 164115999 _____ C:\Users\Julian\Downloads\66cs_320kbps.part3.rar
2013-09-12 20:20 - 2013-09-12 21:53 - 183500800 _____ C:\Users\Julian\Downloads\66cs_320kbps.part2.rar
2013-09-12 19:23 - 2013-09-13 18:07 - 183500800 _____ C:\Users\Julian\Downloads\66cs_320kbps.part1.rar
2013-09-12 19:06 - 2013-09-12 19:06 - 00000000 ____D C:\Users\Julian\Downloads\Marteria aka Marsimoto.007
2013-09-12 18:04 - 2013-09-12 19:06 - 209715200 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part2.rar
2013-09-12 16:33 - 2013-09-12 16:58 - 86833768 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part3.rar
2013-09-12 16:06 - 2013-09-12 18:00 - 209715200 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part1.rar
2013-09-11 20:10 - 2013-09-11 20:58 - 01852752 _____ C:\Users\Julian\Downloads\130120130227.rar
2013-09-11 20:00 - 2013-09-11 20:47 - 138741598 _____ C:\Users\Julian\Downloads\MH2006.rar
2013-09-11 19:53 - 2013-09-11 19:54 - 10306736 _____ C:\Users\Julian\Downloads\Marteria-Sekundenschlaf-CDS-DE-2011-VOiCE.rar
2013-09-11 19:47 - 2013-09-11 19:47 - 00000000 ____D C:\Users\Julian\Downloads\martaishah.01
2013-09-11 19:32 - 2013-09-11 19:47 - 47712454 _____ C:\Users\Julian\Downloads\martaishah.01.rar
2013-09-11 19:21 - 2013-09-11 19:54 - 100000021 _____ C:\Users\Julian\Downloads\00000100.part1.rar
2013-09-11 18:44 - 2013-09-11 18:46 - 25165824 _____ C:\Users\Julian\Downloads\MBV07.part1.rar
2013-09-11 16:23 - 2013-09-11 16:23 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf
2013-09-07 08:13 - 2013-09-07 14:13 - 96511910 _____ C:\Windows\system32\ᘻ㠌[
2013-09-06 14:57 - 2013-09-06 14:57 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashRpt
2013-09-06 14:55 - 2013-09-06 14:55 - 00000000 ____D C:\Program Files\Microsoft Chart Controls
2013-09-05 20:37 - 2013-09-05 20:41 - 00001040 _____ C:\Users\Julian\Desktop\Diablo II LoD Serialz.txt
2013-08-28 15:57 - 2013-08-28 15:58 - 00000000 ____D C:\Users\Julian\AppData\Local\PAYDAY 2
2013-08-28 15:57 - 2013-08-28 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-08-25 18:33 - 2013-08-25 18:33 - 00090742 _____ C:\Users\Julian\Desktop\post-13565-Y-BAT-Y-U-DO-DIS-H1MK.jpeg
2013-08-24 11:31 - 2013-08-24 11:31 - 00675988 _____ C:\Users\Julian\Downloads\Minecraft (2).exe
2013-08-22 20:21 - 2013-08-22 20:21 - 00886409 _____ C:\Users\Julian\Downloads\pbsetup (1).zip
2013-08-22 19:52 - 2013-08-22 19:52 - 03820480 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.1.7_115.exe
2013-08-22 18:50 - 2013-08-22 19:35 - 137912227 _____ C:\Users\Julian\Downloads\PayDay 2 Original Soundtrack.rar

==================== One Month Modified Files and Folders =======

2013-09-20 21:27 - 2013-02-13 21:16 - 00000364 _____ C:\Windows\Tasks\WpsUpdateTask_Julian.job
2013-09-20 21:25 - 2013-09-20 21:24 - 00001100 _____ C:\Users\Julian\Desktop\Neues Textdokument (3).txt
2013-09-20 21:24 - 2013-09-20 21:24 - 00891144 _____ C:\Users\Julian\Desktop\SecurityCheck.exe
2013-09-20 21:24 - 2013-09-20 21:23 - 00891144 _____ C:\Users\Julian\Downloads\SecurityCheck.exe
2013-09-20 21:19 - 2012-04-03 10:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 21:16 - 2011-10-21 21:03 - 00000000 ____D C:\Users\Julian\AppData\Roaming\vlc
2013-09-20 20:33 - 2012-06-29 16:46 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000UA.job
2013-09-20 17:19 - 2012-04-03 10:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-20 17:19 - 2011-06-26 16:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-20 16:17 - 2011-06-26 15:27 - 01305084 _____ C:\Windows\WindowsUpdate.log
2013-09-20 16:01 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-20 16:01 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 16:00 - 2013-09-20 16:00 - 00000000 ____D C:\Program Files\ESET
2013-09-20 15:59 - 2011-06-26 15:46 - 01641292 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-20 15:58 - 2013-09-20 15:58 - 02347384 _____ (ESET) C:\Users\Julian\Downloads\esetsmartinstaller_enu (1).exe
2013-09-20 15:54 - 2013-09-20 15:54 - 98481651 _____ C:\Windows\system32\滊탼b
2013-09-20 15:54 - 2012-04-10 16:13 - 00000000 ____D C:\Users\Julian\AppData\Local\LogMeIn Hamachi
2013-09-20 15:53 - 2013-08-09 12:02 - 00022306 _____ C:\Windows\PFRO.log
2013-09-20 15:53 - 2013-08-09 00:26 - 00010660 _____ C:\Windows\setupact.log
2013-09-20 15:53 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-19 19:42 - 2013-09-19 19:42 - 00000936 _____ C:\Users\Julian\Desktop\JRT.txt
2013-09-19 19:40 - 2013-09-19 19:40 - 01029675 _____ (Thisisu) C:\Users\Julian\Downloads\JRT (1).exe
2013-09-19 19:40 - 2013-09-19 19:40 - 01029675 _____ (Thisisu) C:\Users\Julian\Desktop\JRT (1).exe
2013-09-19 19:37 - 2013-09-19 19:37 - 00007123 _____ C:\Users\Julian\Desktop\Neues Textdokument (2).txt
2013-09-19 19:32 - 2013-09-19 19:30 - 00000000 ____D C:\AdwCleaner
2013-09-19 19:30 - 2013-09-19 19:30 - 01039554 _____ C:\Users\Julian\Desktop\adwcleaner (1).exe
2013-09-19 19:30 - 2013-09-19 19:29 - 01039554 _____ C:\Users\Julian\Downloads\adwcleaner (1).exe
2013-09-19 19:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat
2013-09-19 19:21 - 2013-09-19 06:16 - 00003719 _____ C:\Users\Julian\Desktop\Neues Textdokument.txt
2013-09-19 19:08 - 2011-08-12 21:22 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Skype
2013-09-19 14:56 - 2013-09-19 14:56 - 00000000 ___SD C:\ComboFix
2013-09-19 14:56 - 2013-05-07 14:36 - 00000000 ____D C:\Qoobox
2013-09-19 14:43 - 2013-09-19 14:43 - 00015254 _____ C:\ComboFix.txt
2013-09-19 14:37 - 2013-05-07 14:35 - 00000000 ____D C:\Windows\erdnt
2013-09-19 14:37 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2013-09-19 14:33 - 2012-06-29 16:46 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-618426037-2681808743-1371803286-1000Core.job
2013-09-19 14:23 - 2013-05-07 14:32 - 05128554 ____R (Swearware) C:\Users\Julian\Downloads\ComboFix.exe
2013-09-19 13:59 - 2013-09-19 13:59 - 98352290 _____ C:\Windows\system32\ꀙ繀`
2013-09-19 06:46 - 2013-09-19 06:30 - 00000000 ____D C:\Users\Julian\Desktop\USB BACKUP
2013-09-19 06:16 - 2011-10-22 21:17 - 00000000 ____D C:\Users\Julian\Desktop\Musik
2013-09-18 21:03 - 2013-09-18 21:03 - 00013307 _____ C:\Users\Julian\Desktop\ComboFix - Verknüpfung.lnk
2013-09-18 16:58 - 2012-12-20 15:17 - 04861952 ___SH C:\Users\Julian\Desktop\Thumbs.db
2013-09-18 16:32 - 2013-07-10 21:15 - 00000000 ___RD C:\Users\Julian\Desktop\Cro_-_Raop 5_(2013)_(Premium_Edition)_[V0]
2013-09-18 16:14 - 2013-09-18 16:14 - 98144778 _____ C:\Windows\system32\춪䑍`
2013-09-17 21:57 - 2013-09-17 21:55 - 00036347 _____ C:\Users\Julian\Desktop\Addition.txt
2013-09-17 21:52 - 2013-09-20 21:26 - 01083437 _____ (Farbar) C:\Users\Julian\Desktop\FRST.exe
2013-09-17 21:52 - 2013-09-17 21:52 - 00000000 ____D C:\FRST
2013-09-17 21:52 - 2013-09-17 21:51 - 01083437 _____ (Farbar) C:\Users\Julian\Downloads\FRST.exe
2013-09-17 21:49 - 2011-09-02 16:40 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TS3Client
2013-09-16 20:59 - 2013-09-16 20:59 - 00175560 _____ C:\Users\Julian\Documents\ts3_clientui-win32-1378715177-2013-09-16 20_59_22.071129.dmp
2013-09-16 13:49 - 2013-09-16 13:48 - 00175560 _____ C:\Users\Julian\Documents\ts3_clientui-win32-1378715177-2013-09-16 13_48_55.396928.dmp
2013-09-14 17:31 - 2012-08-31 17:32 - 00000000 ____D C:\Program Files\JDownloader 2
2013-09-14 17:19 - 2013-09-14 17:19 - 00000000 ____D C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320]
2013-09-14 17:18 - 2013-09-14 15:59 - 188743680 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part1.rar
2013-09-14 15:37 - 2011-08-31 14:20 - 00280792 _____ C:\Windows\system32\PnkBstrB.xtr
2013-09-14 15:37 - 2011-08-31 14:09 - 00280792 _____ C:\Windows\system32\PnkBstrB.exe
2013-09-14 15:37 - 2011-08-31 14:09 - 00139112 _____ C:\Windows\system32\Drivers\PnkBstrK.sys
2013-09-14 15:36 - 2011-08-31 14:09 - 00280856 _____ C:\Windows\system32\PnkBstrB.ex0
2013-09-14 15:28 - 2013-09-14 14:24 - 188743680 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part2.rar
2013-09-14 12:52 - 2012-04-03 13:38 - 00000000 ____D C:\Users\Julian\Desktop\Internetz
2013-09-14 11:37 - 2013-09-14 11:37 - 03101500 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(240p_H.264-AAC).3gp
2013-09-14 11:37 - 2013-09-14 11:37 - 00364797 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(240p_H.264-AAC).3gp
2013-09-14 11:37 - 2013-09-14 11:36 - 03012259 _____ C:\Users\Julian\Downloads\EA in a Nutshell(240p_H.264-AAC).3gp
2013-09-14 11:37 - 2013-09-14 10:28 - 02461931 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(240p_H.264-AAC).3gp
2013-09-14 11:36 - 2013-09-14 10:28 - 02262305 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(240p_H.264-AAC).3gp
2013-09-14 11:36 - 2013-09-14 10:28 - 00320838 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(240p_H.264-AAC).3gp
2013-09-14 11:35 - 2013-09-14 11:31 - 39099988 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(480p_H.264-AAC).flv
2013-09-14 11:34 - 2013-09-14 11:29 - 28110494 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(360p_H.264-AAC).flv
2013-09-14 11:33 - 2013-09-14 11:33 - 00227940 _____ C:\Users\Julian\Downloads\The Price is Right losing horn(360p_H.264-AAC).flv
2013-09-14 11:33 - 2013-09-14 11:33 - 00083884 _____ C:\Users\Julian\Downloads\The Price is Right losing horn(240p_H.263-MP3).flv
2013-09-14 11:33 - 2013-09-14 11:32 - 03733430 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(480p_H.264-AAC).flv
2013-09-14 11:32 - 2013-09-14 11:31 - 02868286 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(360p_H.264-AAC).flv
2013-09-14 11:31 - 2013-09-14 11:31 - 01280340 _____ C:\Users\Julian\Downloads\GIGA DRILL MAXIMUM!(240p_H.263-MP3).flv
2013-09-14 11:31 - 2013-09-14 11:29 - 12161515 _____ C:\Users\Julian\Downloads\Full Metal Alchemist Brotherhood AMV - Witchcraft(240p_H.263-MP3).flv
2013-09-14 11:31 - 2013-09-14 11:28 - 21923324 _____ C:\Users\Julian\Downloads\EA in a Nutshell(480p_H.264-AAC).flv
2013-09-14 11:29 - 2013-09-14 11:27 - 17450391 _____ C:\Users\Julian\Downloads\EA in a Nutshell(360p_H.264-AAC).flv
2013-09-14 11:29 - 2013-09-14 11:26 - 21274511 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(360p_H.264-AAC).flv
2013-09-14 11:28 - 2013-09-14 11:26 - 11681915 _____ C:\Users\Julian\Downloads\EA in a Nutshell(240p_H.263-MP3).flv
2013-09-14 11:27 - 2013-09-14 11:26 - 03254378 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(360p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 11:26 - 02256696 _____ C:\Users\Julian\Downloads\Chouginga Giga Drill Breaker!(240p_H.263-MP3).flv
2013-09-14 11:26 - 2013-09-14 11:25 - 09015976 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(240p_H.263-MP3).flv
2013-09-14 11:26 - 2013-09-14 10:27 - 20717179 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(480p_H.264-AAC).flv
2013-09-14 11:26 - 2013-09-14 10:27 - 16345758 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_H.264-AAC).flv
2013-09-14 11:25 - 2013-09-14 10:27 - 09331102 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(240p_H.263-MP3).flv
2013-09-14 11:22 - 2013-09-14 10:29 - 164296988 _____ C:\Users\Julian\Downloads\VA - Club Sounds Vol.65 (2013) [320].part3.rar
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(720p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:27 - 00000000 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(1080p_H.264-AAC).mp4.part
2013-09-14 10:27 - 2013-09-14 10:26 - 29005824 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(720p_VP8-Vorbis).webm.part
2013-09-14 10:27 - 2013-09-14 10:26 - 14006980 _____ C:\Users\Julian\Downloads\Black Lagoon AMV - Red Fraction(360p_VP8-Vorbis).webm.part
2013-09-14 10:27 - 2013-09-14 10:26 - 10787572 _____ C:\Users\Julian\Downloads\_HD_ Piano Tutorial - How to play the hardest song of all time(360p_VP8-Vorbis).webm.part
2013-09-13 18:07 - 2013-09-13 18:07 - 00000000 ____D C:\Users\Julian\Downloads\66cs_320kbps
2013-09-13 18:07 - 2013-09-12 19:23 - 183500800 _____ C:\Users\Julian\Downloads\66cs_320kbps.part1.rar
2013-09-13 16:55 - 2013-09-13 15:51 - 164115999 _____ C:\Users\Julian\Downloads\66cs_320kbps.part3.rar
2013-09-12 21:53 - 2013-09-12 20:20 - 183500800 _____ C:\Users\Julian\Downloads\66cs_320kbps.part2.rar
2013-09-12 19:06 - 2013-09-12 19:06 - 00000000 ____D C:\Users\Julian\Downloads\Marteria aka Marsimoto.007
2013-09-12 19:06 - 2013-09-12 18:04 - 209715200 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part2.rar
2013-09-12 18:00 - 2013-09-12 16:06 - 209715200 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part1.rar
2013-09-12 16:58 - 2013-09-12 16:33 - 86833768 _____ C:\Users\Julian\Downloads\Marteria aka Marsimoto.007.part3.rar
2013-09-11 20:58 - 2013-09-11 20:10 - 01852752 _____ C:\Users\Julian\Downloads\130120130227.rar
2013-09-11 20:47 - 2013-09-11 20:00 - 138741598 _____ C:\Users\Julian\Downloads\MH2006.rar
2013-09-11 19:54 - 2013-09-11 19:53 - 10306736 _____ C:\Users\Julian\Downloads\Marteria-Sekundenschlaf-CDS-DE-2011-VOiCE.rar
2013-09-11 19:54 - 2013-09-11 19:21 - 100000021 _____ C:\Users\Julian\Downloads\00000100.part1.rar
2013-09-11 19:47 - 2013-09-11 19:47 - 00000000 ____D C:\Users\Julian\Downloads\martaishah.01
2013-09-11 19:47 - 2013-09-11 19:32 - 47712454 _____ C:\Users\Julian\Downloads\martaishah.01.rar
2013-09-11 18:46 - 2013-09-11 18:44 - 25165824 _____ C:\Users\Julian\Downloads\MBV07.part1.rar
2013-09-11 16:23 - 2013-09-11 16:23 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf
2013-09-11 16:15 - 2012-09-15 22:35 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-09-10 17:38 - 2011-06-26 16:06 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-09-08 11:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-09-07 17:06 - 2011-12-28 20:02 - 00000000 ____D C:\Users\Julian\AppData\Roaming\.minecraft
2013-09-07 14:13 - 2013-09-07 08:13 - 96511910 _____ C:\Windows\system32\ᘻ㠌[
2013-09-06 16:19 - 2011-08-31 14:09 - 00076888 _____ C:\Windows\system32\PnkBstrA.exe
2013-09-06 16:18 - 2011-08-31 14:19 - 00000000 ____D C:\Users\Julian\AppData\Local\PunkBuster
2013-09-06 14:57 - 2013-09-06 14:57 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashRpt
2013-09-06 14:56 - 2011-09-08 19:10 - 00000000 ____D C:\Users\Julian\Documents\My Games
2013-09-06 14:55 - 2013-09-06 14:55 - 00000000 ____D C:\Program Files\Microsoft Chart Controls
2013-09-06 14:55 - 2011-08-31 14:09 - 00138056 _____ C:\Users\Julian\AppData\Roaming\PnkBstrK.sys
2013-09-05 20:41 - 2013-09-05 20:37 - 00001040 _____ C:\Users\Julian\Desktop\Diablo II LoD Serialz.txt
2013-09-05 15:37 - 2013-05-07 14:35 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-05 15:37 - 2012-10-18 17:21 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-05 15:37 - 2012-10-18 17:21 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-29 14:42 - 2009-07-14 06:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-28 15:58 - 2013-08-28 15:57 - 00000000 ____D C:\Users\Julian\AppData\Local\PAYDAY 2
2013-08-28 15:57 - 2013-08-28 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-08-28 15:57 - 2011-12-22 23:29 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-08-25 18:33 - 2013-08-25 18:33 - 00090742 _____ C:\Users\Julian\Desktop\post-13565-Y-BAT-Y-U-DO-DIS-H1MK.jpeg
2013-08-24 11:31 - 2013-08-24 11:31 - 00675988 _____ C:\Users\Julian\Downloads\Minecraft (2).exe
2013-08-22 20:21 - 2013-08-22 20:21 - 00886409 _____ C:\Users\Julian\Downloads\pbsetup (1).zip
2013-08-22 19:55 - 2011-09-30 23:14 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Origin
2013-08-22 19:55 - 2011-09-30 23:14 - 00000000 ____D C:\Users\Julian\AppData\Local\Origin
2013-08-22 19:55 - 2011-09-30 23:14 - 00000000 ____D C:\ProgramData\Origin
2013-08-22 19:54 - 2011-09-30 23:14 - 00000000 ____D C:\Program Files\Origin
2013-08-22 19:53 - 2011-10-01 09:15 - 00000000 ____D C:\Program Files\Battlelog Web Plugins
2013-08-22 19:52 - 2013-08-22 19:52 - 03820480 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.1.7_115.exe
2013-08-22 19:35 - 2013-08-22 18:50 - 137912227 _____ C:\Users\Julian\Downloads\PayDay 2 Original Soundtrack.rar

Files to move or delete:
====================
C:\ProgramData\hash.dat


Some content of TEMP:
====================
C:\Users\Julian\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-18 18:26

==================== End Of Log ============================
--- --- ---

--- --- ---


Und ein Problem habe ich tatsächlich noch die Ordner, wegen denen ich eigentlich diesen Thread geöffnet hab kann ich immernoch nicht löschen, mir wird immernoch der Zugriff verweigert.

schrauber 21.09.2013 10:46
Lösch mal bitte noch den Windows.old Ordner.

Downloade dir bitte Windows Repair (All In One) von hier.

Jalian 21.09.2013 11:56
Ist Windows.old der Ordner der bei mir ca. 140Gb umfasst in dem unter anderem Microsoft drin ist?

Ich bin mir nicht sicher. :wtf:


Alle Zeitangaben in WEZ +1. Es ist jetzt 01:25 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19