Trojaner-Board - Malwarebytes Anti-Malware findet (Adware.Packed.Ranver) u. (PUP.Optional.Softonic.A)

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Malwarebytes Anti-Malware findet (Adware.Packed.Ranver) u. (PUP.Optional.Softonic.A) (https://www.trojaner-board.de/142719-malwarebytes-anti-malware-findet-adware-packed-ranver-u-pup-optional-softonic-a.html)

Malwarebytes Anti-Malware findet (Adware.Packed.Ranver) u. (PUP.Optional.Softonic.A)

Hallo ich habe seit einiger Zeit ein Problem mit einem Spiel. (Stronghold Kingdoms)
Deswegen Habe ich mal wieder Malwarebytes Anti-Malware laufen lassen. Und es hat etwas gefunden.

PHP-Code:

   Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

 
Datenbank Version: v2013.10.08.05

 
Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16686

Nova :: ZOCKMASCHINE [Administrator]

 
08.10.2013 17:38:20

MBAM-log-2013-10-08 (17-45-17).txt

 
Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 228165

Laufzeit: 3 Minute(n), 43 Sekunde(n)

 
Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Dateien: 3

C:\Users\Nova\AppData\Local\Temp\plus-hd-2-6.exe (Adware.Packed.Ranver) -> Keine Aktion durchgeführt.

C:\Users\Nova\Downloads\SoftonicDownloader_fuer_stronghold-kingdoms(1).exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt.

C:\Users\Nova\Downloads\SoftonicDownloader_fuer_stronghold-kingdoms.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt.

 
(Ende)

Dies verursacht warscheinlich nicht das Problem mit dem Spiel. Aber es könnte ein Zusammenhang bestehen.

Hier die Meldungen vom Spiel:

PHP-Code:

   Beschreibung:

  Stopped working

 
Problemsignatur:

  Problemereignisname:    CLR20r3

  Problemsignatur 01:    strongholdkingdoms.exe

  Problemsignatur 02:    0.0.0.0

  Problemsignatur 03:    4de5017f

  Problemsignatur 04:    System

  Problemsignatur 05:    2.0.0.0

  Problemsignatur 06:    506c18e6

  Problemsignatur 07:    22f3

  Problemsignatur 08:    f9

  Problemsignatur 09:    System.Net.WebException

  Betriebsystemversion:    6.1.7601.2.1.0.768.3

  Gebietsschema-ID:    1031

 
Lesen Sie unsere Datenschutzbestimmungen online:

  hxxp://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0407

 
Wenn die Onlinedatenschutzbestimmungen nicht verfügbar sind, lesen Sie unsere Datenschutzbestimmungen offline:

  C:\Windows\system32\de-DE\erofflps.txt

Könnt Ihr mir bitte bei meinem Problem helfen?

Danke Nova82

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hier die Ergebnisse:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by Nova (administrator) on ZOCKMASCHINE on 08-10-2013 23:44:47

Running from C:\Users\Nova\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

() C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe

() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Akamai Technologies, Inc.) C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) c:\program files (x86)\avira\antivir desktop\avgnt.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-09-15] ()

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-04-24] (IDT, Inc.)

HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)

HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1

HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-05] (Valve Corporation)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKCU\...\Policies\system: [DisableLockWorkstation] 0

HKCU\...\Policies\system: [DisableChangePassword] 0

HKCU\...\Policies\system: [LogonHoursAction] 2

HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-12-09] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc)

HKLM-x32\...\Run: [BATINDICATOR] - C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe [2068992 2009-05-09] (Hewlett-Packard)

HKLM-x32\...\Run: [LaunchHPOSIAPP] - C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe [385024 2009-04-04] (Hewlett-Packard)

HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-09-30] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKU\Maren\...\Policies\system: [LogonHoursAction] 2

HKU\Maren\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF

SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}

SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF

SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}

SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

SearchScopes: HKCU - DefaultScope {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF

SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF

SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}

SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog9-x64 01 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 02 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 03 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 04 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 05 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 06 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 07 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 08 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 09 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 10 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 21 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default

FF user.js: detected! => C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\user.js

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nova\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF SearchPlugin: C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\searchplugins\safeguard-secure-search.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc)

S2 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [x]

S2 UPDATESRV; "C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe" /service [x]

S4 VSSERV; "C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe" /service [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-02-01] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-02-01] ()

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 bdfwfpf_pc; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [x]

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-08 23:43 - 2013-10-08 23:43 - 01954124 _____ (Farbar) C:\Users\Nova\Downloads\FRST64.exe

2013-10-08 23:43 - 2013-10-08 23:43 - 00000000 ____D C:\FRST

2013-10-08 17:52 - 2013-10-08 17:53 - 122946048 _____ C:\Users\Nova\Downloads\avira14_free_antivirus_de.exe

2013-10-08 17:40 - 2013-10-08 17:40 - 00543864 _____ (Aeria Games) C:\Users\Nova\Downloads\dynastywarriors_us_downloader.exe

2013-10-08 17:37 - 2013-10-08 17:37 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(2).exe

2013-10-06 13:57 - 2013-10-06 13:57 - 00000000 ____D C:\Users\Nova\Documents\AeriaGames

2013-10-06 13:17 - 2013-10-08 17:41 - 00000000 ____D C:\Users\Nova\AppData\Local\Akamai

2013-10-06 13:17 - 2013-10-06 13:17 - 00000000 ____D C:\AeriaGames

2013-10-05 16:09 - 2013-10-05 16:10 - 00000000 ____D C:\Users\Maren\Documents\Waschmaschine Mediamarkt

2013-10-03 21:16 - 2013-10-03 21:16 - 00000000 ____D C:\Program Files (x86)\Firefly Studios

2013-10-03 13:30 - 2013-10-03 13:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\LibreOffice

2013-10-03 13:27 - 2013-10-03 13:28 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4

2013-10-01 21:34 - 2013-10-08 17:14 - 00000000 ____D C:\ProgramData\Ashampoo

2013-10-01 21:34 - 2013-10-01 21:34 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2013-10-01 20:39 - 2013-10-01 20:39 - 00000000 ____D C:\ProgramData\Babylon

2013-10-01 20:34 - 2013-10-01 20:34 - 01338744 _____ (Uniblue Systems Ltd                                         ) C:\Users\Nova\Downloads\speedupmypc.exe

2013-10-01 19:59 - 2013-10-01 19:59 - 98612549 _____ C:\Windows\SysWOW64\ﴲ鉣蹬ž

2013-10-01 14:59 - 2013-10-01 14:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-24 19:45 - 2013-10-08 22:50 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-24 19:45 - 2013-10-08 19:50 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-24 19:45 - 2013-09-24 19:45 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-09-24 19:45 - 2013-09-24 19:45 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Users\Nova\AppData\Local\Google

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Program Files (x86)\Google

2013-09-24 19:44 - 2013-09-24 19:44 - 00784856 _____ (Google Inc.) C:\Users\Nova\Downloads\GoogleEarthPluginSetup.exe

2013-09-14 23:50 - 2013-09-14 23:50 - 00478528 _____ C:\Users\Nova\Downloads\mvc2010de-Downloader.exe

2013-09-14 23:50 - 2013-09-14 23:50 - 00000000 ____D C:\Users\Nova\AppData\Local\DownloadGuide

2013-09-14 23:49 - 2013-10-08 17:31 - 00001912 _____ C:\Windows\epplauncher.mif

2013-09-14 23:46 - 2013-09-14 23:46 - 13842112 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall(1).exe

2013-09-14 23:46 - 2013-09-14 23:46 - 11261784 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall.exe

2013-09-14 23:25 - 2013-10-08 17:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-14 23:25 - 2013-09-14 23:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-09-14 23:25 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-12 23:56 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 23:56 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 23:56 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-12 23:56 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 23:56 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 23:56 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 23:56 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 23:56 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 23:56 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 23:56 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 23:56 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 23:56 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-12 23:56 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-12 23:56 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-12 23:56 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-12 23:56 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-12 23:56 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-12 23:56 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 23:56 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-12 23:56 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 23:56 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-12 12:50 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-12 12:50 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-12 12:50 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-12 12:50 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-12 12:50 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-12 12:50 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-12 12:50 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-12 12:50 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-12 12:50 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-12 12:50 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-12 12:50 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-12 12:50 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-12 12:50 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-12 12:50 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-12 12:50 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-12 12:50 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-12 12:50 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-12 12:50 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-12 12:50 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-12 12:50 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-12 12:50 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-12 12:50 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-12 12:50 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-12 12:50 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-12 12:50 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-12 12:50 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-09-10 20:46 - 2013-09-10 20:47 - 00000000 ____D C:\Users\Nova\AppData\Local\Skyrim

2013-09-10 14:15 - 2013-09-10 14:15 - 00000000 ____D C:\Users\Maren\Documents\bloodbowlchaos
 

==================== One Month Modified Files and Folders =======
 

2013-10-08 23:43 - 2013-10-08 23:43 - 01954124 _____ (Farbar) C:\Users\Nova\Downloads\FRST64.exe

2013-10-08 23:43 - 2013-10-08 23:43 - 00000000 ____D C:\FRST

2013-10-08 23:43 - 2011-04-24 20:37 - 01228447 _____ C:\Windows\WindowsUpdate.log

2013-10-08 22:50 - 2013-09-24 19:45 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-08 22:50 - 2012-06-12 17:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-08 21:01 - 2011-10-11 21:55 - 00000000 ___RD C:\Users\Nova\Desktop\Spiele

2013-10-08 20:20 - 2011-10-14 18:10 - 00000000 ____D C:\Program Files (x86)\Steam

2013-10-08 19:56 - 2011-04-24 21:16 - 00665070 _____ C:\Windows\system32\perfh007.dat

2013-10-08 19:56 - 2011-04-24 21:16 - 00134980 _____ C:\Windows\system32\perfc007.dat

2013-10-08 19:56 - 2009-07-14 07:13 - 01529102 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-08 19:50 - 2013-09-24 19:45 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-08 18:35 - 2011-04-24 20:45 - 00000000 ____D C:\ProgramData\PDFC

2013-10-08 17:53 - 2013-10-08 17:52 - 122946048 _____ C:\Users\Nova\Downloads\avira14_free_antivirus_de.exe

2013-10-08 17:53 - 2011-10-14 19:35 - 00000000 ___RD C:\Users\Nova\Desktop\Programme

2013-10-08 17:42 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-08 17:42 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-08 17:41 - 2013-10-06 13:17 - 00000000 ____D C:\Users\Nova\AppData\Local\Akamai

2013-10-08 17:40 - 2013-10-08 17:40 - 00543864 _____ (Aeria Games) C:\Users\Nova\Downloads\dynastywarriors_us_downloader.exe

2013-10-08 17:38 - 2013-09-14 23:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-10-08 17:37 - 2013-10-08 17:37 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(2).exe

2013-10-08 17:35 - 2013-08-14 10:14 - 00180700 _____ C:\Windows\PFRO.log

2013-10-08 17:35 - 2013-08-14 10:14 - 00007562 _____ C:\Windows\setupact.log

2013-10-08 17:35 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-08 17:31 - 2013-09-14 23:49 - 00001912 _____ C:\Windows\epplauncher.mif

2013-10-08 17:31 - 2011-10-11 20:27 - 00000000 ____D C:\Users\Nova\AppData\Roaming\WildTangent

2013-10-08 17:31 - 2011-04-24 20:47 - 00000000 ____D C:\ProgramData\WildTangent

2013-10-08 17:20 - 2011-10-11 20:26 - 00063104 _____ C:\Users\Nova\AppData\Local\GDIPFONTCACHEV1.DAT

2013-10-08 17:20 - 2011-10-10 15:18 - 00000000 ____D C:\Users\Nova

2013-10-08 17:14 - 2013-10-01 21:34 - 00000000 ____D C:\ProgramData\Ashampoo

2013-10-08 17:14 - 2012-06-12 17:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-10-08 17:14 - 2011-10-17 13:26 - 00000000 ____D C:\Users\Maren

2013-10-08 17:14 - 2011-10-11 21:49 - 00000000 ____D C:\Spiele

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Windows\en

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Windows\de

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files\Windows Live

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files (x86)\Windows Live

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-10-08 17:14 - 2009-07-14 09:44 - 00000000 ___RD C:\Users\Public\Recorded TV

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-10-08 17:11 - 2011-10-18 14:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\SoftGrid Client

2013-10-08 17:10 - 2013-02-20 10:29 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-10-08 17:10 - 2012-09-09 23:00 - 00000000 ____D C:\ProgramData\Firefly Studios

2013-10-08 17:10 - 2011-11-18 22:13 - 00000000 ____D C:\Users\Maren\AppData\Local\Hewlett-Packard

2013-10-06 13:57 - 2013-10-06 13:57 - 00000000 ____D C:\Users\Nova\Documents\AeriaGames

2013-10-06 13:17 - 2013-10-06 13:17 - 00000000 ____D C:\AeriaGames

2013-10-05 16:10 - 2013-10-05 16:09 - 00000000 ____D C:\Users\Maren\Documents\Waschmaschine Mediamarkt

2013-10-03 21:16 - 2013-10-03 21:16 - 00000000 ____D C:\Program Files (x86)\Firefly Studios

2013-10-03 18:48 - 2011-10-20 19:26 - 00075440 _____ C:\Users\Maren\AppData\Local\GDIPFONTCACHEV1.DAT

2013-10-03 13:30 - 2013-10-03 13:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\LibreOffice

2013-10-03 13:28 - 2013-10-03 13:27 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4

2013-10-03 11:20 - 2011-12-04 13:39 - 00000000 ____D C:\Users\Maren\AppData\Roaming\CyberLink

2013-10-01 21:42 - 2009-07-24 21:22 - 00000000 ____D C:\Windows\Panther

2013-10-01 21:34 - 2013-10-01 21:34 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2013-10-01 20:39 - 2013-10-01 20:39 - 00000000 ____D C:\ProgramData\Babylon

2013-10-01 20:34 - 2013-10-01 20:34 - 01338744 _____ (Uniblue Systems Ltd                                         ) C:\Users\Nova\Downloads\speedupmypc.exe

2013-10-01 20:07 - 2012-06-12 17:44 - 00000000 ____D C:\Users\Nova\AppData\Local\Mozilla

2013-10-01 19:59 - 2013-10-01 19:59 - 98612549 _____ C:\Windows\SysWOW64\ﴲ鉣蹬ž

2013-10-01 19:47 - 2011-10-10 15:19 - 00000000 ____D C:\Users\Nova\AppData\Local\Hewlett-Packard

2013-10-01 19:46 - 2011-12-25 14:46 - 00000000 ____D C:\Users\Nova\AppData\Roaming\CyberLink

2013-10-01 15:25 - 2013-08-20 21:17 - 00000000 ____D C:\Users\Nova\AppData\Roaming\SolForge

2013-10-01 14:59 - 2013-10-01 14:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-30 11:01 - 2013-08-14 20:34 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-30 11:01 - 2013-08-14 20:34 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-30 11:01 - 2013-08-14 20:34 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-09-27 19:49 - 2011-10-14 16:57 - 00000000 ____D C:\Users\Nova\AppData\Local\CrashDumps

2013-09-24 19:45 - 2013-09-24 19:45 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-09-24 19:45 - 2013-09-24 19:45 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Users\Nova\AppData\Local\Google

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Program Files (x86)\Google

2013-09-24 19:44 - 2013-09-24 19:44 - 00784856 _____ (Google Inc.) C:\Users\Nova\Downloads\GoogleEarthPluginSetup.exe

2013-09-20 22:50 - 2012-06-12 17:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-20 22:50 - 2012-04-14 11:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-20 22:50 - 2011-10-14 16:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-16 14:21 - 2013-05-15 21:30 - 00000000 ____D C:\Users\Maren\Documents\EBAY

2013-09-16 14:21 - 2011-10-17 13:27 - 00000000 ____D C:\Users\Maren\AppData\Local\PDFC

2013-09-14 23:50 - 2013-09-14 23:50 - 00478528 _____ C:\Users\Nova\Downloads\mvc2010de-Downloader.exe

2013-09-14 23:50 - 2013-09-14 23:50 - 00000000 ____D C:\Users\Nova\AppData\Local\DownloadGuide

2013-09-14 23:46 - 2013-09-14 23:46 - 13842112 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall(1).exe

2013-09-14 23:46 - 2013-09-14 23:46 - 11261784 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall.exe

2013-09-14 23:30 - 2012-12-23 18:00 - 00000000 ____D C:\ProgramData\Wincert

2013-09-14 23:25 - 2013-09-14 23:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-09-14 17:20 - 2012-04-15 18:01 - 00000000 ____D C:\Users\Maren\Documents\My Games

2013-09-14 17:19 - 2011-10-17 13:26 - 00000000 ___RD C:\Users\Maren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-14 17:19 - 2011-10-17 13:26 - 00000000 ___RD C:\Users\Maren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-14 17:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-13 19:04 - 2011-10-11 20:25 - 00000000 ___RD C:\Users\Nova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-13 19:04 - 2011-10-11 20:25 - 00000000 ___RD C:\Users\Nova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-13 18:58 - 2009-07-14 06:45 - 00286280 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 23:56 - 2011-10-18 14:29 - 01555784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-09-12 23:56 - 2011-10-18 14:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client

2013-09-12 23:55 - 2013-08-17 13:59 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 23:54 - 2011-12-05 00:41 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-12 19:30 - 2012-01-08 20:30 - 00003226 _____ C:\Windows\System32\Tasks\HPCeeScheduleForZOCKMASCHINE$

2013-09-12 19:30 - 2012-01-08 20:30 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForZOCKMASCHINE$.job

2013-09-10 20:47 - 2013-09-10 20:46 - 00000000 ____D C:\Users\Nova\AppData\Local\Skyrim

2013-09-10 20:46 - 2013-08-20 21:16 - 00055305 _____ C:\Windows\DirectX.log

2013-09-10 20:45 - 2011-10-24 19:28 - 00000000 ____D C:\Users\Nova\Documents\My Games

2013-09-10 14:15 - 2013-09-10 14:15 - 00000000 ____D C:\Users\Maren\Documents\bloodbowlchaos

2013-09-08 15:00 - 2013-09-07 20:36 - 00000000 ____D C:\Users\Nova\Documents\BloodBowlChaos
 

Some content of TEMP:

====================

C:\Users\Nova\AppData\Local\Temp\avgnt.exe

C:\Users\Nova\AppData\Local\Temp\silent_pricora_DE.exe

C:\Users\Nova\AppData\Local\Temp\SkypeSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-02 21:17
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Und

Addition Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013

Ran by Nova at 2013-10-08 23:45:23

Running from C:\Users\Nova\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3)

Adobe AIR (x32 Version: 3.6.0.5970)

Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Agatha Christie - Peril at End House (x32 Version: 2.2.0.95)

Age of Wonders Shadow Magic (x32)

Airline Tycoon - Deluxe (x32)

Akamai NetSession Interface (HKCU)

Amazon MP3-Downloader 1.0.9 (x32)

Apple Application Support (x32 Version: 2.3.4)

Apple Mobile Device Support (Version: 6.1.0.13)

Apple Software Update (x32 Version: 2.1.3.127)

ATI Catalyst Install Manager (Version: 3.0.808.0)

ATI Stream SDK v2 Developer (Version: 2.2.0.0)

Avira Free Antivirus (x32 Version: 14.0.0.383)

Baldur's Gate: Enhanced Edition (x32)

Battlefield Academy (x32 Version: 1.52)

Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)

Blasterball 3 (x32 Version: 2.2.0.95)

Blood Bowl: Chaos Edition (x32)

Blood Bowl: Legendary Edition (x32)

Bonjour (Version: 3.0.0.10)

Bounce Symphony (x32 Version: 2.2.0.95)

Build-a-Lot - The Elizabethan Era (x32 Version: 2.2.0.95)

Caesar IV (x32 Version: 0.18.13)

Cake Mania (x32 Version: 2.2.0.95)

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center InstallProxy (x32 Version: 2010.1208.2156.39317)

Catalyst Control Center Localization All (x32 Version: 2010.1208.2156.39317)

CCC Help Chinese Standard (x32 Version: 2010.1208.2155.39317)

CCC Help Chinese Traditional (x32 Version: 2010.1208.2155.39317)

CCC Help Czech (x32 Version: 2010.1208.2155.39317)

CCC Help Danish (x32 Version: 2010.1208.2155.39317)

CCC Help Dutch (x32 Version: 2010.1208.2155.39317)

CCC Help English (x32 Version: 2010.1208.2155.39317)

CCC Help Finnish (x32 Version: 2010.1208.2155.39317)

CCC Help French (x32 Version: 2010.1208.2155.39317)

CCC Help German (x32 Version: 2010.1208.2155.39317)

CCC Help Greek (x32 Version: 2010.1208.2155.39317)

CCC Help Hungarian (x32 Version: 2010.1208.2155.39317)

CCC Help Italian (x32 Version: 2010.1208.2155.39317)

CCC Help Japanese (x32 Version: 2010.1208.2155.39317)

CCC Help Korean (x32 Version: 2010.1208.2155.39317)

CCC Help Norwegian (x32 Version: 2010.1208.2155.39317)

CCC Help Polish (x32 Version: 2010.1208.2155.39317)

CCC Help Portuguese (x32 Version: 2010.1208.2155.39317)

CCC Help Russian (x32 Version: 2010.1208.2155.39317)

CCC Help Spanish (x32 Version: 2010.1208.2155.39317)

CCC Help Swedish (x32 Version: 2010.1208.2155.39317)

CCC Help Thai (x32 Version: 2010.1208.2155.39317)

ccc-core-static (x32 Version: 2010.1208.2156.39317)

ccc-utility64 (Version: 2010.1208.2156.39317)

Chuzzle Deluxe (x32 Version: 2.2.0.95)

CyberLink DVD Suite Deluxe (x32 Version: 7.0.3210)

D3DX10 (x32 Version: 15.4.2368.0902)

Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95)

Dungeons and Dragons - Neverwinter Nights Complete (x32 Version: 1.0.0)

DVD Menu Pack for HP MediaSmart Video (x32 Version: 4.2.4412)

Dynasty Warriors Online (x32)

Eador. Masters of the Broken World (x32)

ElsterFormular (x32 Version: 14.1.20130301)

Europa Universalis III (x32)

Fantasy Wars (x32)

Farm Frenzy (x32 Version: 2.2.0.95)

FATE (x32 Version: 2.2.0.95)

Google Earth Plug-in (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.21.153)

Grotesque-Tactics2 1.5.0.0 (x32)

HERRSCHER DES OLYMP - ZEUS & HERRSCHER von ATLANTIS - POSEIDON (x32)

HP Auto (Version: 1.0.12494.3472)

HP Client Services (Version: 1.0.12656.3472)

HP Customer Experience Enhancements (x32 Version: 6.0.1.7)

HP Games (x32 Version: 1.0.1.5)

HP MAINSTREAM KEYBOARD (x32 Version: 1.4.3.0)

HP MediaSmart DVD (x32 Version: 4.2.4725)

HP MediaSmart Music (x32 Version: 4.2.4517)

HP MediaSmart Photo (x32 Version: 4.2.4513)

HP MediaSmart SmartMenu (Version: 3.1.2.4)

HP MediaSmart Video (x32 Version: 4.2.4522)

HP Odometer (x32 Version: 2.10.0000)

HP Setup (x32 Version: 8.4.4400.3525)

HP Setup Manager (x32 Version: 1.0.12844.3519)

HP Support Assistant (x32 Version: 5.1.8.12)

HP Support Information (x32 Version: 10.1.1000)

HP Update (x32 Version: 5.002.003.003)

HP Vision Hardware Diagnostics (Version: 2.1.6.0)

HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3)

HydraVision (x32 Version: 4.2.184.0)

IDT Audio (x32 Version: 1.0.6302.0)

Insaniquarium Deluxe (x32 Version: 2.2.0.95)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)

Iron Grip: Marauders (x32)

iTunes (Version: 11.0.5.5)

Jagged Alliance - Back in Action (x32)

Jewel Quest II (x32 Version: 2.2.0.95)

Jewel Quest Solitaire (x32 Version: 2.2.0.95)

John Deere Drive Green (x32 Version: 2.2.0.95)

Junk Mail filter update (x32 Version: 15.4.3502.0922)

King’s Bounty: The Legend (Nur entfernen) (x32 Version: 1.0.0.0)

Kohan II Kings of War (x32 Version: 0.2.0.0)

LabelPrint (x32 Version: 2.5.3130)

LightScribe System Software (x32 Version: 1.18.20.1)

Magic: The Gathering – Tactics (x32)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

MechWarrior Online (HKCU Version: 1.1.1.0)

MechWarrior Online (x32 Version: 1.1.1.0)

meinfotoalbum (x32)

Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Office 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)

Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0)

Microsoft PowerPoint Viewer (x32 Version: 14.0.6029.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106)

Might & Magic Heroes VI (x32 Version: 1.8)

Movie Theme Pack for HP MediaSmart Video (x32 Version: 4.2.4412)

Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)

Mozilla Maintenance Service (x32 Version: 24.0)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT_amd64 (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)

MusicStation (x32 Version: 1.0.1.5)

MySQL Connector/ODBC 3.51 (x32 Version: 3.51.12)

OpenAL (x32)

Orcs Must Die! 2 (x32)

Panzer Corps (x32 Version: 1.00)

Panzer Corps Afrika Korps (x32 Version: 1.12)

Panzer Corps Allied Corps (x32 Version: 1.20)

Panzer Corps Grand Campaign MegaPack 39-45 (x32 Version: 1.14)

Patrizier IV (x32 Version: 1.3.0.0)

PDF Complete Special Edition (x32 Version: 4.0.9)

Penguins! (x32 Version: 2.2.0.95)

PhotoNow! (x32 Version: 1.1.7717)

PictureMover (x32 Version: 3.5.0.33)

Plants vs. Zombies (x32 Version: 2.2.0.95)

PlayReady PC Runtime amd64 (Version: 1.3.0)

Polar Bowler (x32 Version: 2.2.0.95)

Power2Go (x32 Version: 6.1.4329)

PowerDirector (x32 Version: 8.0.3129)

ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)

Recovery Manager (x32 Version: 5.5.3219)

Sid Meier's Civilization V (x32)

Skype™ 6.6 (x32 Version: 6.6.106)

Slingo Deluxe (x32 Version: 2.2.0.95)

SolForge (x32)

Steam (x32 Version: 1.0.0.0)

Stronghold Kingdoms (x32 Version: Stronghold Kingdoms (Installationsprogramm v1.17))

TeamSpeak 3 Client (HKCU Version: 3.0.9.2)

The Elder Scrolls V: Skyrim (x32)

Titan Quest (x32 Version: 1.00.0000)

Titan Quest Immortal Throne (x32 Version: 1.00.0000)

Total War: SHOGUN 2 (x32)

Ubisoft Game Launcher (x32 Version: 1.0.0.0)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Virtual Villagers - The Secret City (x32 Version: 2.2.0.95)

Warhammer Mark of Chaos (x32 Version: 1.000.000)

Warlock - Master of the Arcane (x32)

Wedding Dash (x32 Version: 2.2.0.95)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3502.0922)

Windows Live Mail (x32 Version: 15.4.3502.0922)

Windows Live Messenger (x32 Version: 15.4.3502.0922)

Windows Live MIME IFilter (Version: 15.4.3502.0922)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3502.0922)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922)

Windows Live Writer (x32 Version: 15.4.3502.0922)

Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

WinRAR 4.01 (32-Bit) (x32 Version: 4.01.0)

World of Tanks v.0.6.7 (x32)

XCOM: Enemy Unknown (x32)

Zinio Reader 4 (x32 Version: 4.0.3184)

Zuma Deluxe (x32 Version: 2.2.0.95)
 

==================== Restore Points  =========================
 

01-10-2013 19:04:37 DirectX wurde installiert

01-10-2013 19:39:36 Installed RTK XI Demo

01-10-2013 19:51:50 DirectX wurde installiert

01-10-2013 21:10:27 HPSF Restore Point

03-10-2013 11:26:50 Installed LibreOffice 4.1.0.4

03-10-2013 19:04:20 Windows Live Essentials

03-10-2013 19:04:36 WLSetup

03-10-2013 19:16:17 DirectX wurde installiert

03-10-2013 19:23:38 Windows Update

03-10-2013 19:26:43 Windows Update

08-10-2013 13:43:29 Windows Update

08-10-2013 15:07:38 Wiederherstellungsvorgang

08-10-2013 15:18:03 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2013-02-20 15:55 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {26FF7E14-77FD-4439-85A0-209DB3F45458} - System32\Tasks\{69AF67A8-D0BA-4CA5-9D52-A96B43F096E9} => Firefox.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsBing

Task: {2D232E9F-59AC-4FB1-AE41-08B36E157A27} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)

Task: {2DDC27A8-903C-44BB-826A-93DFD811A79D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-09-18] (Hewlett-Packard Company)

Task: {43E6ED9C-0A8B-42B9-956D-08C4810A52CB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {74E76E36-415D-41A8-8470-01CAEA6D92D1} - System32\Tasks\{A93AE8EC-DF0B-436D-9708-A1FBE5B03AAF} => C:\Program Files\Bitdefender\Bitdefender 2013\seccenter.exe

Task: {9D53C0AF-7979-42FE-914A-CF3DBCE666EB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-24] (Google Inc.)

Task: {A07BACB5-42C8-4C49-8601-C403F2A54538} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)

Task: {A1BB9308-AF98-41F4-9E45-99D380DA0D2F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-24] (Google Inc.)

Task: {B3233A50-06D0-4BDC-B022-9C301CD914B8} - System32\Tasks\HPOSIAPP64 => C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe [2009-02-28] ()

Task: {D2004BFA-3702-4D0D-BA5C-456605760D8F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-09-18] (Hewlett-Packard Company)

Task: {E564EB94-7747-433E-A22C-FB88F367DF5B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)

Task: {EB2279C1-B4D2-48CB-93CC-7CA1CC43D163} - System32\Tasks\HP-Online-Aktualisierungsprogramm => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2008-12-08] (Hewlett-Packard)

Task: {EF1560D0-D6C4-4E84-8FE0-BD5A87231398} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {FC9B59B0-929F-4C36-A209-474AE7C9DCBF} - System32\Tasks\RMCreator => C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe [2010-08-20] (CyberLink)

Task: {FFAEFB8E-63A9-4B76-A547-8E403D93F2FB} - System32\Tasks\HPCeeScheduleForZOCKMASCHINE$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\HPCeeScheduleForZOCKMASCHINE$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-08-14 13:01 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll

2010-12-09 06:54 - 2010-12-09 06:54 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2010-04-13 00:59 - 2010-04-13 00:59 - 00098304 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2010-12-22 18:54 - 2010-12-22 18:54 - 00028672 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-03-12 18:10 - 2013-08-22 00:18 - 00687104 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2011-10-14 18:16 - 2013-10-05 02:54 - 01121704 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2011-10-14 18:16 - 2013-09-11 00:20 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2012-03-16 21:05 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll

2012-03-16 21:05 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll

2012-03-16 21:05 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll

2011-04-24 20:45 - 2009-02-20 02:22 - 00028672 _____ () C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\WMINPUT.DLL

2013-10-01 14:59 - 2013-10-01 14:59 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2013-08-14 20:34 - 2013-09-30 11:01 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/08/2013 05:47:52 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/08/2013 05:36:16 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/08/2013 05:35:15 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/08/2013 05:34:09 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/08/2013 05:33:20 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/08/2013 05:32:40 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/08/2013 05:32:02 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/08/2013 05:31:07 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/08/2013 05:16:17 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (10/03/2013 11:20:19 AM) (Source: Application Hang) (User: )

Description: Programm HPVideoViewer.exe, Version 4.2.1.4522 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1164
 

Startzeit: 01cec019c00a9584
 

Endzeit: 8
 

Anwendungspfad: C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPVideoViewer.exe
 

Berichts-ID: 0344ed2c-2c0d-11e3-8e05-e069956facf8
 
 

System errors:

=============

Error: (10/08/2013 05:35:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 

%%10106
 

Error: (10/08/2013 05:35:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%10106
 

Error: (10/08/2013 05:35:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 

%%10106
 

Error: (10/08/2013 05:35:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%10106
 

Error: (10/08/2013 05:35:45 PM) (Source: WMPNetworkSvc) (User: )

Description: 0x80070057
 

Error: (10/08/2013 05:35:45 PM) (Source: WMPNetworkSvc) (User: )

Description: WMPNetworkSvc0xc00d4268
 

Error: (10/08/2013 05:35:45 PM) (Source: WMPNetworkSvc) (User: )

Description: 0x80070057
 

Error: (10/08/2013 05:35:45 PM) (Source: WMPNetworkSvc) (User: )

Description: WMPNetworkSvc0xc00d4268
 

Error: (10/08/2013 05:35:45 PM) (Source: WMPNetworkSvc) (User: )

Description: 0x80070057
 

Error: (10/08/2013 05:35:45 PM) (Source: WMPNetworkSvc) (User: )

Description: WMPNetworkSvc0xc00d4268
 
 

Microsoft Office Sessions:

=========================

Error: (10/08/2013 05:47:52 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/08/2013 05:36:16 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/08/2013 05:35:15 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/08/2013 05:34:09 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/08/2013 05:33:20 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/08/2013 05:32:40 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/08/2013 05:32:02 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/08/2013 05:31:07 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/08/2013 05:16:17 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)

Description: 0x0
 

Error: (10/03/2013 11:20:19 AM) (Source: Application Hang)(User: )

Description: HPVideoViewer.exe4.2.1.4522116401cec019c00a95848C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPVideoViewer.exe0344ed2c-2c0d-11e3-8e05-e069956facf8
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-02-20 14:54:54.880

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-20 14:54:54.828

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 31%

Total physical RAM: 6126.53 MB

Available physical RAM: 4199.21 MB

Total Pagefile: 12251.25 MB

Available Pagefile: 9781.38 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:917.68 GB) (Free:603.04 GB) NTFS

Drive d: (HP_RECOVERY) (Fixed) (Total:13.73 GB) (Free:1.69 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive f: (USB DISK) (Removable) (Total:1.87 GB) (Free:1.82 GB) FAT
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 932 GB) (Disk ID: 2DD862E9)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=918 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=14 GB) - (Type=07 NTFS)
 

========================================================

Disk: 5 (MBR Code: Windows XP) (Size: 2 GB) (Disk ID: C3072E18)

Partition 1: (Active) - (Size=2 GB) - (Type=06)
 

==================== End Of Log ============================

Hat gar nix mit deinem Problem zu tun. Spiel schonmal neu installiert?

Hallo Schrauber

Ja habe ich schon. Mehrfach.

Ich war auch in Kontakt mit dem Support von Firefly, aber alles hilft nichts.

SCHADE.

Und die gefundenen Fehler und infizierten Dateien sind die gravierend?

Kann man da was machen?

Ist es normal, dass (Microsoft Visual C++) so oft installiert ist?

Gruß

Nova82

Das sind alles Updates.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo Schrauber.

Ich habe alles so gemacht, wie Sie mir gesagt haben.

Hier die Ergebnisse:

Code:

# AdwCleaner v3.007 - Bericht erstellt am 10/10/2013 um 16:55:24

# Updated 09/10/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Nova - ZOCKMASCHINE

# Gestartet von : C:\Users\Nova\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\Program Files (x86)\Search Results Toolbar

Ordner Gelöscht : C:\Users\Nova\AppData\Local\DownloadGuide

Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}

Datei Gelöscht : C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\invalidprefs.js

Datei Gelöscht : C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\user.js
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_stronghold-kingdoms_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_stronghold-kingdoms_RASMANCS

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16720
 
 

-\\ Mozilla Firefox v24.0 (de)
 

[ Datei : C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\prefs.js ]
 
 

[ Datei : C:\Users\Maren\AppData\Roaming\Mozilla\Firefox\Profiles\b8su183z.default\prefs.js ]
 
 

*************************
 

AdwCleaner[R0].txt - [3337 octets] - [10/10/2013 16:52:30]

AdwCleaner[S0].txt - [2961 octets] - [10/10/2013 16:55:24]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3021 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.4 (10.06.2013:1)

OS: Windows 7 Home Premium x64

Ran by Nova on 10.10.2013 at 17:03:23,54

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup(1)_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup(1)_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup(1)_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup(1)_RASMANCS
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\apn"

Successfully deleted: [Folder] "C:\ProgramData\wincert"

Successfully deleted: [Folder] "C:\Users\Nova\appdata\locallow\datamngr"
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Nova\AppData\Roaming\mozilla\firefox\profiles\bdv9xabp.default\prefs.js
 

user_pref("extensions.bootstrappedAddons", "{\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"version\":\"2.3.2\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Nova\\\\A

Emptied folder: C:\Users\Nova\AppData\Roaming\mozilla\firefox\profiles\bdv9xabp.default\minidumps [199 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 10.10.2013 at 17:06:44,49

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by Nova (administrator) on ZOCKMASCHINE on 10-10-2013 17:08:10

Running from C:\Users\Nova\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe

() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Akamai Technologies, Inc.) C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

() C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-09-15] ()

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-04-24] (IDT, Inc.)

HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1

HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-09] (Valve Corporation)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKCU\...\Policies\system: [DisableLockWorkstation] 0

HKCU\...\Policies\system: [DisableChangePassword] 0

HKCU\...\Policies\system: [LogonHoursAction] 2

HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-12-09] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc)

HKLM-x32\...\Run: [BATINDICATOR] - C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe [2068992 2009-05-09] (Hewlett-Packard)

HKLM-x32\...\Run: [LaunchHPOSIAPP] - C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe [385024 2009-04-04] (Hewlett-Packard)

HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-09-30] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKU\Maren\...\Policies\system: [LogonHoursAction] 2

HKU\Maren\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog9-x64 01 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 02 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 03 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 04 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 05 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 06 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 07 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 08 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 09 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 10 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 21 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nova\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF SearchPlugin: C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\searchplugins\safeguard-secure-search.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc)

S2 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [x]

S2 UPDATESRV; "C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe" /service [x]

S4 VSSERV; "C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe" /service [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-02-01] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-02-01] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 bdfwfpf_pc; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [x]

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-10 17:06 - 2013-10-10 17:06 - 00001701 _____ C:\Users\Nova\Desktop\JRT.txt

2013-10-10 17:03 - 2013-10-10 17:03 - 00000000 ____D C:\Windows\ERUNT

2013-10-10 16:58 - 2013-10-10 16:58 - 00003109 _____ C:\Users\Nova\Desktop\AdwCleaner[S0].txt

2013-10-10 16:50 - 2013-10-10 16:50 - 01032220 _____ (Thisisu) C:\Users\Nova\Desktop\JRT.exe

2013-10-10 16:48 - 2013-10-10 16:55 - 00000000 ____D C:\AdwCleaner

2013-10-10 16:48 - 2013-10-10 16:48 - 01048960 _____ C:\Users\Nova\Desktop\adwcleaner.exe

2013-10-09 21:04 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-10-09 21:04 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-10-09 21:04 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-10-09 21:04 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-10-09 21:04 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-10-09 21:04 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-10-09 21:04 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-10-09 21:03 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-10-09 21:03 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-10-09 21:03 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-10-09 21:03 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-10-09 19:44 - 2013-10-09 19:44 - 20678312 _____ (Firefly Studios                                             ) C:\Users\Nova\Downloads\StrongholdKingdoms-Setup(1).exe

2013-10-09 18:37 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-10-09 18:37 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-10-09 18:37 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2013-10-09 18:37 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll

2013-10-09 18:37 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-10-09 18:37 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-10-09 18:37 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2013-10-09 18:37 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-10-09 18:37 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2013-10-09 18:37 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-10-09 18:37 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-10-09 18:37 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-10-09 18:37 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2013-10-09 18:37 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-10-09 18:37 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2013-10-09 18:37 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-10-09 18:37 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-10-09 18:37 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-10-09 18:37 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-10-09 18:37 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-10-09 18:37 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2013-10-09 18:37 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-10-09 18:37 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-09 18:37 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-10-09 18:37 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2013-10-09 18:37 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-10-09 18:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-10-09 18:37 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-10-09 18:37 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-10-09 18:37 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-10-09 18:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2013-10-09 18:37 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2013-10-09 18:37 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2013-10-09 18:37 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2013-10-09 18:37 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-10-09 18:37 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2013-10-09 18:37 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-10-09 18:37 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2013-10-09 18:37 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-10-09 18:37 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2013-10-09 18:37 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-10-09 18:37 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2013-10-09 18:37 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-10-09 18:37 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-10-09 18:37 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-10-09 18:36 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-10-08 23:45 - 2013-10-08 23:45 - 00024796 _____ C:\Users\Nova\Desktop\Addition.txt

2013-10-08 23:43 - 2013-10-08 23:43 - 01954124 _____ (Farbar) C:\Users\Nova\Desktop\FRST64.exe

2013-10-08 23:43 - 2013-10-08 23:43 - 00000000 ____D C:\FRST

2013-10-08 17:52 - 2013-10-08 17:53 - 122946048 _____ C:\Users\Nova\Downloads\avira14_free_antivirus_de.exe

2013-10-08 17:40 - 2013-10-08 17:40 - 00543864 _____ (Aeria Games) C:\Users\Nova\Downloads\dynastywarriors_us_downloader.exe

2013-10-08 17:37 - 2013-10-08 17:37 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(2).exe

2013-10-06 13:57 - 2013-10-06 13:57 - 00000000 ____D C:\Users\Nova\Documents\AeriaGames

2013-10-06 13:17 - 2013-10-08 17:41 - 00000000 ____D C:\Users\Nova\AppData\Local\Akamai

2013-10-06 13:17 - 2013-10-06 13:17 - 00000000 ____D C:\AeriaGames

2013-10-05 16:09 - 2013-10-05 16:10 - 00000000 ____D C:\Users\Maren\Documents\Waschmaschine Mediamarkt

2013-10-03 21:16 - 2013-10-03 21:16 - 00000000 ____D C:\Program Files (x86)\Firefly Studios

2013-10-03 13:30 - 2013-10-03 13:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\LibreOffice

2013-10-03 13:27 - 2013-10-03 13:28 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4

2013-10-01 21:34 - 2013-10-08 17:14 - 00000000 ____D C:\ProgramData\Ashampoo

2013-10-01 21:34 - 2013-10-01 21:34 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2013-10-01 20:34 - 2013-10-01 20:34 - 01338744 _____ (Uniblue Systems Ltd                                         ) C:\Users\Nova\Downloads\speedupmypc.exe

2013-10-01 19:59 - 2013-10-01 19:59 - 98612549 _____ C:\Windows\SysWOW64\ﴲ鉣蹬ž

2013-10-01 14:59 - 2013-10-01 14:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-24 19:45 - 2013-10-10 16:57 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-24 19:45 - 2013-10-10 16:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-24 19:45 - 2013-10-10 16:50 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-09-24 19:45 - 2013-10-10 16:50 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Users\Nova\AppData\Local\Google

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Program Files (x86)\Google

2013-09-24 19:44 - 2013-09-24 19:44 - 00784856 _____ (Google Inc.) C:\Users\Nova\Downloads\GoogleEarthPluginSetup.exe

2013-09-14 23:50 - 2013-09-14 23:50 - 00478528 _____ C:\Users\Nova\Downloads\mvc2010de-Downloader.exe

2013-09-14 23:49 - 2013-10-08 17:31 - 00001912 _____ C:\Windows\epplauncher.mif

2013-09-14 23:46 - 2013-09-14 23:46 - 13842112 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall(1).exe

2013-09-14 23:46 - 2013-09-14 23:46 - 11261784 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall.exe

2013-09-14 23:25 - 2013-10-08 17:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-14 23:25 - 2013-09-14 23:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-09-14 23:25 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-12 12:50 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-12 12:50 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-12 12:50 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-12 12:50 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-12 12:50 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-12 12:50 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-12 12:50 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-12 12:50 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-12 12:50 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-12 12:50 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-12 12:50 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-09-10 20:46 - 2013-09-10 20:47 - 00000000 ____D C:\Users\Nova\AppData\Local\Skyrim

2013-09-10 14:15 - 2013-09-10 14:15 - 00000000 ____D C:\Users\Maren\Documents\bloodbowlchaos
 

==================== One Month Modified Files and Folders =======
 

2013-10-10 17:06 - 2013-10-10 17:06 - 00001701 _____ C:\Users\Nova\Desktop\JRT.txt

2013-10-10 17:04 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-10 17:04 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-10 17:03 - 2013-10-10 17:03 - 00000000 ____D C:\Windows\ERUNT

2013-10-10 16:58 - 2013-10-10 16:58 - 00003109 _____ C:\Users\Nova\Desktop\AdwCleaner[S0].txt

2013-10-10 16:58 - 2011-10-14 18:10 - 00000000 ____D C:\Program Files (x86)\Steam

2013-10-10 16:58 - 2011-10-11 20:26 - 00075440 _____ C:\Users\Nova\AppData\Local\GDIPFONTCACHEV1.DAT

2013-10-10 16:57 - 2013-09-24 19:45 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-10 16:57 - 2013-08-14 10:14 - 00007898 _____ C:\Windows\setupact.log

2013-10-10 16:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-10 16:57 - 2009-07-14 06:45 - 00334736 _____ C:\Windows\system32\FNTCACHE.DAT

2013-10-10 16:56 - 2011-04-24 20:37 - 02082677 _____ C:\Windows\WindowsUpdate.log

2013-10-10 16:55 - 2013-10-10 16:48 - 00000000 ____D C:\AdwCleaner

2013-10-10 16:55 - 2013-09-24 19:45 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-10 16:50 - 2013-10-10 16:50 - 01032220 _____ (Thisisu) C:\Users\Nova\Desktop\JRT.exe

2013-10-10 16:50 - 2013-09-24 19:45 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-10-10 16:50 - 2013-09-24 19:45 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-10-10 16:50 - 2012-06-12 17:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-10 16:49 - 2011-10-14 19:35 - 00000000 ___RD C:\Users\Nova\Desktop\Programme

2013-10-10 16:48 - 2013-10-10 16:48 - 01048960 _____ C:\Users\Nova\Desktop\adwcleaner.exe

2013-10-09 21:15 - 2009-07-24 21:22 - 00000000 ____D C:\Windows\Panther

2013-10-09 19:50 - 2012-06-12 17:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-09 19:50 - 2012-04-14 11:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-09 19:50 - 2011-10-14 16:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-09 19:45 - 2011-10-11 21:55 - 00000000 ___RD C:\Users\Nova\Desktop\Spiele

2013-10-09 19:45 - 2011-04-24 21:16 - 00665070 _____ C:\Windows\system32\perfh007.dat

2013-10-09 19:45 - 2011-04-24 21:16 - 00134980 _____ C:\Windows\system32\perfc007.dat

2013-10-09 19:45 - 2009-07-14 07:13 - 01529102 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-09 19:44 - 2013-10-09 19:44 - 20678312 _____ (Firefly Studios                                             ) C:\Users\Nova\Downloads\StrongholdKingdoms-Setup(1).exe

2013-10-09 19:38 - 2013-03-12 19:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-10-09 19:38 - 2013-03-12 19:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-10-09 19:32 - 2013-08-17 13:59 - 00000000 ____D C:\Windows\system32\MRT

2013-10-09 19:31 - 2011-12-05 00:41 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-10-09 18:27 - 2013-08-14 10:14 - 00278072 _____ C:\Windows\PFRO.log

2013-10-08 23:45 - 2013-10-08 23:45 - 00024796 _____ C:\Users\Nova\Desktop\Addition.txt

2013-10-08 23:43 - 2013-10-08 23:43 - 01954124 _____ (Farbar) C:\Users\Nova\Desktop\FRST64.exe

2013-10-08 23:43 - 2013-10-08 23:43 - 00000000 ____D C:\FRST

2013-10-08 18:35 - 2011-04-24 20:45 - 00000000 ____D C:\ProgramData\PDFC

2013-10-08 17:53 - 2013-10-08 17:52 - 122946048 _____ C:\Users\Nova\Downloads\avira14_free_antivirus_de.exe

2013-10-08 17:41 - 2013-10-06 13:17 - 00000000 ____D C:\Users\Nova\AppData\Local\Akamai

2013-10-08 17:40 - 2013-10-08 17:40 - 00543864 _____ (Aeria Games) C:\Users\Nova\Downloads\dynastywarriors_us_downloader.exe

2013-10-08 17:38 - 2013-09-14 23:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-10-08 17:37 - 2013-10-08 17:37 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(2).exe

2013-10-08 17:31 - 2013-09-14 23:49 - 00001912 _____ C:\Windows\epplauncher.mif

2013-10-08 17:31 - 2011-10-11 20:27 - 00000000 ____D C:\Users\Nova\AppData\Roaming\WildTangent

2013-10-08 17:31 - 2011-04-24 20:47 - 00000000 ____D C:\ProgramData\WildTangent

2013-10-08 17:20 - 2011-10-10 15:18 - 00000000 ____D C:\Users\Nova

2013-10-08 17:14 - 2013-10-01 21:34 - 00000000 ____D C:\ProgramData\Ashampoo

2013-10-08 17:14 - 2012-06-12 17:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-10-08 17:14 - 2011-10-17 13:26 - 00000000 ____D C:\Users\Maren

2013-10-08 17:14 - 2011-10-11 21:49 - 00000000 ____D C:\Spiele

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Windows\en

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Windows\de

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files\Windows Live

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files (x86)\Windows Live

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-10-08 17:14 - 2009-07-14 09:44 - 00000000 ___RD C:\Users\Public\Recorded TV

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-10-08 17:11 - 2011-10-18 14:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\SoftGrid Client

2013-10-08 17:10 - 2013-02-20 10:29 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-10-08 17:10 - 2012-09-09 23:00 - 00000000 ____D C:\ProgramData\Firefly Studios

2013-10-08 17:10 - 2011-11-18 22:13 - 00000000 ____D C:\Users\Maren\AppData\Local\Hewlett-Packard

2013-10-06 13:57 - 2013-10-06 13:57 - 00000000 ____D C:\Users\Nova\Documents\AeriaGames

2013-10-06 13:17 - 2013-10-06 13:17 - 00000000 ____D C:\AeriaGames

2013-10-05 16:10 - 2013-10-05 16:09 - 00000000 ____D C:\Users\Maren\Documents\Waschmaschine Mediamarkt

2013-10-03 21:16 - 2013-10-03 21:16 - 00000000 ____D C:\Program Files (x86)\Firefly Studios

2013-10-03 18:48 - 2011-10-20 19:26 - 00075440 _____ C:\Users\Maren\AppData\Local\GDIPFONTCACHEV1.DAT

2013-10-03 13:30 - 2013-10-03 13:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\LibreOffice

2013-10-03 13:28 - 2013-10-03 13:27 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4

2013-10-03 11:20 - 2011-12-04 13:39 - 00000000 ____D C:\Users\Maren\AppData\Roaming\CyberLink

2013-10-01 21:34 - 2013-10-01 21:34 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2013-10-01 20:34 - 2013-10-01 20:34 - 01338744 _____ (Uniblue Systems Ltd                                         ) C:\Users\Nova\Downloads\speedupmypc.exe

2013-10-01 20:07 - 2012-06-12 17:44 - 00000000 ____D C:\Users\Nova\AppData\Local\Mozilla

2013-10-01 19:59 - 2013-10-01 19:59 - 98612549 _____ C:\Windows\SysWOW64\ﴲ鉣蹬ž

2013-10-01 19:47 - 2011-10-10 15:19 - 00000000 ____D C:\Users\Nova\AppData\Local\Hewlett-Packard

2013-10-01 19:46 - 2011-12-25 14:46 - 00000000 ____D C:\Users\Nova\AppData\Roaming\CyberLink

2013-10-01 15:25 - 2013-08-20 21:17 - 00000000 ____D C:\Users\Nova\AppData\Roaming\SolForge

2013-10-01 14:59 - 2013-10-01 14:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-30 11:01 - 2013-08-14 20:34 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-30 11:01 - 2013-08-14 20:34 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-30 11:01 - 2013-08-14 20:34 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-09-27 19:49 - 2011-10-14 16:57 - 00000000 ____D C:\Users\Nova\AppData\Local\CrashDumps

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Users\Nova\AppData\Local\Google

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Program Files (x86)\Google

2013-09-24 19:44 - 2013-09-24 19:44 - 00784856 _____ (Google Inc.) C:\Users\Nova\Downloads\GoogleEarthPluginSetup.exe

2013-09-23 01:28 - 2013-10-09 21:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-23 01:28 - 2013-10-09 21:03 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-23 00:55 - 2013-10-09 21:04 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-23 00:55 - 2013-10-09 21:03 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-23 00:55 - 2013-10-09 21:03 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-21 05:38 - 2013-10-09 21:04 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-21 05:30 - 2013-10-09 21:04 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-21 04:48 - 2013-10-09 21:04 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-21 04:39 - 2013-10-09 21:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-16 14:21 - 2013-05-15 21:30 - 00000000 ____D C:\Users\Maren\Documents\EBAY

2013-09-16 14:21 - 2011-10-17 13:27 - 00000000 ____D C:\Users\Maren\AppData\Local\PDFC

2013-09-14 23:50 - 2013-09-14 23:50 - 00478528 _____ C:\Users\Nova\Downloads\mvc2010de-Downloader.exe

2013-09-14 23:46 - 2013-09-14 23:46 - 13842112 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall(1).exe

2013-09-14 23:46 - 2013-09-14 23:46 - 11261784 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall.exe

2013-09-14 23:25 - 2013-09-14 23:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-09-14 17:20 - 2012-04-15 18:01 - 00000000 ____D C:\Users\Maren\Documents\My Games

2013-09-14 17:19 - 2011-10-17 13:26 - 00000000 ___RD C:\Users\Maren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-14 17:19 - 2011-10-17 13:26 - 00000000 ___RD C:\Users\Maren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-14 17:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-14 03:10 - 2013-10-09 18:37 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-09-13 19:04 - 2011-10-11 20:25 - 00000000 ___RD C:\Users\Nova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-13 19:04 - 2011-10-11 20:25 - 00000000 ___RD C:\Users\Nova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-12 23:56 - 2011-10-18 14:29 - 01555784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-09-12 23:56 - 2011-10-18 14:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client

2013-09-12 19:30 - 2012-01-08 20:30 - 00003226 _____ C:\Windows\System32\Tasks\HPCeeScheduleForZOCKMASCHINE$

2013-09-12 19:30 - 2012-01-08 20:30 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForZOCKMASCHINE$.job

2013-09-10 20:47 - 2013-09-10 20:46 - 00000000 ____D C:\Users\Nova\AppData\Local\Skyrim

2013-09-10 20:46 - 2013-08-20 21:16 - 00055305 _____ C:\Windows\DirectX.log

2013-09-10 20:45 - 2011-10-24 19:28 - 00000000 ____D C:\Users\Nova\Documents\My Games

2013-09-10 14:15 - 2013-09-10 14:15 - 00000000 ____D C:\Users\Maren\Documents\bloodbowlchaos
 

Some content of TEMP:

====================

C:\Users\Nova\AppData\Local\Temp\avgnt.exe

C:\Users\Nova\AppData\Local\Temp\Quarantine.exe

C:\Users\Nova\AppData\Local\Temp\silent_pricora_DE.exe

C:\Users\Nova\AppData\Local\Temp\SkypeSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-02 21:17
 

==================== End Of Log ============================

--- --- ---

--- --- ---

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Hier die Ergebnise:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=d5c7fa69157e76478e17f91541e18e66

# engine=15449

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-10-11 07:57:23

# local_time=2013-10-11 09:57:23 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=1799 16775165 100 94 8002 5016297 791 0

# compatibility_mode=5893 16776573 100 94 7785 133151293 0 0

# scanned=392313

# found=0

# cleaned=0

# scan_time=7229

Code:

 Results of screen317's Security Check version 0.99.74  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 10  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop   

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 Adobe Flash Player 11.9.900.117  

 Mozilla Firefox (24.0) 
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbamgui.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes' Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by Nova (administrator) on ZOCKMASCHINE on 11-10-2013 22:52:52

Running from C:\Users\Nova\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

(Hewlett-Packard Company) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe

() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Akamai Technologies, Inc.) C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe

() C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [611896 2010-09-15] ()

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-04-24] (IDT, Inc.)

HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1

HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-09] (Valve Corporation)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Nova\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKCU\...\Policies\system: [DisableLockWorkstation] 0

HKCU\...\Policies\system: [DisableChangePassword] 0

HKCU\...\Policies\system: [LogonHoursAction] 2

HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-12-09] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [664600 2010-09-28] (PDF Complete Inc)

HKLM-x32\...\Run: [BATINDICATOR] - C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe [2068992 2009-05-09] (Hewlett-Packard)

HKLM-x32\...\Run: [LaunchHPOSIAPP] - C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe [385024 2009-04-04] (Hewlett-Packard)

HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-09-30] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKU\Maren\...\Policies\system: [LogonHoursAction] 2

HKU\Maren\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-0/4?satitle={searchTerms}&mfe=Desktops

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog9-x64 01 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 02 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 03 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 04 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 05 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 06 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 07 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 08 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 09 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 10 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Winsock: Catalog9-x64 21 C:\Program Files\Bitdefender\Bitdefender 2013\BdProvider.dll File Not found ()

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nova\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF SearchPlugin: C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\searchplugins\safeguard-secure-search.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Nova\AppData\Roaming\Mozilla\Firefox\Profiles\bdv9xabp.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1119768 2010-09-28] (PDF Complete Inc)

S2 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [x]

S2 UPDATESRV; "C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe" /service [x]

S4 VSSERV; "C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe" /service [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-02-01] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-09-30] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-02-01] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 bdfwfpf_pc; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [x]

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-11 22:48 - 2013-10-11 22:48 - 00891167 _____ C:\Users\Nova\Desktop\SecurityCheck.exe

2013-10-11 19:53 - 2013-10-11 19:53 - 02347384 _____ (ESET) C:\Users\Nova\Downloads\esetsmartinstaller_enu.exe

2013-10-10 17:06 - 2013-10-10 17:06 - 00001701 _____ C:\Users\Nova\Desktop\JRT.txt

2013-10-10 17:03 - 2013-10-10 17:03 - 00000000 ____D C:\Windows\ERUNT

2013-10-10 16:58 - 2013-10-10 16:58 - 00003109 _____ C:\Users\Nova\Desktop\AdwCleaner[S0].txt

2013-10-10 16:50 - 2013-10-10 16:50 - 01032220 _____ (Thisisu) C:\Users\Nova\Desktop\JRT.exe

2013-10-10 16:48 - 2013-10-10 16:55 - 00000000 ____D C:\AdwCleaner

2013-10-10 16:48 - 2013-10-10 16:48 - 01048960 _____ C:\Users\Nova\Desktop\adwcleaner.exe

2013-10-09 21:04 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-10-09 21:04 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-10-09 21:04 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-10-09 21:04 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-10-09 21:04 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-10-09 21:04 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-10-09 21:04 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-10-09 21:04 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-10-09 21:04 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-10-09 21:03 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-10-09 21:03 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-10-09 21:03 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-10-09 21:03 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-10-09 21:03 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-10-09 21:03 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-10-09 19:44 - 2013-10-09 19:44 - 20678312 _____ (Firefly Studios                                             ) C:\Users\Nova\Downloads\StrongholdKingdoms-Setup(1).exe

2013-10-09 18:37 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-10-09 18:37 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-10-09 18:37 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2013-10-09 18:37 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll

2013-10-09 18:37 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-10-09 18:37 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-10-09 18:37 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2013-10-09 18:37 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-10-09 18:37 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2013-10-09 18:37 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-10-09 18:37 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-10-09 18:37 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-10-09 18:37 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2013-10-09 18:37 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-10-09 18:37 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2013-10-09 18:37 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-10-09 18:37 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-10-09 18:37 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-10-09 18:37 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-10-09 18:37 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-10-09 18:37 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2013-10-09 18:37 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-10-09 18:37 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-09 18:37 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-10-09 18:37 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2013-10-09 18:37 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-10-09 18:37 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-10-09 18:37 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-10-09 18:37 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-10-09 18:37 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-10-09 18:37 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2013-10-09 18:37 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2013-10-09 18:37 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2013-10-09 18:37 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2013-10-09 18:37 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-10-09 18:37 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2013-10-09 18:37 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-10-09 18:37 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2013-10-09 18:37 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-10-09 18:37 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2013-10-09 18:37 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-10-09 18:37 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2013-10-09 18:37 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-10-09 18:37 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-10-09 18:37 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-10-09 18:36 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-10-09 18:36 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-10-08 23:43 - 2013-10-08 23:43 - 01954124 _____ (Farbar) C:\Users\Nova\Desktop\FRST64.exe

2013-10-08 23:43 - 2013-10-08 23:43 - 00000000 ____D C:\FRST

2013-10-08 17:52 - 2013-10-08 17:53 - 122946048 _____ C:\Users\Nova\Downloads\avira14_free_antivirus_de.exe

2013-10-08 17:40 - 2013-10-08 17:40 - 00543864 _____ (Aeria Games) C:\Users\Nova\Downloads\dynastywarriors_us_downloader.exe

2013-10-08 17:37 - 2013-10-08 17:37 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(2).exe

2013-10-06 13:57 - 2013-10-06 13:57 - 00000000 ____D C:\Users\Nova\Documents\AeriaGames

2013-10-06 13:17 - 2013-10-08 17:41 - 00000000 ____D C:\Users\Nova\AppData\Local\Akamai

2013-10-06 13:17 - 2013-10-06 13:17 - 00000000 ____D C:\AeriaGames

2013-10-05 16:09 - 2013-10-05 16:10 - 00000000 ____D C:\Users\Maren\Documents\Waschmaschine Mediamarkt

2013-10-03 21:16 - 2013-10-03 21:16 - 00000000 ____D C:\Program Files (x86)\Firefly Studios

2013-10-03 13:30 - 2013-10-03 13:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\LibreOffice

2013-10-03 13:27 - 2013-10-03 13:28 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4

2013-10-01 21:34 - 2013-10-08 17:14 - 00000000 ____D C:\ProgramData\Ashampoo

2013-10-01 21:34 - 2013-10-01 21:34 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2013-10-01 20:34 - 2013-10-01 20:34 - 01338744 _____ (Uniblue Systems Ltd                                         ) C:\Users\Nova\Downloads\speedupmypc.exe

2013-10-01 19:59 - 2013-10-01 19:59 - 98612549 _____ C:\Windows\SysWOW64\ﴲ鉣蹬ž

2013-10-01 14:59 - 2013-10-01 14:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-24 19:45 - 2013-10-11 21:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-24 19:45 - 2013-10-11 19:51 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-24 19:45 - 2013-10-10 16:50 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-09-24 19:45 - 2013-10-10 16:50 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Users\Nova\AppData\Local\Google

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Program Files (x86)\Google

2013-09-24 19:44 - 2013-09-24 19:44 - 00784856 _____ (Google Inc.) C:\Users\Nova\Downloads\GoogleEarthPluginSetup.exe

2013-09-14 23:50 - 2013-09-14 23:50 - 00478528 _____ C:\Users\Nova\Downloads\mvc2010de-Downloader.exe

2013-09-14 23:49 - 2013-10-08 17:31 - 00001912 _____ C:\Windows\epplauncher.mif

2013-09-14 23:46 - 2013-09-14 23:46 - 13842112 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall(1).exe

2013-09-14 23:46 - 2013-09-14 23:46 - 11261784 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall.exe

2013-09-14 23:25 - 2013-10-08 17:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-14 23:25 - 2013-09-14 23:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-09-14 23:25 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-12 12:50 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-12 12:50 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-12 12:50 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-12 12:50 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-12 12:50 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-12 12:50 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-12 12:50 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 12:50 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-12 12:50 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-12 12:50 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-12 12:50 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-12 12:50 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-10-11 22:52 - 2013-03-17 12:27 - 00000000 ____D C:\Users\Nova\Desktop\Musik

2013-10-11 22:50 - 2012-06-12 17:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-11 22:48 - 2013-10-11 22:48 - 00891167 _____ C:\Users\Nova\Desktop\SecurityCheck.exe

2013-10-11 22:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-10-11 21:55 - 2013-09-24 19:45 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-11 21:18 - 2011-04-24 20:37 - 01077189 _____ C:\Windows\WindowsUpdate.log

2013-10-11 19:56 - 2011-04-24 21:16 - 00665070 _____ C:\Windows\system32\perfh007.dat

2013-10-11 19:56 - 2011-04-24 21:16 - 00134980 _____ C:\Windows\system32\perfc007.dat

2013-10-11 19:56 - 2009-07-14 07:13 - 01529102 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-11 19:53 - 2013-10-11 19:53 - 02347384 _____ (ESET) C:\Users\Nova\Downloads\esetsmartinstaller_enu.exe

2013-10-11 19:51 - 2013-09-24 19:45 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-11 19:51 - 2011-10-14 18:10 - 00000000 ____D C:\Program Files (x86)\Steam

2013-10-11 19:50 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-11 19:50 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-11 19:43 - 2013-08-14 10:14 - 00008066 _____ C:\Windows\setupact.log

2013-10-11 19:43 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-10 17:06 - 2013-10-10 17:06 - 00001701 _____ C:\Users\Nova\Desktop\JRT.txt

2013-10-10 17:03 - 2013-10-10 17:03 - 00000000 ____D C:\Windows\ERUNT

2013-10-10 16:58 - 2013-10-10 16:58 - 00003109 _____ C:\Users\Nova\Desktop\AdwCleaner[S0].txt

2013-10-10 16:58 - 2011-10-11 20:26 - 00075440 _____ C:\Users\Nova\AppData\Local\GDIPFONTCACHEV1.DAT

2013-10-10 16:57 - 2009-07-14 06:45 - 00334736 _____ C:\Windows\system32\FNTCACHE.DAT

2013-10-10 16:55 - 2013-10-10 16:48 - 00000000 ____D C:\AdwCleaner

2013-10-10 16:50 - 2013-10-10 16:50 - 01032220 _____ (Thisisu) C:\Users\Nova\Desktop\JRT.exe

2013-10-10 16:50 - 2013-09-24 19:45 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-10-10 16:50 - 2013-09-24 19:45 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-10-10 16:49 - 2011-10-14 19:35 - 00000000 ___RD C:\Users\Nova\Desktop\Programme

2013-10-10 16:48 - 2013-10-10 16:48 - 01048960 _____ C:\Users\Nova\Desktop\adwcleaner.exe

2013-10-09 21:15 - 2009-07-24 21:22 - 00000000 ____D C:\Windows\Panther

2013-10-09 19:50 - 2012-06-12 17:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-10-09 19:50 - 2012-04-14 11:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-10-09 19:50 - 2011-10-14 16:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-09 19:45 - 2011-10-11 21:55 - 00000000 ___RD C:\Users\Nova\Desktop\Spiele

2013-10-09 19:44 - 2013-10-09 19:44 - 20678312 _____ (Firefly Studios                                             ) C:\Users\Nova\Downloads\StrongholdKingdoms-Setup(1).exe

2013-10-09 19:38 - 2013-03-12 19:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-10-09 19:38 - 2013-03-12 19:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-10-09 19:32 - 2013-08-17 13:59 - 00000000 ____D C:\Windows\system32\MRT

2013-10-09 19:31 - 2011-12-05 00:41 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-10-09 18:27 - 2013-08-14 10:14 - 00278072 _____ C:\Windows\PFRO.log

2013-10-08 23:43 - 2013-10-08 23:43 - 01954124 _____ (Farbar) C:\Users\Nova\Desktop\FRST64.exe

2013-10-08 23:43 - 2013-10-08 23:43 - 00000000 ____D C:\FRST

2013-10-08 18:35 - 2011-04-24 20:45 - 00000000 ____D C:\ProgramData\PDFC

2013-10-08 17:53 - 2013-10-08 17:52 - 122946048 _____ C:\Users\Nova\Downloads\avira14_free_antivirus_de.exe

2013-10-08 17:41 - 2013-10-06 13:17 - 00000000 ____D C:\Users\Nova\AppData\Local\Akamai

2013-10-08 17:40 - 2013-10-08 17:40 - 00543864 _____ (Aeria Games) C:\Users\Nova\Downloads\dynastywarriors_us_downloader.exe

2013-10-08 17:38 - 2013-09-14 23:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-10-08 17:37 - 2013-10-08 17:37 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(2).exe

2013-10-08 17:31 - 2013-09-14 23:49 - 00001912 _____ C:\Windows\epplauncher.mif

2013-10-08 17:31 - 2011-10-11 20:27 - 00000000 ____D C:\Users\Nova\AppData\Roaming\WildTangent

2013-10-08 17:31 - 2011-04-24 20:47 - 00000000 ____D C:\ProgramData\WildTangent

2013-10-08 17:20 - 2011-10-10 15:18 - 00000000 ____D C:\Users\Nova

2013-10-08 17:14 - 2013-10-01 21:34 - 00000000 ____D C:\ProgramData\Ashampoo

2013-10-08 17:14 - 2012-06-12 17:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-10-08 17:14 - 2011-10-17 13:26 - 00000000 ____D C:\Users\Maren

2013-10-08 17:14 - 2011-10-11 21:49 - 00000000 ____D C:\Spiele

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Windows\en

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Windows\de

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files\Windows Live

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files (x86)\Windows Live

2013-10-08 17:14 - 2011-04-24 20:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-10-08 17:14 - 2009-07-14 09:44 - 00000000 ___RD C:\Users\Public\Recorded TV

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat

2013-10-08 17:14 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-10-08 17:11 - 2011-10-18 14:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\SoftGrid Client

2013-10-08 17:10 - 2013-02-20 10:29 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-10-08 17:10 - 2012-09-09 23:00 - 00000000 ____D C:\ProgramData\Firefly Studios

2013-10-08 17:10 - 2011-11-18 22:13 - 00000000 ____D C:\Users\Maren\AppData\Local\Hewlett-Packard

2013-10-06 13:57 - 2013-10-06 13:57 - 00000000 ____D C:\Users\Nova\Documents\AeriaGames

2013-10-06 13:17 - 2013-10-06 13:17 - 00000000 ____D C:\AeriaGames

2013-10-05 16:10 - 2013-10-05 16:09 - 00000000 ____D C:\Users\Maren\Documents\Waschmaschine Mediamarkt

2013-10-03 21:16 - 2013-10-03 21:16 - 00000000 ____D C:\Program Files (x86)\Firefly Studios

2013-10-03 18:48 - 2011-10-20 19:26 - 00075440 _____ C:\Users\Maren\AppData\Local\GDIPFONTCACHEV1.DAT

2013-10-03 13:30 - 2013-10-03 13:30 - 00000000 ____D C:\Users\Nova\AppData\Roaming\LibreOffice

2013-10-03 13:28 - 2013-10-03 13:27 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4

2013-10-03 11:20 - 2011-12-04 13:39 - 00000000 ____D C:\Users\Maren\AppData\Roaming\CyberLink

2013-10-01 21:34 - 2013-10-01 21:34 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2013-10-01 20:34 - 2013-10-01 20:34 - 01338744 _____ (Uniblue Systems Ltd                                         ) C:\Users\Nova\Downloads\speedupmypc.exe

2013-10-01 20:07 - 2012-06-12 17:44 - 00000000 ____D C:\Users\Nova\AppData\Local\Mozilla

2013-10-01 19:59 - 2013-10-01 19:59 - 98612549 _____ C:\Windows\SysWOW64\ﴲ鉣蹬ž

2013-10-01 19:47 - 2011-10-10 15:19 - 00000000 ____D C:\Users\Nova\AppData\Local\Hewlett-Packard

2013-10-01 19:46 - 2011-12-25 14:46 - 00000000 ____D C:\Users\Nova\AppData\Roaming\CyberLink

2013-10-01 15:25 - 2013-08-20 21:17 - 00000000 ____D C:\Users\Nova\AppData\Roaming\SolForge

2013-10-01 14:59 - 2013-10-01 14:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-30 11:01 - 2013-08-14 20:34 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-30 11:01 - 2013-08-14 20:34 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-30 11:01 - 2013-08-14 20:34 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-09-27 19:49 - 2011-10-14 16:57 - 00000000 ____D C:\Users\Nova\AppData\Local\CrashDumps

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Users\Nova\AppData\Local\Google

2013-09-24 19:45 - 2013-09-24 19:45 - 00000000 ____D C:\Program Files (x86)\Google

2013-09-24 19:44 - 2013-09-24 19:44 - 00784856 _____ (Google Inc.) C:\Users\Nova\Downloads\GoogleEarthPluginSetup.exe

2013-09-23 01:28 - 2013-10-09 21:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-23 01:28 - 2013-10-09 21:03 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-23 01:27 - 2013-10-09 21:04 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-23 01:27 - 2013-10-09 21:03 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-23 00:55 - 2013-10-09 21:04 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-23 00:55 - 2013-10-09 21:03 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-23 00:55 - 2013-10-09 21:03 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-23 00:54 - 2013-10-09 21:04 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-23 00:54 - 2013-10-09 21:03 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-21 05:38 - 2013-10-09 21:04 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-21 05:30 - 2013-10-09 21:04 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-21 04:48 - 2013-10-09 21:04 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-21 04:39 - 2013-10-09 21:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-16 14:21 - 2013-05-15 21:30 - 00000000 ____D C:\Users\Maren\Documents\EBAY

2013-09-16 14:21 - 2011-10-17 13:27 - 00000000 ____D C:\Users\Maren\AppData\Local\PDFC

2013-09-14 23:50 - 2013-09-14 23:50 - 00478528 _____ C:\Users\Nova\Downloads\mvc2010de-Downloader.exe

2013-09-14 23:46 - 2013-09-14 23:46 - 13842112 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall(1).exe

2013-09-14 23:46 - 2013-09-14 23:46 - 11261784 _____ (Microsoft Corporation) C:\Users\Nova\Downloads\mseinstall.exe

2013-09-14 23:25 - 2013-09-14 23:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nova\Downloads\mbam-setup-1.75.0.1300(1).exe

2013-09-14 17:20 - 2012-04-15 18:01 - 00000000 ____D C:\Users\Maren\Documents\My Games

2013-09-14 17:19 - 2011-10-17 13:26 - 00000000 ___RD C:\Users\Maren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-14 17:19 - 2011-10-17 13:26 - 00000000 ___RD C:\Users\Maren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-14 03:10 - 2013-10-09 18:37 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-09-13 19:04 - 2011-10-11 20:25 - 00000000 ___RD C:\Users\Nova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-13 19:04 - 2011-10-11 20:25 - 00000000 ___RD C:\Users\Nova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-12 23:56 - 2011-10-18 14:29 - 01555784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-09-12 23:56 - 2011-10-18 14:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client

2013-09-12 19:30 - 2012-01-08 20:30 - 00003226 _____ C:\Windows\System32\Tasks\HPCeeScheduleForZOCKMASCHINE$

2013-09-12 19:30 - 2012-01-08 20:30 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForZOCKMASCHINE$.job
 

Some content of TEMP:

====================

C:\Users\Nova\AppData\Local\Temp\avgnt.exe

C:\Users\Nova\AppData\Local\Temp\Quarantine.exe

C:\Users\Nova\AppData\Local\Temp\silent_pricora_DE.exe

C:\Users\Nova\AppData\Local\Temp\SkypeSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-11 22:17
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Der Firefly Support hat sich auch gemeldet. Mit folgendem Text:

Zitat:

Dieses Problem scheint an Ihrer Internetverbindung zu liegen. Obwohl Sie andere Websites abrufen könnten, ist Ihr Zugriff auf die bestimmten Server für Stronghold Kingdoms aus vielen unterschiedlichen Gründen von Ihrem ISP-Anbieter oder Netzwerkverwalter total oder teilweise begrenzt worden. Die Probleme, die Sie uns berichtet haben, könnten auch von einer schwachen oder langsamen Verbindung stammen.

Mit freundlichen Grüßen,

Lord Efficient
Stronghold Kingdoms Support Staff

Ich kann gar nichts damit anfangen. Können Sie mir sagen, was ich da jetzt machen muss?

Mein Internet funktioniert sonst super nur da nicht.

Gruß

Rechner ist sauber. Was genau willst du aufrufen?

Das ist die Antwort des Supportes, warum das Spiel Stronghold Kingdoms nicht mehr fuktioniert.

Die Meldungen von Windows habe ich am Anfang des Threat gepostet.

Kann ich da irgendwas einstellen?

Ich habe nichts verändert.

Gruß

Hmm, keine ahnung. Spiel schonmal neu installiert?

Ja schon oft, aber hilft nicht.:heulen:

Ich danke Dir auf jeden Fall für Deine Hilfe. Alles wieder sauber.

Alles funktioniert wieder (mit Ausnahme):heulen:

Kann ich die ganzen Programme einfach löschen? Oder muss ich sie deinstallieren?

Gruß Nova82

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Hallo Schrauber.

Vielen Vielen Dank für deine Hilfe.

:crazy::crazy::crazy::crazy::crazy::crazy:

Das Spiel funktioniert auch seit heute auf einmal wieder. Ein Wunder. Auf ein mal. Ich hab nichts gemacht.

:crazy::crazy::crazy::crazy::crazy::crazy:

Alles super. Alles gut!!!!!!!!!

Aber der Rechner braucht nun länger bei Hochfahren.

Kann ich da was ändern?

Gruß Nova82